Analysis ·
Authorising an AI agent task by task: why roles are no longer enough
Original title, in French: “Autoriser un agent IA tâche par tâche : pourquoi les rôles ne suffisent plus”
- Publication
- Journal du Net (France)
- Author
- Chronique d'Amin Hasbini
- Published on
- 29 October 2026 · read in the page metadata
Summary
The article analyses the gap between companies' access policies for their AI agents and how those policies are actually enforced. A Delinea survey conducted in late September 2026 among 2,254 IT and security managers in eight countries, including France, shows that almost all companies have a written policy, but only about half check it in real time, fewer than one in five detect out-of-scope access as it happens, and only a third can trace sensitive access back to the person who authorised it. Citing an incident at the hosting provider Vercel in April 2026 involving a compromised OAuth token, the author proposes replacing role-based control with task-based authorisation, using signed, time-limited tokens, drawing on IETF standards, a draft on AI agent identity, a NIST project, and the requirements of DORA and NIS 2.
Summary based on the full text of the article.
Read the article on Journal du Net →Figures cited
-
2,254 managers
number of IT and security managers surveyed in the Delinea survey
eight countries, including France, survey published in late September 2026
« Une enquête publiée fin septembre 2026 auprès de 2 254 responsables informatiques et sécurité, dans huit pays dont la France, donne la mesure d'un écart. »
Source: Enquête Delinea
Classification
- Country
- France
- Company size
- All sizes
- Industries
- Software vendors, IT services companies, telecoms · All industries, or industry not specified · Banking, insurance, asset management, finance departments
- Companies
- NIST (cited), Delinea (study author), Vercel (cited), IETF (cited), OpenID Foundation (cited)
- Keywords
- AI agents, access control, AI governance, cybersecurity, identity management, oauth
Entry written by Marsanne Studio from the cited article, with the help of an AI model (claude-sonnet-5). The rights to the article and its illustrations belong to Journal du Net and its author. Entry translated from French by Claude Sonnet 5.5.