A Generative AI Engineer is deploying an agent using Mosaic AI Model Serving.

For agents deployed through Model Serving, Databricks supports automatic authentication passthrough for declared resources. The engineer records the agent’s dependencies through the resources parameter when logging the model. During deployment, Databricks checks the deployer’s access, creates a service principal for the agent model version, grants the required resource access, and supplies short-lived credentials. Credential rotation is handled automatically. Supported dependencies include Vector Search indexes, SQL warehouses, and Unity Catalog functions. This approach avoids embedding secrets in source code or recording authentication tokens as model artifacts. Permissions on the serving endpoint govern access to that endpoint; they do not independently establish all downstream resource permissions. All required dependencies, including relevant underlying resources, must be declared correctly. Databricks documentation