Topic starter
25/06/2026 1:18 am
TL;DR: AI agents are already in production at 72% of organisations, yet 92% report limits to safely scaling them, according to JumpCloud's Agentic IAM Pulse Report. The gap is not agent capability but governance depth: without formal identity records, revocation paths, and policy enforcement, agentic IT expands risk as fast as it reduces routine work.
Editorial analysis by NHI Mgmt Group, based on content published by JumpCloud: “How to Reclaim Your IT Leadership Capacity With Governed Agentic AI”.
By the numbers:
- 72% are already running AI agents in production.
- 92% report limits to safely scaling their use of AI agents.
Key questions
Q: What breaks when AI agents are given access without identity governance?
A: What breaks is accountability.
Q: Why do AI agents create new risk in non-human identity management?
A: AI agents create risk because they operate as software identities with delegated authority, but many organisations do not track them with the same discipline applied to users or service accounts.
Q: How can security teams tell whether agentic IT is actually governed?
A: A governed environment can show each agent’s owner, approved scope, current access, policy basis, and revocation path.
Practitioner guidance
- Define every production agent as a governed identity Create an identity record for each AI agent with a named owner, approved purpose, scoped permissions, and offboarding trigger before production use.
- Bind agent access to enforceable policy Ensure each agent’s access is granted through policy rather than ad hoc entitlements, and that scope changes update the governance record automatically.
- Build rapid revocation into the agent lifecycle Make revocation and disablement immediate and operationally tested so access can be withdrawn when ownership, purpose, or trust changes.
Bottom line: Agentic IT becomes a governance problem the moment AI agents are allowed to act with real permissions and no corresponding identity record.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 10:37 am
Agentic IT exposes a governance lag, not a capability shortage. The article shows that most organisations are already using AI agents while far fewer can scale them safely. That means the real constraint is not whether the work can be automated, but whether the identity layer can keep pace with the automation footprint. The practitioner conclusion is simple: governance maturity now determines whether agentic IT reduces load or multiplies risk.
A few things that frame the scale:
- 67% of organisations still rely heavily on static credentials despite the risks they pose to agentic AI deployments, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: What should teams do if they discover shadow AI in the business?
A: Teams should first identify who owns the tool, what data it touches, and which identities it uses. Then they should either bring it under policy and lifecycle control or remove access to enterprise data until governance is in place. Discovery without containment simply confirms the scale of the gap.
👉 Read our full editorial: Agentic IT governance is outpacing enterprise control models