Permission-Aware RAG: Identity and Access Management (IAM)-Based Access Filtering in Multi-Resource Environments — Jeong & Lee (2025)

1 More Paper · Sep 27, 2026 · 1h 18m · transcript

Retrieval-Augmented Generation (RAG) enhances large language models (LLMs) by integrating external knowledge sources, which significantly improves response accuracy and contextual relevance. However, most existing RAG research implicitly assumes that all retrieved content is equally accessible to any user. This approach fails to address the complex, fine-grained access control required in enterprise environments in which data originates from multiple, independently governed sources. Attempting to merge heterogeneous authorization models, such as RBAC and ABAC, often leads to significant…