Guardrails (RAI Content-Filter Policies)
Guardrails are Responsible AI (RAI) content-filter policies that control what content is allowed through model deployments and agents in Microsoft Foundry.
When to Use
- Create or manage a guardrail (content-filter policy) for a Foundry project
- Attach a guardrail to a hosted agent, model deployment, or toolbox → guardrail-attach.md
- Create a guardrail via REST API → guardrail-api-create.md
Default Path: Portal
By default, guide the user to the Foundry portal to create guardrails interactively.
Construct and show this URL to the user:
https://ai.azure.com/nextgen/r/{encodedSubId},{resourceGroup},,{accountName},{projectName}/build/guardrailsWhere:
{encodedSubId}— subscription GUID as URL-safe base64 (no=padding):python -c "import base64,uuid;print(base64.urlsafe_b64encode(uuid.UUID('<SUBSCRIPTION_ID>').bytes).rstrip(b'=').decode())"{resourceGroup}— resource group name{accountName}— AI Services account name{projectName}— Foundry project name
If resource details are unknown, use the generic URL and instruct the user to navigate manually:
https://ai.azure.comThen navigate: select your project → Build → Guardrails → Create Guardrail.
Use the API path (guardrail-api-create.md) only when the user explicitly asks for programmatic/CLI/CI/CD creation.
Intervention Points
| Intervention Point | Models | Agents (Preview) | Toolbox |
|---|---|---|---|
| User input | Yes | Yes | No |
| Tool call | No | Yes | Yes |
| Tool response | No | Yes | Yes |
| Output | Yes | Yes | No |
Tool call and tool response are agent-only (and toolbox). An agent's guardrail fully overrides its model deployment's guardrail at all intervention points.
Default Guardrails
| Policy Name | Description | Editable |
|---|---|---|
Microsoft.Default |
Base default policy (4 categories) | No |
Microsoft.DefaultV2 |
Updated default with jailbreak + protected material | No |
| Custom policies | User-created policies | Yes |