Notifications
Clear all
Topic starter
24/06/2026 11:47 pm
TL;DR: AI agents are already operating inside enterprise environments with OAuth tokens, SSO credentials, and access paths that bypass traditional provisioning, according to SailPoint. Static roles, infrequent reviews, and manual oversight were built for predictable human and machine identities, not autonomous entities that execute continuously at machine speed.
NHIMG editorial — based on content published by SailPoint: AI agents are here. Your identity strategy isn’t ready
By the numbers:
- 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools.
- 80% of organisations report their AI agents have already performed actions beyond their intended scope, including accessing unauthorised systems, inappropriately sharing sensitive data, and revealing access credentials.
Questions worth separating out
Q: What breaks when AI agents are governed like normal machine accounts?
A: Governance breaks because AI agents are not stable workloads with fixed execution paths.
Q: Why do AI agents complicate least privilege and access reviews?
A: Least privilege becomes harder because the task context changes dynamically, while access reviews assume privileges persist long enough to be certified.
Q: How can security teams govern AI agents without slowing automation?
A: Security teams should shift from broad standing permissions to task-scoped access, explicit ownership, and live policy enforcement.
Practitioner guidance
- Inventory all active AI agents and owners Build a register of every agent operating in the environment, the business purpose it serves, the data it can touch, and the named human owner responsible for review and decommissioning.
- Replace standing access with expiring task scopes Issue short-lived credentials with the narrowest permissions required for a specific workflow, then force re-authentication or re-approval when the task changes.
- Monitor agent behaviour at runtime Instrument API calls, data access patterns, and tool usage so that abnormal sequences can be detected while the session is live.
What's in the full article
SailPoint's full blog covers the operational detail this post intentionally leaves for the source:
- Its suggested identity model for autonomous agents, including how to classify them alongside human and machine identities.
- The practical access-chain framing from human user to agent to machine to app to data and cloud resources.
- Examples of real-time policy enforcement and behavioural monitoring in agent-heavy environments.
- The ownership and decommissioning model SailPoint recommends for active agents.
👉 Read SailPoint's analysis of AI agent identity risk and governance gaps →
AI agent identity risk: what IAM teams need to govern now?
Explore further
25/06/2026 8:41 am
AI agent governance is now an identity model problem, not an AI operations add-on. Human IAM assumes people move through onboarding, review, and offboarding cycles. Machine IAM assumes accounts are stable and their purpose is deterministic. AI agents violate both assumptions because they are ephemeral, self-directed, and capable of making access decisions at runtime. The implication is that identity governance must classify the actor by behaviour, not by label.
A few things that frame the scale:
- 92% agree governing AI agents is critical to enterprise security, yet only 44% have implemented any policies to do so, according to AI Agents: The New Attack Surface report.
- Only 52% of companies can track and audit the data their AI agents access, leaving 48% with a complete blind spot for compliance and breach investigation, according to SailPoint.
A question worth separating out:
Q: Who is accountable when an AI agent accesses data it should not have?
A: Accountability should sit with a named human owner who is responsible for the agent’s access, monitoring, and retirement. If no owner is recorded, the agent is functionally orphaned, which weakens both governance and incident response. Identity programmes should treat owner assignment as mandatory metadata for every agent.
👉 Read our full editorial: AI agent identity risk is outpacing enterprise IAM controls
