A developer notices that not all agents should have access to sensitive customer information.

Comprehensive and Detailed Explanation:

Fusion’s role-based access controls (RBAC) are the definitive method for managing agent access to sensitive information. By configuring RBAC, developers ensure that each agent’s permissions mirror those of the intended users, preventing unauthorized data access or manipulation.

Oracle’s documentation states:

“Role-based access control is enforced at both the user and agent levels, ensuring that data exposure aligns strictly with security policies and user responsibilities within the enterprise.”

(Reference: Oracle Fusion Security Administration Guide, 2024, p. 12-14)

System prompts and folder permissions provide context or content restrictions, not security enforcement at the data level.

Practical takeaway:Always audit and configure RBAC settings when deploying agents for sensitive tasks.