# Agent identity & delegated authority

The identity and authorization discipline that treats an enterprise agent as a non-human principal with attributable, purpose-bound, time-bound permissions.

core-concept · Security & governance · emerging · Reviewed 2026-08-09

## Definition

The identity and authorization discipline that treats an enterprise agent as a non-human principal with attributable, purpose-bound, time-bound permissions. Every consequential agent action needs a principal, a delegator, a purpose, a policy decision, and an expiry.

IAM foundations are established; agent-specific standards and profiles are still developing.

## Why it matters

Every consequential agent action needs a principal, a delegator, a purpose, a policy decision, and an expiry.

The operating shift is from “Borrowed user credentials” to “Explicit non-human authority.”

## System anatomy

- **Practice 1:** Bind authority to action, resource, purpose, and time
- **Practice 2:** Preserve the human or service delegation chain
- **Practice 3:** Expire or suspend agents without a valid owner



## Important distinctions

- **Borrowed user credentials:** This concept moves the engineering system toward explicit non-human authority.



## Implementation signals

- Bind authority to action, resource, purpose, and time
- Preserve the human or service delegation chain
- Expire or suspend agents without a valid owner

## Failure modes

- Agents impersonating users
- Permissions surviving ownership or purpose changes



## Related knowledge

- [Tools, skills & protocols](https://aisdlc.ai/agentic-engineering/tools-and-protocols) — The action and knowledge interfaces through which agents use tools, load procedural skills, access enterprise context, and collaborate with other agents.
- [Agent execution substrate](https://aisdlc.ai/agentic-engineering/execution-substrate) — The isolated, stateful environment in which agents observe and act, including compute, filesystem, browser, network, credentials, resource limits, and session lifecycle.
- [Observability & control](https://aisdlc.ai/agentic-engineering/observability-control) — The combined telemetry and enforcement architecture for tracing agent behavior, evaluating policy, obtaining approval, constraining action, revoking authority, quarantining execution, and stopping systems.

## Sources and further study

- [NIST NCCoE — Identity and Authority for Software Agents concept paper](https://www.nccoe.nist.gov/sites/default/files/2026-02/accelerating-the-adoption-of-software-and-ai-agent-identity-and-authorization-concept-paper.pdf) — A concept paper exploring how established identity and authorization practices can apply to software and AI agents. **Use:** Official guidance. **Limitation:** Guidance describes recommended practice; citation does not prove that a control is implemented or effective in a particular environment.
- [NIST — AI Agent Standards Initiative](https://www.nist.gov/artificial-intelligence/ai-agent-standards-initiative) — A standards initiative addressing secure, interoperable adoption of AI agents. **Use:** Official guidance. **Limitation:** Guidance describes recommended practice; citation does not prove that a control is implemented or effective in a particular environment.
- [Model Context Protocol — Enterprise-Managed Authorization for MCP](https://blog.modelcontextprotocol.io/posts/enterprise-managed-auth/) — An emerging authorization pattern for enterprise-managed agent access to MCP servers. **Use:** Standard or protocol. **Limitation:** A specification defines an interface or control pattern; conformance alone does not establish authorization, security, or fitness for a use case.

---

This library synthesizes cited research, standards, official documentation, and clearly attributed practitioner perspectives. Maturity describes the state of a concept—not vendor endorsement, production readiness, or permission to deploy. Benchmarks and demonstrations do not replace use-case evaluation, governed controls, independent verification, or named human release authority.