Restrict index lifecycle operations (create, delete, replace, or re-point an endpoint or alias) to privileged identities using fine-grained access controls.
Enforce Document-Level Access Controls on All Query Paths
Apply document- and field-level access control policies to every query path, including similarity, hybrid, and metadata-filtered queries, to prevent unauthorized exposure or inference.
Restrict Embedding Model Endpoints to an Approved List
Ensure that content is vectorized only by embedding model endpoints the organization has approved, so that content is not disclosed to, or embeddings altered by, an unapproved endpoint.