Agent A may read customer records, while Agent B may submit approved refunds. Which identity design best limits lateral impact?

1. One tenant-wide administrator identity shared by all agents
2. Let agents declare their own permissions in generated text
3. Trust every peer because it is inside the same network
4. Separate scoped identities and enforce permission boundaries at each tool or resource