Notifications
Clear all
Topic starter
24/06/2026 7:09 pm
TL;DR: Enterprise AI agents share surface traits with NHIs, but their runtime decision-making breaks fixed-scope, deterministic, and stable-identity assumptions that service-account governance depends on, according to Aizome. Treating agent governance as an NHI extension creates intent blind spots that existing IAM, PAM, and lifecycle controls cannot close.
NHIMG editorial — based on content published by Aizome: Stop Calling Enterprise AI Agents NHIs. They're Not
By the numbers:
- Only 5.7% of organisations have full visibility into their service accounts.
Questions worth separating out
Q: What breaks when enterprise AI agents are governed like service accounts?
A: The main failure is that service-account governance assumes fixed scope and stable behaviour, while enterprise AI agents can select tools, alter execution paths, and expand workflows at runtime.
Q: Why do enterprise AI agents complicate NHI governance?
A: They complicate NHI governance because the security model was built around predictable non-human identities such as API keys and workload credentials.
Q: How do teams know if agent access is still operating inside its intended boundary?
A: Teams should look for evidence that the full action chain still matches the original business request, not just that each call was individually permitted.
Practitioner guidance
- Classify the actor before selecting controls Separate service accounts, API keys, workload identities, and enterprise AI agents in your identity inventory so the governance model matches the actor type rather than the tool stack.
- Map runtime decision points in agent workflows Document where an agent can choose tools, call sub-agents, or expand a workflow without a human approval gate, then treat those points as governance boundaries.
- Test for intent drift across delegation chains Review whether the original human request can still be reconstructed after two or three agent hops, especially when MCP connections and API calls are involved.
What's in the full article
Aizome's full article covers the architectural argument and edge cases this post intentionally leaves for the source:
- A deeper walk-through of the four NHI assumptions the article says fail for enterprise AI agents
- The MCP-layer visibility problem and why protocol trust differs from classic credential exchange
- The multi-agent chain example showing how intent can degrade across hops
- The vendor's own framing of what an agent-native governance layer would need to do
👉 Read Aizome's analysis of why enterprise AI agents are not NHIs →
Enterprise AI agents vs NHIs: what governance model fits?
Explore further
25/06/2026 4:19 am
Enterprise AI agents are a different identity problem, not a bigger NHI problem. NHI security was built for stable principals, fixed scopes, and deterministic behaviour. Enterprise AI agents violate those premises because runtime reasoning changes what they do, which tools they touch, and how far a workflow can expand before anyone reviews it. The implication is that extending existing NHI policy alone does not create a valid governance model for agents.
A few things that frame the scale:
- 85% of organisations lack full visibility into third-party vendors connected via OAuth apps, according to The State of Non-Human Identity Security.
- 1 in 4 organisations are already investing in dedicated NHI security capabilities, with an additional 60% planning to do so within the next twelve months, according to The State of Non-Human Identity Security.
A question worth separating out:
Q: Who is accountable when an enterprise AI agent acts within policy but outside intent?
A: Accountability should sit with the organisation that approved the workflow and the team that owns the agent, but policy compliance alone does not settle responsibility. When actions are technically allowed yet materially misaligned with intent, the governance failure is architectural. That is why agent review and approval design must be explicit, not implicit in NHI controls.
👉 Read our full editorial: Enterprise AI agents are not NHIs: why governance breaks
