For healthcare and other sensitive-data use cases, RBAC needs to apply consistently at both the data and agent level. An agent should have its own identity, owner, approved business purpose, and clearly defined permissions. It should inherit the same controls applied to users and data products, including row-level access, column-level access, masking, and least-privilege access to PHI. We also need full auditability of what data the agent accessed, why it accessed it, what response or action it produced, and whether human review was required.
