identity.agent.role_masking.enabled The identity.agent.role_masking.enabled property enables or disables the agentic role masking feature during runtime. When enabled, it limits the roles that an agent can use, reducing the risk of privilege escalation and accidental data exposure.
trueThe answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property controls whether role masking is applied to agents, restricting their access to only necessary roles during task execution. |
|---|---|
| What area does it affect? | Access control |
| What does the default mean? | The default value is "true", which means this behavior is enabled by default. |
| When should you review it? | Review this property when configuring agent roles or addressing security concerns related to user access. |
Raw metadata from the property record.
| Property name | identity.agent.role_masking.enabled |
|---|---|
| Sys ID | 66e37226ff1032107cc9ffffffffff86 |
| Type | boolean |
| Application | Global |
| Default value | true |
| Description | enable or disable agentic role masking feature during runtime |
| Updated | 2025-10-03 03:48:56 |
Official references and nearby text excerpts where this property appears.
identityOther properties in the same namespace.
identity.impersonation.history.enabled
This property controls whether impersonation session details are recorded in the Impersonation History table,
identity.mi.buffer.size
This property configures the buffer size used for machine identity management, impacting how identity data is
identity.mi.enabled
This property determines whether the Machine Identity Management feature is enabled, impacting how machine ide
identity.mi.max.volume.allowed
This property defines the upper limit of records in the Machine Identity Request table, directly impacting the
identity.mi.rate_limiting_dashboard_announcement_visible
This boolean property controls the visibility of the rate limiting announcement on the dashboard, defaulting t
identity.mi.sampling.block.ratio
This property configures the sampling ratio for machine identity randomization, impacting how identities are p
identity.mi.sampling.enabled
This property determines whether the Machine Identity Sampling feature is active, influencing how machine iden
identity.mi.sampling.per.window.threshold
This property defines the maximum number of machine identities that can be sampled in a given time window, inf