Topic starter
07/06/2026 8:32 pm
Least privilege breaks when access is no longer assigned to a stable workload. AI agents can select tools at runtime, so the access envelope is not fixed at provisioning time in the way legacy IAM assumes. That means the governance unit is no longer the workload alone, but the session path it can assemble across tools and services. Practitioners need to stop treating agent access as a static role assignment problem.
A few things that frame the scale:
- Systems with least-privileged AI access had a 17% incident rate vs 76% for over-privileged systems. Organisations failing to scope AI access properly are 4.5x more likely to experience a security incident, according to the 2026 Infrastructure Identity Survey.
- 70% of organisations grant AI systems more access than they would give a human employee performing the exact same job, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: How should security teams govern AI agents that browse and transact on behalf of users?
A: Security teams should govern AI agents as delegated actors with narrow, task-scoped permissions, not as enhanced browsers. The right model is to bind access to the specific action being performed, preserve auditability at the transaction layer, and separate machine identity from the human principal wherever possible.
👉 Read our full editorial: AI agent identity is breaking the assumptions behind least privilege
07/06/2026 10:28 pm
AI agent identity risk is an assumption-collapse problem, not just a stronger monitoring problem. Traditional IAM assumes the credential holder and the actor making the decision are the same governance subject. That assumption fails when an autonomous system inherits a human identity and executes at runtime with independent timing. The implication is that access models built around human behaviour no longer define the security boundary for agentic systems.
A few things that frame the scale:
- 53% of security leaders expect AI to run major portions of their infrastructure autonomously within the next three years, according to the 2026 Infrastructure Identity Survey.
- 19% of organisations give AI systems dramatically more access than human employees, nearly one in five granting unrestricted privilege, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: How should teams govern AI agents that act inside customer accounts?
A: Treat them as delegated non-human identities, not as ordinary customer sessions. Governance should require explicit consent, narrow authorization scope, token binding, and a complete audit record tying each action back to the human principal that approved it.
👉 Read our full editorial: AI agent identity risk will outpace traditional enterprise controls