As organizations move to implement generative AI solutions, securing these applications with proper access controls remains a critical challenge. In this session, we will demonstrate how to design and implement enterprise-grade generative AI applications that maintain stringent security standards. Through a real-world insurance claims processing example, we'll explore how to implement fine-grained access controls for AI agent workflows, combine role-based and attribute-based access control, and seamlessly integrate authentication flows. Attendees will learn practical patterns for building secure AI applications that respect user permissions and data access boundaries, while maintaining the integration of agent frameworks that make generative AI so powerful. This technical deep-dive will include building block fundamentals, architecture patterns, and lessons learned from real customer implementations.