Agent operability without governance is a liability. Fabric’s platforms are built so enterprises can hand agents real operational authority with precise control over what that authority covers.
Governance that keeps authority accountable
Machine identity
Agents authenticate as first-class identities via OAuth, with support for service accounts and token-based access. No shared human credentials, no screen-scraping.
Tool-level permission scoping
Access to Fabric MCP tools is governed per agent identity: on Xytech, OAuth grants are scoped to the individual tool level; on Origin Studio, tool access maps to the identity’s Studio permission groups. Grant an agent the ability to create media orders but not approve invoices; to read title metadata but not modify lifecycle states. Permissions map to the same RBAC model that governs human users.
Auditability
Agent actions are logged and attributable to their identity, giving operations and compliance teams a complete trail of what was executed, by which identity, under which grant.
Rights and security boundaries
Media workflows carry rights complexity and premium-content obligations. Fabric supports governed access tiers — from public documentation to partner-provisioned tenants to brokered operational access — so agent capability never outruns contractual and security boundaries.
Approval layers
Where full autonomy isn’t appropriate, workflows can require human approval at defined checkpoints — controlled autonomy rather than all-or-nothing delegation.
Certified foundation
Fabric is ISO/IEC 27001 certified, with enterprise-grade security architecture across the platform.
