AI Strategy
Agent Permissions: Why Trust Is the Hardest Part of AI Deployment
An agent that can do anything will eventually do something it shouldn't. Authorization has to live outside the agent itself — the same way no employee can wire money without a second signature, no matter how senior.
The fastest way to kill an AI program is to give an agent broad access and wait. Eventually it will take an action that's technically inside the permission set and politically outside the company's appetite for risk. The lesson everyone learns the hard way: capability is not authorization.
Trust in agentic systems is a permissions problem, not a model problem. The model can be aligned, well-prompted, and entirely well-meaning, and still be the wrong principal to hold credentials for systems that move money or change customer state.
The pattern that works mirrors how mature companies handle human access. Roles are explicit. Scopes are narrow. Sensitive actions require a second signal — a human approval, a separate service account, a break-glass workflow with an audit trail.
Critically, authorization has to live outside the agent's decision loop. If the same model decides what it's allowed to do, you don't have security — you have a suggestion. The system that grants permission and the system that exercises it should be built and maintained by different people.
Dataken treats this as a first-class concern. OLi runs against a permissioning substrate it does not control, and every action it takes against a customer system is scoped, logged, and reversible. That's not friction — that's the only configuration in which agents get to do real work in regulated environments.
Key takeaways
- Capability is not authorization — broad agent access is a question of when, not if
- Trust is a permissions problem, not a model alignment problem
- Roles narrow, scopes explicit, sensitive actions require a second signal
- Authorization must live outside the agent's decision loop, in a system the agent does not control
- Scoped, logged, reversible actions are the price of admission in regulated industries