The era of autonomous AI agents making critical decisions in production is here, bringing with it significant risks. Incidents of agents destructively wiping databases or deleting vast amounts of data are no longer theoretical, even when agents operate within their granted permissions. The core issue: a lack of control over which tools agents can access and no record of their actions.
Databricks is addressing this gap with new capabilities in its Unity Catalog, aimed at securing agent actions. The platform now extends governance to all connected tools, mirroring how data itself is managed.
The problem: Unrestricted access, invisible actions
Traditionally, if an AI agent was authorized to connect to a toolset, it had access to all available functions. This meant no fine-grained control, like restricting write access or limiting administrative functions to specific users. Crucially, when things went wrong, there was no audit trail.