AI Agent Role Based Access 2026

Regular users can use the Agent to look up documents and write emails. Admins can also have the Agent modify configurations, delete logs, and manage users. Permission controls keep the tools clearly separated.

💡 What You Will Learn

Regular users can use the Agent to look up documents and write emails. Admins can also have the Agent modify configurations, delete logs, and manage users. Permission controls keep the tools clearly s

roles:
  viewer:
    tools:
      - search_docs
      - get_info
  editor:
    tools:
      - search_docs
      - get_info
      - write_doc
      - send_email
  admin:
    tools:
      - "*"  # 

def get_available_tools(user_role: str) -> list:
    role_tools = {
        "viewer": [search_docs, get_info],
        "editor": [search_docs, get_info, write_doc, send_email],
        "admin": ALL_TOOLS
    }
    return role_tools.get(user_role, role_tools["viewer"])

Summary

ROLE_PERMISSIONS = {
    "viewer": {"search", "get"},
    "editor": {"search", "get", "create", "update"},
    "admin": {"search", "get", "create", "update", "delete"},
}

def get_allowed_tools(user_role):
    permissions = ROLE_PERMISSIONS.get(user_role, set())
    return [t for t in ALL_TOOLS if t.permission in permissions]