Create a passport profile
Define a reusable identity template that establishes the identity, capabilities, and security constraints assigned to an agent when it is deployed. The template ensures agents are consistently configured and governed across environments.
Create a profile
In the AI Trust Manager main menu, select Governance > Passport profiles > Create profile.
Specify a unique Profile name to identify your passport profile.
Define the Capabilities that agents using this profile are permitted to access or consume.
Add the Egress targets for the external destinations/domains that agents using this profile are permitted to connect to.
Define the Max Request Size (bytes) an agent can send.
Select mTLS required if mutual TLS (mTLS) authentication is required for agent communications.
Select Streaming enabled if the agent is permitted to use streaming connections for requests or responses.
Specify Constraints that define the deny-lists, rate limits, and kill-switch controls that restrict agents using this profile and help prevent unauthorized access, excessive usage, or unsafe behavior.
Specify Blocked egress, external destinations that agents are prohibited from accessing.
Specify Blocked ingress, incoming sources or connections that agents are prohibited from receiving.
Define the Allowed namespaces in which agents using this profile are permitted to operate.
Define Rate Limits for agent usage by setting the maximum number of requests per minute and concurrent connections.
Requests / min: Define the maximum number of requests an agent can make per minute.
Max concurrent connections: Define the maximum number of simultaneous connections an agent can maintain.
Define the Max payload (bytes), maximum size of data an agent can send or receive in a single request.
Select Data exfiltration blocked to block any unauthorized or potentially sensitive data transfer is detected.
Select Suspended to temporarily suspend the agent to prevent further activity.
Select Killed to terminate the agent immediately.
Select the Policies to be assigned to this profile. Agents bound to the profile automatically inherit and enforce the selected policies during runtime.
After specifying all the required information for the passport profile, select Create profile.