Hi Team,
We have two questions related to AI Agents and would appreciate your guidance.
1. Restricting users to access only specific agents
We have multiple AI Agents within a single Space in our Elastic environment, for example:
-
APAC Agent
-
EU Agent
-
Global Agent
We would like to restrict agent access based on the user's role/geography. For example:
-
APAC users → should have access only to the APAC Agent
-
EU users → should have access only to the EU Agent
-
Global users → should have access to all agents
For example, when an APAC user logs in, we would like only the APAC Agent to be displayed/available to the user, while the EU and Global Agents should not be displayed or accessible.
Is it possible to achieve this?
2. A2A Authentication and User Authorization
We are also evaluating the Agent-to-Agent (A2A) integration, where an external application/agent invokes an Elastic AI Agent.
In this scenario, we would like to understand whether the user's Elasticsearch roles/permissions can be applied to the A2A request.
For example, if an external agent invokes our Elastic AI Agent on behalf of a user, can Elastic validate the user's identity and Elasticsearch roles and ensure that the user can access only the data they are authorized to access?
In other words, we would like to ensure that the A2A integration does not bypass the existing Elasticsearch/Kibana authorization and that the user's permissions are enforced when the AI Agent accesses Elasticsearch data. We will be using elastic A2A server to expose the agents to other agents.
Could you please confirm whether these scenarios are supported and, if so, provide guidance on the recommended configuration/architecture?
Thanks in advance for your help.