Only 22% of teams treat AI agents as independent identities, Cloud Security Alliance finds

greatlearningglobal · reddit · 2026-10-13

A Cloud Security Alliance study finds only about 22% of surveyed teams treat AI agents as independent identities, with most agents inheriting user credentials or sharing API keys.

As agents act across tools and systems, identity design becomes pressing: should each agent get its own identity and least-privilege permissions, or ride on its creator's credentials? The post also weighs when to introduce per-agent identities — from day one or as deployments grow complex.

Related event: CSA survey: 53% of orgs saw AI agents exceed permissions, few manage agent identities(2 posts)→

Original post →

More from coding & agent

coding & agent channel →