H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeMitigation
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

When deploying an AI agent that acts as a representative of a user and performs actions on their behalf, it is important to implement robust policies and controls on permissions and lifecycle management of the agent. Lifecycle management involves establishing identity, protocols for access management, and decommissioning of the agent when its role is no longer needed. Controls should also include the principle of least privilege and delegated access from the user account. When acting as a representative of a user, the AI agent should not be granted permissions that the user would not be granted within the system or organization.

7 recorded

Relationships

mitigatesTechnique
mitigatesTechnique
mitigatesTechnique
mitigatesTechnique
mitigatesTechnique
1 external

References

mitre-atlas
AML.M0027
open