Skip to content

Conversation

@qutreson
Copy link
Contributor

@qutreson qutreson commented Jan 21, 2026

Summary

  1. Only enable the Setup action from the Agent List and Agent Card if the user has rights to manage this agent (via permissions or via Agent Access Control)
  2. Removing the logic to insert the current owner on agent creation if none is found because this is handled via the server during agent creation already. Also, this code was inserting the Agent Access Control for all companies while the user might have had agent creation permissions in one company.
  3. Use a new server utility when inserting Access Control for an agent. This allows users with only Configure Agent Access Control and without SUPER, SECURITY or AGENT - ADMIN to do such changes without explicitly having Access Control modification permissions. They can only do this on the agent they manage (and cannot do this on other agents or other user types).

Backport of !6082

Work Item(s)

Fixes AB#617434
AB#617745

qutreson and others added 7 commits September 8, 2025 17:38
…t Access Control without SUPER scenarios (#6082)

<!-- Thank you for submitting a Pull Request. If you're new to
contributing to BCApps please read our pull request guideline below
* https://github.com/microsoft/BCApps/Contributing.md
-->
#### Summary <!-- Provide a general summary of your changes -->
1. Only enable the Setup action from the Agent List and Agent Card if
the user has rights to manage this agent (via permissions or via Agent
Access Control)
2. Removing the logic to insert the current owner on agent creation if
none is found because this is handled via the server during agent
creation already. Also, this code was inserting the Agent Access Control
for all companies while the user might have had agent creation
permissions in one company.
3. Use a new server utility when inserting Access Control for an agent.
This allows users with only Configure Agent Access Control and without
SUPER, SECURITY or AGENT - ADMIN to do such changes without explicitly
having Access Control modification permissions. They can only do this on
the agent they manage (and cannot do this on other agents or other user
types).

#### Work Item(s) <!-- Add the issue number here after the #. The issue
needs to be open and approved. Submitting PRs with no linked issues or
unapproved issues is highly discouraged. -->
Fixes
[AB#617434](https://dynamicssmb2.visualstudio.com/1fcb79e7-ab07-432a-a3c6-6cf5a88ba4a5/_workitems/edit/617434)
@qutreson qutreson changed the title Private/qutreson/27.x/617560 permission [27.x][Agent] Additional changes to support Agent - Admin or Configure Agent Access Control without SUPER scenarios Jan 21, 2026
@github-actions github-actions bot added this to the Version 28.0 milestone Jan 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants