Watch the explanation. Practice the skill.
Production RAG: authorization, hybrid search, and grounding
Retrieve only information the user is allowed to receive.
Captions appear here during playback.
Production RAG: authorization, hybrid search, and grounding
Retrieve only information the user is allowed to receive.
Video playback is unavailable. Read the descriptive transcript below, go directly to practice, or open the video file.
Source-based teaching example · Fictional data · Reviewed 2026-10-03. Microsoft Mark · locally synthesized. On a small screen, use fullscreen for diagram details or read the transcript.
Read the descriptive transcript
0:00 · What you will learn
Retrieve only information the user is allowed to receive.
What appears on screen
Retrieve only information the user is allowed to receive.
0:06 · The idea
Enforce access rules before restricted content reaches the model. Check answer citations against the sources actually supplied. Instructions inside a document do not grant permission.
What appears on screen
Enforce access rules before restricted content reaches the model. Check answer citations against the sources actually supplied. Instructions inside a document do not grant permission.
0:21 · One useful term
Authorized retrieval. Fetching information only within the requester’s permitted access.
What appears on screen
Fetching information only within the requester’s permitted access.
0:30 · A worked example
Two users have different access to a shared collection. Search filters by permission before scoring. A poisoned document asks for another user’s record, but that instruction cannot expand access.
What appears on screen
Two users have different access to a shared collection. Search filters by permission before scoring. A poisoned document asks for another user’s record, but that instruction cannot expand access.
0:45 · Your turn to think
Is filtering the final answer enough if restricted text already reached the model? Pause and decide before continuing.
What appears on screen
Is filtering the final answer enough if restricted text already reached the model? Pause the video if you need more time.
1:04 · Why this answer works
No. Protect the earlier data boundary. Reject citations to sources that were not validly retrieved.
What appears on screen
No. Protect the earlier data boundary. Reject citations to sources that were not validly retrieved.
1:14 · Check 1
Filter access before generation.
What appears on screen
Filter access before generation.
1:19 · Check 2
Check citation IDs and supporting passages.
What appears on screen
Check citation IDs and supporting passages.
1:25 · Check 3
Stop and repair any information leak.
What appears on screen
Stop and repair any information leak.
1:31 · Now try a different case
Open the lesson and try its different practice case. Use every check in the full task. Watching alone does not mark the lesson complete.
What appears on screen
Open the lesson Try the new case Check and revise The full task and its requirements are in the linked lesson.
Watching explains the example. Complete the lesson practice to check what you can do. Explore all visual lessons →