Governing AI agents at scale with Unity Catalog
Summary
Databricks addresses the challenge of governing thousands of autonomous AI agents by extending its Unity Catalog and introducing the Unity AI Gateway. This infrastructure provides a unified approach to managing agent access, data interactions, costs, and interoperability. Unity Catalog, which has governed enterprise data since 2021, now covers LLMs, MCP servers, skills, and agents. The Unity AI Gateway acts as an enforcement fabric, evaluating every model call and tool invocation against policies defined in Unity Catalog. Key pillars include delegated access via "on-behalf-of token passing" and Service Policies, data-centric governance with complete audit trails and data quality monitoring, cost intelligence through usage-tracking and budgets, and an open, interoperable design supporting diverse frameworks and model providers.
Key takeaway
For AI Architects or MLOps Engineers scaling AI agent deployments, you must prioritize a unified governance framework to mitigate risks and accelerate innovation. Implement solutions that provide end-to-end identity flow, data-centric auditability, and granular cost intelligence across diverse agent frameworks and model providers. This approach ensures compliance and trust, preventing both unmeasurable risk and talent attrition due to overly restrictive environments.
Key insights
Effective AI agent governance requires controlling access and monitoring actions, not just reviewing potential behaviors.
Principles
- Agents must operate within clearly defined permission boundaries.
- Agent behavior is almost entirely determined by the data it accesses.
- Governance should be a platform property, not framework-specific.
Method
Govern agents by controlling access and monitoring actions, using unified permissions, audit trails, and cost tracking across all AI assets.
In practice
- Register external MCP servers in Unity Catalog for centralized governance.
- Define Service Policies as UC functions to control specific tool calls.
- Utilize inference tables and audit logs for complete agent traceability.
Topics
- AI Agent Governance
- Unity Catalog
- Unity AI Gateway
- Data Governance
- Access Control
- Cost Management
- MLflow Tracing
Best for: CTO, VP of Engineering/Data, Executive, AI Architect, MLOps Engineer, Director of AI/ML
Related on AIssential
Editorial summary, takeaway, and curation by AIssential. Original article published by Databricks.