Maybe I just lack the experience but I don't understand what situation this helps with. Is choosing access roles really such a common process that you need to automate it? I'm not seeing how this helps security at all if the user can just tell it what you need to access. Who are the users? Agents, employees, or customers?
I agree completely. I struggled throughout the post on how this is useful. If the role catalog is so vast that natural language processing is needed to filter them, I would consider addressing this from a different angle. Maybe RBAC is the wrong approach and other methods would lend itself better to the usecase? Hard to say.
On a larger scale I suspect we’re heading in a dangerous territory if AI for IAM is overshadowing fundamentals. I may be judging the post harshly, but more info on what is being solved here would be nice at least.
Maybe I just lack the experience but I don't understand what situation this helps with. Is choosing access roles really such a common process that you need to automate it? I'm not seeing how this helps security at all if the user can just tell it what you need to access. Who are the users? Agents, employees, or customers?
I agree completely. I struggled throughout the post on how this is useful. If the role catalog is so vast that natural language processing is needed to filter them, I would consider addressing this from a different angle. Maybe RBAC is the wrong approach and other methods would lend itself better to the usecase? Hard to say.
On a larger scale I suspect we’re heading in a dangerous territory if AI for IAM is overshadowing fundamentals. I may be judging the post harshly, but more info on what is being solved here would be nice at least.
Great experiment, though I was hoping to see how it held up against prompt injection and malicious actors.