Microsoft/bcquality
1
0
Fork 0
mirror of https://github.com/microsoft/BCQuality.git synced 2026-10-05 14:46:55 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
bcquality/community/knowledge/agents/show-can-create-agent-does-not-block-code-create.md
Jesper Schulz-Wedde 2b5550c346
Some checks failed
Validate knowledge index / validate-index (push) Has been cancelled
Details
Validate AL review fixtures / validate-review-fixtures (push) Has been cancelled
Details
Validate frontmatter and structure / validate (push) Has been cancelled
Details
Improve partner onboarding and documentation navigation (#174) 
Lead with a complete plugin quick start and add task-oriented usage, troubleshooting, customization, and contribution guides. Preserve the broader plugin framing, correct conflicting contract guidance, support Agents folder reviews, and align repository validation. Convert existing sample references to clickable links without changing knowledge rules.

Co-authored-by: Jesper Schulz-Wedde <jesper.schulzwedde@microsoft.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-09-09 17:31:03 +02:00

1.4 KiB
Raw Blame History

bc-version domain keywords technologies countries application-area
28..
agents
showcancreateagent
agent-discovery
agent-create
administrator
agent-configuration-rights
al
w1
all

ShowCanCreateAgent only hides UI create, not programmatic create

Description

IAgentFactory.ShowCanCreateAgent controls whether the type appears in the in-client create UI. Returning false does not stop Agent.Create from AL. From 28.1, non-admins can discover extension agents unless this method (and agent configuration rights) restrict them. Models treat a false return as a hard create lock.

Best Practice

Use ShowCanCreateAgent to decide discovery. If only agent administrators should see the type, return Agent System Permissions.CurrentUserHasCanManageAllAgentsPermission. Enforce extra policy inside your own create API. Never assume UI hiding blocks code.

See sample: show-can-create-agent-does-not-block-code-create.good.al.

Anti Pattern

Returning exit(false) from ShowCanCreateAgent and then documenting that instances cannot be created, while page actions or other apps still call Agent.Create. Detection signal: ShowCanCreateAgent always false with no matching guard on programmatic create.

See sample: show-can-create-agent-does-not-block-code-create.bad.al.