Topic starter
11/06/2026 10:47 pm
TL;DR: Only 5% of companies are generating substantial value from AI, according to Opnova citing BCG research, while agentic AI already accounts for 17% of AI value in 2025 and is projected to reach 29% by 2028. The governance gap widens because autonomous workflow execution changes who acts, when access is needed, and how accountability can be enforced.
Editorial analysis by NHI Mgmt Group, based on content published by Opnova: “The 5% Club: Why Agentic AI Is the Dividing Line Between Leaders and Left-behinds”.
By the numbers:
- Only 5% of companies are generating substantial value from AI, according to Opnova.
- Agentic AI already accounts for 17% of AI value in 2025, according to Opnova.
- By 2028, agentic AI will reach 29% of AI value, according to Opnova.
Key questions
Q: What breaks in identity governance when agentic AI starts running business workflows?
A: Periodic access review breaks down because the agent can request, use, and release access inside a single execution cycle.
Q: Why does agentic AI complicate fraud compliance work?
A: Because compliance no longer reviews only model outputs.
Q: What are the signs that AI agent permissions are too broad in enterprise environments?
A: Common warning signs include agents accessing tools they do not need, performing irreversible actions without confirmation, retrieving cross-tenant or unrelated data, and acting with long-lived credentials.
Practitioner guidance
- Map agentic workflow entry points Identify the business workflows where agents can initiate actions, especially finance, IT, security, and compliance processes.
- Replace standing access with task-scoped delegation Limit agent permissions to the exact workflow step being executed and remove standing entitlements that outlive the task.
- Define accountability for agent decisions Assign ownership for each autonomous workflow path, including who approves the policy, who reviews the outputs, and who investigates misuse or drift.
Bottom line: Agentic AI changes the identity problem by making access usage dynamic, event-driven, and harder to certify after the fact.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 5 days ago by NHI Mgmt Group
12/06/2026 7:06 am
Agentic AI creates an identity governance gap because access is now exercised by runtime decision-making systems rather than stable human operators. BCG’s value data shows why this matters commercially, but the governance issue is structural. Traditional IAM assumes a known subject, a known request path, and a reviewable entitlement state; agentic systems disrupt all three. Practitioners should treat the widening gap as an identity design problem, not an AI enthusiasm problem.
A few things that frame the scale:
- Nearly 60% of IT leaders cite restrictive cost and complexity as a weakness of legacy identity governance, according to the 2025 State of Identity Governance Report.
A question worth separating out:
Q: How should IAM teams govern autonomous workflows before they scale?
A: They should define the decision points, approval gates, and ownership boundaries before agent deployment, then restrict access to the smallest useful workflow scope. The objective is to govern execution paths, not just identities, so that each action remains attributable and reviewable.
👉 Read our full editorial: Agentic AI is widening the identity governance gap for enterprises
This post was modified 5 days ago by NHI Mgmt Group