Topic starter
16/01/2026 3:42 pm
TL;DR: Non-human identities now average a 50:1 ratio against human identities and may reach 100:1, while AI, automation, and software defined infrastructure expand the number of accounts and credentials enterprises must govern, according to One Identity. The result is not just more identities, but a bigger control gap that conventional IAM programs were not built to manage.
Editorial analysis by NHI Mgmt Group, based on content published by One Identity: “Why are non-human identities suddenly such a big deal?”.
By the numbers:
- Non-human identities are currently averaging a 50:1 ratio against their human counterparts, and that gap is projected to widen to as much as 100:1.
Key questions
Q: What breaks when non-human identities are governed like human users?
A: Lifecycle triggers, ownership, and review processes stop working because machine identities do not generate joiner, mover, or leaver events.
Q: Why do software defined infrastructure and automation increase NHI risk?
A: Because each automation layer typically adds its own service identities, credentials, and trust paths.
Q: What are the signs that NHI governance is failing in an enterprise?
A: Common warning signs include unclear ownership for service accounts, secrets stored in code or configuration instead of managed vaults, infrequent rotation, and weak offboarding of API keys.
Practitioner guidance
- Map the NHI estate separately Build a machine-identity inventory that distinguishes service accounts, automation credentials, tokens, and other non-human identities from human users and admin accounts.
- Assign lifecycle ownership Name an accountable owner for each NHI class and define who approves creation, who reviews usage, and who removes it when the workload or system changes.
- Review privileged NHI access patterns Identify where non-human identities hold elevated access in infrastructure, automation, and AI workflows, then classify which privileges are permanent rather than task-bound.
Bottom line: Non-human identities have become a governance problem because their scale, ownership complexity, and lifecycle patterns no longer fit human-centric IAM processes.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 4 days ago by NHI Mgmt Group
08/10/2026 5:06 pm
NHI governance has crossed from housekeeping into core identity governance: When non-human identities outnumber people by 50:1 and trend toward 100:1, the problem is no longer inventory alone. The governance model itself starts to fail because the organisation is applying human-scale review logic to machine-scale identity populations. That makes ownership, lifecycle, and entitlement visibility the decisive control layer for modern IAM programmes.
A few things that frame the scale:
- NHIs outnumber human identities by 25x to 50x in modern enterprises, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: How should IAM teams govern human, non-human, and AI identities together?
A: Start by separating the identity types in policy, ownership, and review cadence, then define where controls can be shared and where they must remain distinct. Human users, service identities, and AI systems do not fail in the same way, so the governance model has to preserve that difference while still producing one audit trail.
👉 Read our full editorial: Why non-human identities are becoming a governance problem