Why governing AI agents starts with the identities and permissions they inherit.
August 20 is National Bacon Day, so we’re leaning in! Every AI agent action has three layers: the Bot, the Launcher and the Target. That is the BLT problem of agent access (see what we did there?). The BLT problem (Bot, Launcher, Target) is a useful frame for what makes agentic access hard. But it understates where most teams are actually exposed right now.
If agent deployments have access controls in place, they are typically live at the MCP layer: they filter which tools the agent can call, maybe which resources it can name. What they critically miss is the entitlement underneath, the shared service account or delegated human permissions the agent actually uses to act. There is no context about who triggered the session or the business intent for the task at hand. It just has access, usually far more and long lasting than any single job requires.
You cannot govern the agent without understanding who or what invoked it and what system it is trying to access.
When those identity layers carry standing privilege, stale access or poorly scoped credentials, the agent inherits a bad baseline, and no tool-level filter catches the gap. Join P0 Security for a practical 30-minute session on why controlling what an agent can call is not the same as controlling what it can do, and how just-in-time access and Zero Standing Privilege give you a model where the credential itself enforces the grant.
Also: the first 10 people who attend live will get Snake River Farms bacon on us! Must attend the live session to qualify. Limit one gift per person. No purchase necessary. Void where prohibited or restricted by employer policy.
What you will learn:
- Why every agent action is a BLT event: bot, launcher and target
- Why tool filtering is not access control, and where the real exposure lives
- How standing privilege and shared credentials undermine agent governance before it starts
- Where attribution breaks down when users, NHIs and agents are managed in siloes
- How just-in-time access and automated approval workflows create a sustainable Zero Standing Privilege model
- How to assess whether your current identity baseline is strong enough for enforceable agent policy
Who should attend:
- Security and identity teams deploying or preparing to deploy AI agents for the workforce who want to understand how human and NHI access hygiene strengthens and enables effective agentic access control.
