Most enterprise use cases also have strong authz requirements. You can't really maintain authz while fine tuning (unless you do a separate fine-tune for each p

Most enterprise use cases also have strong authz requirements. You can't really maintain authz while fine tuning (unless you do a separate fine-tune for each permission set.) So RAG is the way to go, there.