There are two problems when an AI agent accesses enterprise tools and data using inherited user credentials or shared accounts. First, when an agent uses a user’s identity it potentially has access to everything the human user has access to, second it is widely recognized that human users are over privileged. Additionally without distinct identities and access controls, agents can not only take unauthorized actions, it’s also very difficult for security teams to differentiate between the actions taken by the agent and user.