AI agents in IT operations: are your controls keeping up?

TL;DR: AI agents in IT operations can speed up endpoint, identity and security workflows, according to Hexnode, but excessive permissions, unapproved high-impact actions and incomplete audit trails create operational and security risk. The control problem is not agent speed, but whether access, approval and accountability are defined before autonomy expands.

Editorial analysis by NHI Mgmt Group, based on content published by Hexnode: “How to introduce AI agents into IT operations with human oversight?”.

Key questions

Q: What breaks when AI agents are given broad enterprise access without tight governance?

A: Broad access turns AI agents into high-speed execution paths that can move data, spend money, modify records, or delete assets before operators can intervene.

Q: When should organisations require human approval for an AI agent action?

A: Require human approval when the action could change infrastructure, expose sensitive data, move laterally across systems, or trigger a business-critical workflow that is hard to reverse.

Q: How can organisations tell whether AI agent governance is actually working?

A: Look for evidence that agent access is ephemeral, traceable, and constrained at the action level.

Practitioner guidance

• Define task-scoped agent identities Assign each AI agent a unique identity, a named human owner and a permissions matrix that lists only the systems and actions required for its current workflow.
• Enforce risk-based approval gates Require human authorization for privileged, disruptive or difficult-to-reverse actions such as device wipes, endpoint isolation and administrator access changes.
• Build a complete execution audit trail Record the trigger, agent decision, approver, action executed, timestamp and outcome for every task, then retain those records for investigation and review.

Bottom line: AI agents in IT operations create governance risk when access, approval and accountability are not defined before deployment.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →