# Who Gave the Agent Permission?

> A customer refund shows why agent ownership must reach the individual action—and why one approval cannot cover every decision.

[Canonical HTML page](https://trustcyber.ca/insights/ai-agent-decision-rights/)

- Author: Junior Williams
- Type: Insight brief
- Published: 2026-09-27
- Modified: 2026-09-27
- Topics: AI governance, Agentic AI, Enterprise architecture

Consider a customer-service agent asked to resolve a disputed invoice. It can read the account, calculate a refund, write an apology, and send the money. Those steps look like one task to the customer. Inside the business, they cross several different boundaries of authority.

The support manager may own the customer relationship. Finance may control refunds. A service owner may govern access to payment records. Giving the agent an owner leaves an important question unanswered: which of those people can authorize each part of the work?

## Follow the refund

In this illustrative workflow, reading an account is routine for an authorized support worker. Preparing a proposed adjustment is also routine. Issuing the adjustment creates a financial consequence. Changing the recipient’s bank details introduces another decision, even if the agent presents it as a convenient way to finish the same request.

**One request, several decisions**

| Proposed action | Decision owner | Boundary to record |
| --- | --- | --- |
| Read the account | Account-data owner | Approved records and purpose |
| Prepare a refund | Support process owner | Draft only; no funds move |
| Issue the refund | Authorized financial approver | Amount, account and destination |
| Change payment details | Payment-service owner | Separate verification and approval |

The titles in this example will differ by organization. The useful exercise is to follow one real transaction and identify where authority changes hands. That often reveals a gap that an organization chart misses: everyone supports the use case, but nobody has approved the precise action the software can perform.

## Approval needs an object

“Approved for customer service” gives a team a purpose. An executable permission needs something more concrete: this action, against this resource, under these conditions. For a refund, that could mean an identified account, a maximum amount, an approved destination, and a limited period in which the instruction remains valid.

If the agent changes the amount or finds a different payment route, the system must check whether the existing permission still covers the action. The person reviewing it needs to see the proposed transaction in a form they can understand. A button labelled Approve is of little use when the actual payload is hidden behind a conversational summary.

> **A useful workshop question**: If the agent performs this action incorrectly, whose decision would we examine? Give that person authority over the relevant boundary before launch.

Microsoft’s guidance on agent roles and responsibilities provides an organizational starting point. Translating those roles into specific decisions remains local work. A small organization may combine several responsibilities in one person; a regulated enterprise may distribute them. In both cases, the approval record should identify the person and the scope of their decision.

## Decide who can stop the work

Operational authority deserves the same attention as launch approval. A service operator should know when they may suspend the agent, whom to contact about an exception, and which owner can authorize a restart. Waiting for a steering committee is an unsuitable response to an agent that is issuing incorrect refunds.

Before the first production transaction, keep a short record of the allowed actions, approval thresholds, resource owners, exception route, and stop authority. Revisit it when a new tool changes what the agent can do. That record gives the next operator a way to answer the question the original sponsor may never hear: who gave this agent permission?

## Selected primary sources

- [Microsoft Learn: Agent roles, responsibilities, and decision rights](https://learn.microsoft.com/en-us/agents/center-of-excellence/roles-responsibilities)
- [Microsoft Security: Runtime authorization beyond identity](https://techcommunity.microsoft.com/blog/microsoft-security-blog/authorization-and-governance-for-ai-agents-runtime-authorization-beyond-identity/4509161)