Controlling Agent access to Tools and Tool access to Data Operations

[smithsonian]

I am building an agentic workflow.  This is a multi agent workflow - Plan, Reason, Act and Synthesize. Each agent has its own access to tools to take ACTIONS on data. Some of these agents are READ only, some can WRITE/UPDATE

All data is resident within Unity Catalog when the initial access can be granted. 

When the workflow executes and agents come up with dynamic plans I want to control the type of ACTIONS take on the data based on policy contraints. These are runtime Actions I want to control and monitor.  Some agents have read only access, some can write (to specific datasets), some can move data (under some conditions). 

Is there a best practices approach to control agentic worflows at runtime?