Open Access

Enterprise Agent Identity Governance Framework (EAIGF): A Policy-Mediated Identity and Access Governance Model for Autonomous Digital Workforce Systems

4 Independent Researcher, USA

Abstract

Agentic Artificial Intelligence (AI) systems are evolving from passive decision-support tools into autonomous digital workers capable of planning, reasoning, invoking tools, accessing enterprise resources, and executing business actions with varying degrees of autonomy. While enterprises maintain mature governance models for human identities, service accounts, and application identities, existing Identity and Access Management (IAM) frameworks do not adequately address the governance challenges introduced by autonomous agents. Unlike conventional applications, agents dynamically determine execution paths, invoke reusable skills, delegate tasks to peer agents, and perform privileged actions across enterprise systems. These characteristics define a new class of enterprise identity that requires dedicated governance, authorization, and accountability controls. This paper proposes the Enterprise Agent Identity Governance Framework (EAIGF), which treats autonomous agents as first-class enterprise identities subject to lifecycle management, quantitative trust classification, privileged access governance, and end-to-end accountability. The framework's principal constructs form an identity layer comprising the Agent Identity Registry (AIR), the Agent Provisioning Certificate, Agent Trust Tiering driven by an explicit Agent Identity Risk Score (AIRS) formula, Agent Privileged Access Management (Agent-PAM), and a Delegated Trust Chain with Agent Identity Lineage for multi-agent accountability. These constructs are enforced through a policy-mediated runtime boundary that performs capability projection and risk-adaptive authorization. A reference implementation realizing the registry, the AIRS formula, capability projection, and risk-adaptive authorization correctly enforced all ten governance scenarios in the evaluation with zero false-permits on disallowed capabilities and a mean authorization overhead of approximately 0.015 ms per request. A larger randomized evaluation over 600 authorization requests across 80 agents and 25 reusable skills reproduced this result and, against a naive whole-skill authorization baseline, reduced the exposed capability surface by 66.7 percent while blocking every attempted privilege escalation through delegation. A synthetic financial-services walkthrough demonstrates how Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Zero Trust principles extend to agentic environments. EAIGF provides a practical blueprint for governing autonomous agents at scale while preserving least privilege, accountability, and operational resilience.

Keywords

References

Anthropic, “Building Effective Agents,” Anthropic Engineering, 2024.
Anthropic, “Model Context Protocol Specification,” 2024.
Microsoft, “Governing and Securing AI Agents in the Enterprise,” Microsoft Security, 2024.
Y. Shavit et al., “Practices for Governing Agentic AI Systems,” OpenAI, 2023.
L. Weng, “LLM-Powered Autonomous Agents,” 2023.
K. Greshake, S. Abdelnabi, S. Mishra, C. Endres, T. Holz, and M. Fritz, “Not What You’ve Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection,” in Proc. ACM Workshop on Artificial Intelligence and Security (AISec), 2023.
A. Chan et al., “Harms from Increasingly Agentic Algorithmic Systems,” in Proc. ACM Conf. on Fairness, Accountability, and Transparency (FAccT), 2023.
National Institute of Standards and Technology, “Artificial Intelligence Risk Management Framework (AI RMF 1.0),” NIST, 2023.
International Organization for Standardization, “ISO/IEC 42001:2023 — Information Technology, Artificial Intelligence, Management System,” ISO, 2023.
S. Anuguthala, “Enterprise Governance of Reusable Agentic AI Skills,” International Journal on Science and Technology (IJSAT), in press, 2026.
S. Anuguthala, “GUARD: A Governance-Anchored Framework for Runtime Monitoring and Incident Response in Enterprise Agentic AI Systems,” International Journal of Artificial Intelligence, Big Data, Cloud and Management Systems (IJAIBDCMS), in press, 2026.
P. A. Grassi, M. E. Garcia, and J. L. Fenton, “Digital Identity Guidelines,” NIST Special Publication 800-63-3, 2017.
Joint Task Force, “Security and Privacy Controls for Information Systems and Organizations,” NIST Special Publication 800-53 Rev. 5, 2020.
S. Rose, O. Borchert, S. Mitchell, and S. Connelly, “Zero Trust Architecture,” NIST Special Publication 800-207, 2020.
M. Bishop, Computer Security: Art and Science, 2nd ed. Addison-Wesley, 2018.
R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman, “Role-Based Access Control Models,” IEEE Computer, vol. 29, no. 2, pp. 38–47, 1996.
M. S. Miller, “Robust Composition: Towards a Unified Approach to Access Control and Concurrency Control,” Ph.D. dissertation, Johns Hopkins University, 2006.
J. B. Dennis and E. C. Van Horn, “Programming Semantics for Multiprogrammed Computations,” Communications of the ACM, vol. 9, no. 3, pp. 143–155, 1966.
R. N. M. Watson, J. Anderson, B. Laurie, and K. Kennaway, “Capsicum: Practical Capabilities for UNIX,” in Proc. USENIX Security Symposium, 2010.
OASIS, “eXtensible Access Control Markup Language (XACML) Version 3.0,” OASIS Standard, 2013.
MITRE, “ATLAS: Adversarial Threat Landscape for Artificial-Intelligence Systems,” MITRE Corporation, 2023.
Cloud Security Alliance, “Agentic AI Threat Modeling: MAESTRO,” CSA, 2024.
S. Anuguthala, “A Control-Driven Lifecycle Governance Framework for Enterprise Agentic AI Systems,” International Journal of Artificial Intelligence, Data Science and Machine Learning (IJAIDSML), in press, 2026.
K. J. Arrow, “The Economics of Agency,” in Principals and Agents: The Structure of Business, J. W. Pratt and R. J. Zeckhauser, Eds. Harvard Business School Press, 1985.
K. Naik and D. Patel, “Just-in-Time and Zero Standing Privilege Access Models for Cloud Environments,” Journal of Information Security and Applications, vol. 71, 2023.
B. Schneier, “The Coming AI Agents and the Security Challenges They Pose,” 2024.

Most read articles by the same author(s)

<< < 2 3 4 5 6 7 

Similar Articles

1-10 of 38

You may also start an advanced similarity search for this article.