Glossary Control and oversight
Source access permissions
Retrieval must respect the access permissions of the requesting person.
What is Source access permissions?
Source access permissions determine who may read a document or dataset. In a RAG application they must also apply during search, retrieval and transfer to the model. A broadly authorised service account does not by itself protect individual users.
Test both allowed and denied access with different roles. Include revoked permissions, caches and shared indexes.
Sources for context: OWASP LLM08:2025
Related terms
More terms from the subject area Control and oversight.
From the term into the substance
The link leads to the place on the website where the term becomes practical; the overview shows every term in the glossary by subject area.
Cite this term
For reports, policies or internal documents; the link leads directly to this term page.
“Source access permissions”. Versatile AI Risk Assessment, glossary of AI risk analysis, as of September 2026. https://www.versatile-ai-risk-assessment.com/en/wissensbasis/glossary/quellenberechtigungen/