Enforce user-level authorization before retrieval | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Enforce user-level authorization before retrieval: What distinction decides the access design?

AIGP Understanding How to Govern AI Deployment and Use Hard

Retrieval permissions must follow the user’s authorization before confidential material reaches the model.

The question

A retailer’s demand-planning assistant retrieves regional inventory and supplier-contract text. A planner may access inventory but not contracts; retrieved text is untrusted, and outputs require review. What distinction decides the access design?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Enforce user-level authorization before retrieval. ✓
    Authorization must constrain retrieval itself; model instructions cannot substitute for permissions governing confidential supplier information.
  2. Give planners contract access when demand forecasts require additional context.
    Forecast usefulness does not establish authorization; access must reflect the planner’s approved role and data scope.
  3. Allow retrieval broadly, recording which confidential passages influence forecasts.
    Logging supports accountability but does not prevent unauthorized contract exposure during retrieval or generation.
  4. Let the model summarize retrieved text, then filter restricted content.
    Post-retrieval filtering exposes restricted content to the model and treats generation controls as an authorization boundary.
The trap
Ask whether the proposed control prevents unauthorized data retrieval or merely observes or filters it afterward.

How to remember it

Retrieval permissions must follow the user’s authorization before confidential material reaches the model.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding How to Govern AI Deployment and Use questions

Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use · Every answer, right and wrong, comes with its own explanation.