Topic starter
25/06/2026 1:18 am
TL;DR: The real issue in JumpCloud's Agentic IAM Pulse Report is governance depth, not agent capability: 72% of organisations already run AI agents in production, but 92% still cannot scale them safely. Identity records, revocation paths, and policy enforcement have to catch up before agentic IT can reduce work without expanding risk.
Editorial analysis by NHI Mgmt Group, based on content published by JumpCloud: “How to Reclaim Your IT Leadership Capacity With Governed Agentic AI”.
By the numbers:
- 72% are already running AI agents in production.
- 92% report limits to safely scaling their use of AI agents.
Key questions
Q: Why do AI agents create new risk in non-human identity management?
A: AI agents create risk because they operate as software identities with delegated authority, but many organisations do not track them with the same discipline applied to users or service accounts.
Q: How can security teams tell whether agentic IT is actually governed?
A: A governed environment can show each agent’s owner, approved scope, current access, policy basis, and revocation path.
Q: What breaks when AI agents are given access without identity governance?
A: What breaks is accountability.
Practitioner guidance
- Define every production agent as a governed identity Create an identity record for each AI agent with a named owner, approved purpose, scoped permissions, and offboarding trigger before production use.
- Bind agent access to enforceable policy Ensure each agent’s access is granted through policy rather than ad hoc entitlements, and that scope changes update the governance record automatically.
- Build rapid revocation into the agent lifecycle Make revocation and disablement immediate and operationally tested so access can be withdrawn when ownership, purpose, or trust changes.
Bottom line: Agentic IT becomes a governance problem the moment AI agents are allowed to act with real permissions and no corresponding identity record.
Glossary terms: Agentic IT, Identity Record, Shadow AI, Governed Summary
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
25/06/2026 10:37 am
Agentic IT exposes a governance lag, not a capability shortage. The article shows that most organisations are already using AI agents while far fewer can scale them safely. That means the real constraint is not whether the work can be automated, but whether the identity layer can keep pace with the automation footprint. The practitioner conclusion is simple: governance maturity now determines whether agentic IT reduces load or multiplies risk.
A few things that frame the scale:
- 67% of organisations still rely heavily on static credentials despite the risks they pose to agentic AI deployments, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: What should teams do if they discover shadow AI in the business?
A: Teams should first identify who owns the tool, what data it touches, and which identities it uses. Then they should either bring it under policy and lifecycle control or remove access to enterprise data until governance is in place. Discovery without containment simply confirms the scale of the gap.
👉 Read our full editorial: Agentic IT governance is outpacing enterprise control models