{"id":58214,"date":"2026-08-02T12:01:03","date_gmt":"2026-08-02T02:01:03","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/"},"modified":"2026-08-02T12:02:18","modified_gmt":"2026-08-02T02:02:18","slug":"why-ai-agents-need-separate-identities-permissions-and-audit-logs","status":"publish","type":"post","link":"https:\/\/cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/","title":{"rendered":"Why AI Agents Need Separate Identities Permissions and Audit Logs"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post Why AI Agents Need Separate Identities Permissions and Audit Logs we will explain how to give AI agents useful access without creating an invisible security risk.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">An AI agent is software that can complete tasks rather than simply answer questions. It might update customer records, prepare invoices, search company files, create support tickets or communicate with another agent. That ability can save hours of work, but it also raises a basic business question: who is accountable when the agent takes action?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The answer starts with three controls. The agent&#8217;s identity confirms who or what is acting. Its permissions determine what it is allowed to do. Its audit logs record what happened. If any one of these controls is missing, investigating errors, limiting damage and demonstrating compliance becomes much harder.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The shared account problem<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Many early AI projects connect an agent to business systems using a developer&#8217;s account, a shared administrator login or one powerful application credential. It is quick, but it creates the digital equivalent of giving several contractors the same master key.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the agent deletes a document, emails the wrong customer or changes a financial record, the system may only show that the shared account performed the action. It may not identify which agent was involved, which user requested the task or why the action was allowed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Shared access also makes permissions difficult to remove. Disabling the credential could interrupt several agents and business processes at once, so risky access often remains active longer than it should.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How agent identity technology works<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A separate agent identity is a dedicated digital account created for one AI agent or a clearly defined type of agent. It allows identity platforms such as Microsoft Entra ID, which controls access to Microsoft cloud services and connected applications, to recognise the agent independently from employees and ordinary software.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Entra Agent ID extends this approach with identity records designed for AI agents. These records can include the agent&#8217;s purpose, owner, authentication method and approved access. Reusable blueprints can also apply a consistent set of controls when multiple agents perform similar jobs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When an agent needs to access Microsoft 365, Azure or another connected system, it requests a short-lived digital access pass called a token. The receiving system checks the token and only permits the approved actions. This is safer than storing a permanent password inside the agent&#8217;s code or configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For a deeper explanation of this identity layer, see how Microsoft Entra Agent identities secure AI agents.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">One identity creates clear accountability<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Each production agent should have a distinct identity, a documented purpose and a named business owner. The owner does not need to be the developer. It should be someone who understands the process, the data involved and the consequences if the agent makes a mistake.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This makes basic governance questions easier to answer:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>What business task is this agent approved to perform?<\/li>\n<li>Which systems and data can it access?<\/li>\n<li>Who approved that access?<\/li>\n<li>Who reviews its activity and performance?<\/li>\n<li>Who can disable it during an incident?<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A separate identity also provides a practical kill switch. If one agent starts behaving unexpectedly, IT can block that identity without shutting down unrelated automation or changing an employee&#8217;s account.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Permissions should match the task<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An identity is only useful if its permissions are tightly controlled. The safest approach is least privilege, which means giving the agent only the access required for its specific job and nothing more.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, an accounts receivable agent may need to read approved invoice data and draft reminder emails. It probably does not need permission to change bank details, approve refunds, create users or browse every mailbox in the company.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Write access should be separated from read access wherever possible. High-impact actions, such as deleting records, changing payment details or sending external communications, may also require human approval.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Permissions should consider whether the agent works autonomously or on behalf of an employee. An autonomous agent operates using its own approved access. An interactive agent may act for a signed-in user, but it should not automatically inherit every permission that person has.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our article on securing agent identities with Microsoft Entra ID controls explores how access policies can be applied without making useful AI projects unworkable.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Audit logs turn activity into evidence<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Audit logs are time-stamped records of important events. For AI agents, they should show when the agent signed in, which system it accessed, what action it attempted, whether it succeeded and which user or process initiated the request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Identity logs are only part of the picture. A complete evidence trail may also need to record the agent&#8217;s instructions, the tools it called, approvals received, data sources used and the final business action. Sensitive prompts and customer information must be protected rather than copied carelessly into every log.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Logs should be sent to a protected monitoring platform where they can be searched and retained for an appropriate period. Microsoft Sentinel, for example, collects security information and helps teams detect unusual activity across identities, devices and cloud services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If several agents communicate with one another, each hand-off should preserve accountability. Otherwise, a request can move through three agents while the final system records only the last one. We cover this challenge in more detail in securing agent-to-agent communication using Microsoft Entra ID.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What failure looks like in practice<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 200-person professional services firm using an AI agent to prepare client reports. The agent reads project folders, gathers financial figures and drafts documents for consultants.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If it uses a shared administrator account, it may be able to access every client folder. A poorly worded request, compromised instruction or simple configuration error could place one client&#8217;s information into another client&#8217;s report.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With a separate identity, the agent can be limited to approved folders and read-only financial data. Each report request can be linked to the requesting employee, while the final document requires human approval before it is sent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If something goes wrong, the firm can identify the affected records, disable the agent and explain what happened. That can turn a broad, expensive investigation into a contained operational issue.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How this supports Australian security expectations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Essential Eight, the Australian Government&#8217;s baseline cybersecurity framework, does not provide a complete AI governance model. However, its focus on restricting administrative privileges strongly supports the case for narrowly controlled agent access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Separate identities and reliable logs also make it easier to demonstrate that access is approved, reviewed and removed when no longer needed. This matters during customer security reviews, cyber insurance assessments and investigations involving personal information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For agents that maintain long-term memory or store business decisions, identity logs should connect with protected data records. Our guide to building audit-ready AI agents with Azure Cosmos DB explains how secure storage can support that evidence trail.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A practical checklist for every AI agent<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Create a separate identity.<\/strong> Do not use an employee&#8217;s login or a credential shared by unrelated agents.<\/li>\n<li><strong>Assign a business owner.<\/strong> Someone must approve the purpose, access and acceptable level of risk.<\/li>\n<li><strong>Limit permissions.<\/strong> Start with read-only access and add higher-risk actions only when justified.<\/li>\n<li><strong>Add approval points.<\/strong> Require human confirmation for payments, deletions, external messages and sensitive record changes.<\/li>\n<li><strong>Protect credentials.<\/strong> Use managed, short-lived authentication rather than passwords stored in code.<\/li>\n<li><strong>Collect useful logs.<\/strong> Record sign-ins, actions, approvals, failures and changes to the agent&#8217;s permissions.<\/li>\n<li><strong>Review access regularly.<\/strong> Remove permissions that are unused or no longer required.<\/li>\n<li><strong>Test the shutdown process.<\/strong> Confirm that the agent can be disabled quickly without interrupting unrelated services.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Useful AI needs visible control<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The business value of AI agents comes from their ability to take action. That is also where the risk begins. Separate identities, carefully limited permissions and reliable audit logs allow organisations to automate work while keeping control and accountability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudPro Inc combines more than 20 years of enterprise IT experience with practical work across Microsoft Azure, Microsoft 365, Entra, Defender, OpenAI, Claude and Wiz. As a Melbourne-based Microsoft Partner and Wiz Security Integrator, we help organisations design AI controls that fit their existing environment rather than adding another disconnected security tool.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are not sure which agents already have access to your data, or whether you could explain their actions during an audit, we are happy to take a practical look at your current setup with you \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>AI agents can access data and act at machine speed. Separate identities, limited permissions and reliable audit logs keep that power controlled, accountable and easier to govern.<\/p>\n","protected":false},"author":1,"featured_media":58216,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_opengraph-title":"Agent Identity: Why Permissions and Audit Logs Matter","_yoast_wpseo_opengraph-description":"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.","_yoast_wpseo_twitter-title":"Agent Identity: Why Permissions and Audit Logs Matter","_yoast_wpseo_twitter-description":"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[80,121,13,36],"tags":[],"class_list":["post-58214","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-agents","category-ai-governance-risk-management","category-blog","category-entra-id"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Agent Identity: Why Permissions and Audit Logs Matter<\/title>\n<meta name=\"description\" content=\"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Agent Identity: Why Permissions and Audit Logs Matter\" \/>\n<meta property=\"og:description\" content=\"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/\" \/>\n<meta property=\"og:site_name\" content=\"CPI Consulting\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-02T02:01:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-02T02:02:18+00:00\" \/>\n<meta name=\"author\" content=\"CPI Staff\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Agent Identity: Why Permissions and Audit Logs Matter\" \/>\n<meta name=\"twitter:description\" content=\"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"CPI Staff\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/\"},\"author\":{\"name\":\"CPI Staff\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/person\\\/192eeeb0ce91062126ce3822ae88fe6e\"},\"headline\":\"Why AI Agents Need Separate Identities Permissions and Audit Logs\",\"datePublished\":\"2026-08-02T02:01:03+00:00\",\"dateModified\":\"2026-08-02T02:02:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/\"},\"wordCount\":1408,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/#primaryimage\"},\"thumbnailUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png\",\"articleSection\":[\"AI Agents\",\"AI Governance &amp; Risk Management\",\"Blog\",\"Entra ID\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/\",\"url\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/\",\"name\":\"Agent Identity: Why Permissions and Audit Logs Matter\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/#primaryimage\"},\"thumbnailUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png\",\"datePublished\":\"2026-08-02T02:01:03+00:00\",\"dateModified\":\"2026-08-02T02:02:18+00:00\",\"description\":\"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/#primaryimage\",\"url\":\"\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png\",\"width\":1536,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/08\\\/02\\\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cloudproinc.com.au\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why AI Agents Need Separate Identities Permissions and Audit Logs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#website\",\"url\":\"https:\\\/\\\/cloudproinc.com.au\\\/\",\"name\":\"Cloud Pro Inc - CPI Consulting Pty Ltd\",\"description\":\"Cloud, AI &amp; Cybersecurity Consulting | Melbourne\",\"publisher\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cloudproinc.com.au\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#organization\",\"name\":\"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd\",\"url\":\"https:\\\/\\\/cloudproinc.com.au\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/favfinalfile.png\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/favfinalfile.png\",\"width\":500,\"height\":500,\"caption\":\"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd\"},\"image\":{\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cloudproinc.com.au\\\/#\\\/schema\\\/person\\\/192eeeb0ce91062126ce3822ae88fe6e\",\"name\":\"CPI Staff\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"caption\":\"CPI Staff\"},\"sameAs\":[\"http:\\\/\\\/www.cloudproinc.com.au\"],\"url\":\"https:\\\/\\\/cloudproinc.com.au\\\/index.php\\\/author\\\/cpiadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Agent Identity: Why Permissions and Audit Logs Matter","description":"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/","og_locale":"en_US","og_type":"article","og_title":"Agent Identity: Why Permissions and Audit Logs Matter","og_description":"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.","og_url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/","og_site_name":"CPI Consulting","article_published_time":"2026-08-02T02:01:03+00:00","article_modified_time":"2026-08-02T02:02:18+00:00","author":"CPI Staff","twitter_card":"summary_large_image","twitter_title":"Agent Identity: Why Permissions and Audit Logs Matter","twitter_description":"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.","twitter_misc":{"Written by":"CPI Staff","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/#article","isPartOf":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/"},"author":{"name":"CPI Staff","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/person\/192eeeb0ce91062126ce3822ae88fe6e"},"headline":"Why AI Agents Need Separate Identities Permissions and Audit Logs","datePublished":"2026-08-02T02:01:03+00:00","dateModified":"2026-08-02T02:02:18+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/"},"wordCount":1408,"commentCount":0,"publisher":{"@id":"https:\/\/cloudproinc.com.au\/#organization"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png","articleSection":["AI Agents","AI Governance &amp; Risk Management","Blog","Entra ID"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/","url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/","name":"Agent Identity: Why Permissions and Audit Logs Matter","isPartOf":{"@id":"https:\/\/cloudproinc.com.au\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png","datePublished":"2026-08-02T02:01:03+00:00","dateModified":"2026-08-02T02:02:18+00:00","description":"Agent identity, least-privilege permissions and protected audit logs help businesses control AI actions, investigate errors and clearly prove accountability.","breadcrumb":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/#primaryimage","url":"\/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png","contentUrl":"\/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png","width":1536,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/08\/02\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cloudproinc.com.au\/"},{"@type":"ListItem","position":2,"name":"Why AI Agents Need Separate Identities Permissions and Audit Logs"}]},{"@type":"WebSite","@id":"https:\/\/cloudproinc.com.au\/#website","url":"https:\/\/cloudproinc.com.au\/","name":"Cloud Pro Inc - CPI Consulting Pty Ltd","description":"Cloud, AI &amp; Cybersecurity Consulting | Melbourne","publisher":{"@id":"https:\/\/cloudproinc.com.au\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cloudproinc.com.au\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cloudproinc.com.au\/#organization","name":"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd","url":"https:\/\/cloudproinc.com.au\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/logo\/image\/","url":"\/wp-content\/uploads\/2022\/01\/favfinalfile.png","contentUrl":"\/wp-content\/uploads\/2022\/01\/favfinalfile.png","width":500,"height":500,"caption":"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd"},"image":{"@id":"https:\/\/cloudproinc.com.au\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/cloudproinc.com.au\/#\/schema\/person\/192eeeb0ce91062126ce3822ae88fe6e","name":"CPI Staff","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","caption":"CPI Staff"},"sameAs":["http:\/\/www.cloudproinc.com.au"],"url":"https:\/\/cloudproinc.com.au\/index.php\/author\/cpiadmin\/"}]}},"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png","jetpack-related-posts":[{"id":58194,"url":"https:\/\/cloudproinc.com.au\/index.php\/2026\/08\/01\/securing-ai-agent-identities-with-microsoft-entra-id-controls\/","url_meta":{"origin":58214,"position":0},"title":"Securing AI Agent Identities with Microsoft Entra ID Controls","author":"CPI Staff","date":"August 1, 2026","format":false,"excerpt":"AI agents can access business data and act at machine speed. Learn how Microsoft Entra ID gives each agent controlled access, clear ownership and an audit trail.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 1x, \/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 1.5x, \/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 2x, \/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 3x, \/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 4x"},"classes":[]},{"id":57961,"url":"https:\/\/cloudproinc.com.au\/index.php\/2026\/07\/21\/how-microsoft-entra-agent-identities-secure-your-ai-agents\/","url_meta":{"origin":58214,"position":1},"title":"How Microsoft Entra Agent Identities Secure Your AI Agents","author":"CPI Staff","date":"July 21, 2026","format":false,"excerpt":"AI agents need identities just like employees. Learn how Microsoft Entra Agent ID controls access, assigns accountability and creates an audit trail without slowing useful AI projects.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 1x, \/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 1.5x, \/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 2x, \/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 3x, \/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 4x"},"classes":[]},{"id":57591,"url":"https:\/\/cloudproinc.com.au\/index.php\/2026\/05\/28\/designing-secure-ai-agent-infrastructure-on-azure\/","url_meta":{"origin":58214,"position":2},"title":"Designing Secure AI Agent Infrastructure on Azure","author":"CPI Staff","date":"May 28, 2026","format":false,"excerpt":"AI agents are moving from demos into production workflows. They can read documents, call APIs, query databases, create tickets, summarise customer history, and trigger business processes. That power creates a new infrastructure problem for Australian organisations: an AI agent is not just a chatbot. It is an application runtime, an\u2026","rel":"","context":"In &quot;AI Governance &amp; Risk Management&quot;","block_context":{"text":"AI Governance &amp; Risk Management","link":"https:\/\/cloudproinc.com.au\/index.php\/category\/ai-governance-risk-management\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/05\/designing-secure-ai-agent-infrastructure-on-azure.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/05\/designing-secure-ai-agent-infrastructure-on-azure.png 1x, \/wp-content\/uploads\/2026\/05\/designing-secure-ai-agent-infrastructure-on-azure.png 1.5x, \/wp-content\/uploads\/2026\/05\/designing-secure-ai-agent-infrastructure-on-azure.png 2x, \/wp-content\/uploads\/2026\/05\/designing-secure-ai-agent-infrastructure-on-azure.png 3x, \/wp-content\/uploads\/2026\/05\/designing-secure-ai-agent-infrastructure-on-azure.png 4x"},"classes":[]},{"id":57871,"url":"https:\/\/cloudproinc.com.au\/index.php\/2026\/07\/14\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely\/","url_meta":{"origin":58214,"position":3},"title":"Building Audit Ready AI Agents with Azure Cosmos DB Securely","author":"CPI Staff","date":"July 14, 2026","format":false,"excerpt":"AI agents need more than clever answers. They need reliable memory, clear evidence trails, cost control, and security controls leaders can explain during an audit.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 1x, \/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 1.5x, \/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 2x, \/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 3x, \/wp-content\/uploads\/2026\/07\/building-audit-ready-ai-agents-with-azure-cosmos-db-securely.png 4x"},"classes":[]},{"id":57371,"url":"https:\/\/cloudproinc.com.au\/index.php\/2026\/04\/04\/why-zero-trust-for-ai-agents-requires-a-different-architecture-than-zero-trust-for-users\/","url_meta":{"origin":58214,"position":4},"title":"Why Zero Trust for AI Agents Requires a Different Architecture Than Zero Trust for Users","author":"CPI Staff","date":"April 4, 2026","format":false,"excerpt":"Zero Trust is well understood for users. Verify identity, check device health, enforce least privilege, assume breach. Most mature IT organisations have some version of this in place. AI agents break that model. Not because Zero Trust principles are wrong \u2014 but because agents operate in ways that existing Zero\u2026","rel":"","context":"In &quot;AI&quot;","block_context":{"text":"AI","link":"https:\/\/cloudproinc.com.au\/index.php\/category\/ai\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/04\/why-zero-trust-for-ai-agents-requires-different-architecture-cover.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/04\/why-zero-trust-for-ai-agents-requires-different-architecture-cover.png 1x, \/wp-content\/uploads\/2026\/04\/why-zero-trust-for-ai-agents-requires-different-architecture-cover.png 1.5x, \/wp-content\/uploads\/2026\/04\/why-zero-trust-for-ai-agents-requires-different-architecture-cover.png 2x, \/wp-content\/uploads\/2026\/04\/why-zero-trust-for-ai-agents-requires-different-architecture-cover.png 3x, \/wp-content\/uploads\/2026\/04\/why-zero-trust-for-ai-agents-requires-different-architecture-cover.png 4x"},"classes":[]},{"id":57803,"url":"https:\/\/cloudproinc.com.au\/index.php\/2026\/07\/08\/securing-a2a-agent-communication-using-microsoft-entra-id\/","url_meta":{"origin":58214,"position":5},"title":"Securing A2A Agent Communication Using Microsoft Entra ID","author":"CPI Staff","date":"July 8, 2026","format":false,"excerpt":"AI agents are starting to talk to each other. Here\u2019s how Microsoft Entra ID helps keep those conversations trusted, controlled, and audit-ready.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 1x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 1.5x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 2x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 3x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/58214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=58214"}],"version-history":[{"count":1,"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/58214\/revisions"}],"predecessor-version":[{"id":58215,"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/58214\/revisions\/58215"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/58216"}],"wp:attachment":[{"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=58214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=58214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=58214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}