Who Decides Which Data an AI Agent Can Access?
The data owner and classification policy should, per agent and destination, with the decision recorded; in practice the builder or an inherited login does.
Research topic
data ownership
Research on data ownership: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.