PRODUCTION SCENARIO
A Generative AI Engineer deploys an agent that works in the notebook, but every request then fails with a permission error when it queries the Databricks AI Search index. The engineer who deployed it holds SELECT on that index.
What should the engineer check first?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: Whether the agent was logged with the index declared in its resources
Automatic authentication passthrough is wired up at logging time: the resources parameter declares Databricks-managed resources such as an AI Search index, and Databricks then verifies the deployer's access and injects short-lived credentials for a generated service principal. That service principal is granted read access automatically and does not appear in API or UI listings, so nobody can grant it SELECT by hand. Workload size and sync mode change throughput and freshness, not credentials.