AI-103: Developing AI Apps and Agents on Azure

Azure AI Search does not provide built-in row-level or document-level security, so filtering must be implemented manually using the security filter pattern documented by Microsoft. This pattern requires: adding a filterable field to each index document that lists the group IDs (or user IDs) allowed to view that document; retrieving the group memberships of the requesting user (e.g., via Microsoft Graph or a token claim) at query time; and supplying those group IDs as an OData filter expression on the search request (such as group_ids/any(g:search.in(g, 'group_id1,group_id2'))) so that only documents matching the user's group memberships are returned in the results.