System Design · Microsoft · Hard
You are asked to design the API for an enterprise AI copilot that many separate organizations (tenants) use from shared infrastructure. Authenticated end users submit prompts, receive model answers, and can optionally call organization-specific tools or read from knowledge bases that belong to their tenant alone. Security is the central theme of this exercise rather than a secondary concern. Your design has to address the API surface, how callers authenticate, how…
Checking your access…