An outcome a service policy can return, alongside ALLOW and DENY, that holds a tool call until a person approves it. It applies only to MCP Services, at the input phase.
Read more: Databricks docs
In the Ultra Transcenders books
Each book explains ASK in context, with comparison tables and the common traps.
Terms in this definition
- Service policy
Guardrails on AI services are built with these Beta Unity Catalog policies, which inspect every request and response and then allow or deny it. Grants differ: they only control who may call the service.
- RETURN
Comes after the VAR definitions in DAX and holds the expression whose value the formula gives back. While debugging, pointing it at one variable for a while is a useful trick.
- Deny
An Azure Policy effect that stops any create or update request that would break the policy.
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
- MCP
Model Context Protocol, an open standard for making tools and data available to models. To use one, a Foundry agent points at a remote MCP server, naming it with a server label and giving its URL.
Related terms
- Access requests
Lets people ask for Unity Catalog privileges on an object wherever they are in Databricks, and sends each request to a configured place like email, Slack, Microsoft Teams or a webhook. It is also known as request for access.
- Admin consent workflow
Feature allowing users to ask an administrator to approve an app they cannot consent to themselves. Nominated reviewers handle the requests, yet the approver must hold a role able to grant admin consent.
- Azure Backup security PIN
Short-lived PIN, valid for five minutes, created from a Recovery Services vault's Properties. Hybrid backups through MARS, MABS or DPM ask for it before critical actions such as stopping protection with data deletion or changing the passphrase; Azure VM backups aren't covered.
- CCPA
A privacy law in California that shares with GDPR the requirement to erase a customer's personal data fully and permanently when they explicitly ask.
- Cloud security explorer
Part of Defender CSPM where you write graph queries, or start from templates, against the cloud security graph to ask about inventory, internet exposure or OS; it searches what is already known rather than scanning or capturing traffic.
- Copilot in Intune
Puts Security Copilot inside Intune's admin center. Admins can ask questions of their data in plain English, get policy and device summaries, and have device query KQL drafted for them; it consumes Security Copilot compute units, and scope tags and RBAC still apply.
- Copilot in Power BI
Power BI's generative AI helper: ask in plain language and it can write DAX, build report pages or summarise a report. Trials aren't enough; you need paid capacity, meaning Fabric F2 or above, or Power BI Premium P1 or above.
- Data Security Posture Agent
Lets admins ask questions in plain language across Exchange, Teams, SharePoint, OneDrive and Copilot interactions for quick checks before an investigation. It is a Security Copilot agent in preview inside the current DSPM and uses security compute units.