{"id":1368,"date":"2026-09-26T17:14:41","date_gmt":"2026-09-26T15:14:41","guid":{"rendered":"https:\/\/wertfels.com\/herausforderungen\/ai-agents-without-authorisation-concept\/"},"modified":"2026-09-26T17:14:41","modified_gmt":"2026-09-26T15:14:41","slug":"ai-agents-without-authorisation-concept","status":"publish","type":"challenges","link":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/","title":{"rendered":"AI agents without an authorization concept"},"content":{"rendered":"    <section id=\"block_2981042f2925bc48d3cc9eedaf8309fd\"\n             class=\"hero-services is-hero\"             data-section>\n\n        <figure class=\"hero-services__bg m-cover\" aria-hidden=\"true\">\n            <img decoding=\"async\" width=\"2880\" height=\"1612\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3.webp\" class=\"skip-lazy\" alt=\"Abstract blue mountain background\" loading=\"eager\" fetchpriority=\"high\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-1920x1075.webp 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-1440x806.webp 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-1280x716.webp 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-767x429.webp 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3-300x168.webp 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/videoframe_0-3.webp 2880w\" sizes=\"(max-width: 2880px) 100vw, 2880px\" title=\"videoframe_0-3\" \/>                            <video data-src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Main-container_3.mp4\" data-autoplay muted data-loop playsinline><\/video>\n                    <\/figure>\n\n        <div class=\"hero-services__inner container\">\n\n            <div class=\"hero-services__content\">\n                                    <p class=\"hero-services__tag title-tag\">The challenge<\/p>\n                \n                                    <h1 class=\"hero-services__title h-52 h-38-m\"><mark>AI agents<\/mark> without an authorization concept<\/h1>\n                \n                                    <div class=\"hero-services__text txt-16 txt-16-m\">\n                        <p>An AI agent is given a goal and picks its own tools. An authorization concept modeled on service accounts assumes fixed actions that an agent does not have.<\/p>\n                    <\/div>\n                \n                                    <div class=\"hero-services__actions\">    <a href=\"#contact\" class=\"btn btn--arrow\" title=\"Book an initial call\" target=\"_self\">\r\n        Book an initial call    <\/a>\r\n    <\/div>                            <\/div>\n        <\/div>\n    <\/section>\n\n\n    <section id=\"block_21a9403738b0cc48cbc7fa6d004e7007\"\n             class=\"features-problem-cards section\"             data-section data-theme=\"light\">\n\n        <div class=\"features-problem-cards__inner container\">\n\n            <div class=\"features-problem-cards__header section-header\">\n                                    <p class=\"features-problem-cards__tag title-tag\">The challenge<\/p>\n                \n                <div class=\"features-problem-cards__head-row section-header__row\">\n                                            <h2 class=\"features-problem-cards__title section-header__title h-40 h-32-m\">Where AI agents become a problem<\/h2>\n                                    <\/div>\n            <\/div>\n\n                            <ul class=\"features-problem-cards__list\">\n                                            <li class=\"features-problem-cards__item\">\n                                                            <figure class=\"features-problem-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-6.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (6)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-problem-cards__item-content\">\n                                                                    <h3 class=\"features-problem-cards__item-title h-22 h-20-m\">Excessive permissions<\/h3>\n                                \n                                                                    <div class=\"features-problem-cards__item-text txt-14\">\n                                        <p>Nobody knows in advance which tools an agent will call. So it gets everything it might need, and least privilege becomes guesswork.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-problem-cards__item\">\n                                                            <figure class=\"features-problem-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/User-Icon-1.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"User Icon\" \/>                                <\/figure>\n                            \n                            <div class=\"features-problem-cards__item-content\">\n                                                                    <h3 class=\"features-problem-cards__item-title h-22 h-20-m\">Borrowed identities<\/h3>\n                                \n                                                                    <div class=\"features-problem-cards__item-text txt-14\">\n                                        <p>If an agent runs under the account of the person who started it, only that person shows up in the log. What the agent decided on its own is no longer visible.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-problem-cards__item\">\n                                                            <figure class=\"features-problem-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/search-03-1.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"search 03\" \/>                                <\/figure>\n                            \n                            <div class=\"features-problem-cards__item-content\">\n                                                                    <h3 class=\"features-problem-cards__item-title h-22 h-20-m\">Hidden instructions<\/h3>\n                                \n                                                                    <div class=\"features-problem-cards__item-text txt-14\">\n                                        <p>An agent reads emails, documents and tickets. If one contains a hidden instruction, the agent may execute it like a legitimate task. This is known as prompt injection.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-problem-cards__item\">\n                                                            <figure class=\"features-problem-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-7.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (7)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-problem-cards__item-content\">\n                                                                    <h3 class=\"features-problem-cards__item-title h-22 h-20-m\">Shadow agents<\/h3>\n                                \n                                                                    <div class=\"features-problem-cards__item-text txt-14\">\n                                        <p>Employees build agents in tools such as Copilot Studio without IT knowing. These agents do not appear in any inventory.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                    <\/ul>\n            \n        <\/div>\n    <\/section>\n\n\n    <section id=\"block_52f11caaa710d5e5fdee797e50b3aba9\"\n             class=\"content-comparison section\"             data-section data-theme=\"light\">\n\n        <div class=\"content-comparison__inner container\">\n\n                            <ul class=\"content-comparison__list\">\n                                            <li class=\"content-comparison__item\">\n                                                            <div class=\"content-comparison__tag title-tag\">Impact<\/div>\n                            \n                                                            <h2 class=\"content-comparison__title h-40 h-32-m\">No authorization concept<\/h2>\n                            \n                                                            <div class=\"content-comparison__text txt-16 txt-16-m\">\n                                    <p>Authentication establishes who the agent is. It does not tell you whether its next action is allowed.<\/p>\n                                <\/div>\n                            \n                                                            <ul class=\"content-comparison__points\">\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Excessive permissions on every run<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">No distinction in the log between the agent and the person it acts for<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Hidden instructions get executed<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Payments and payouts without approval per action<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Unknown agents with access to customer data<\/li>\n                                                                    <\/ul>\n                                                    <\/li>\n                                            <li class=\"content-comparison__item\">\n                                                            <div class=\"content-comparison__tag title-tag\">Our approach<\/div>\n                            \n                                                            <h2 class=\"content-comparison__title h-40 h-32-m\">Least privilege for agents<\/h2>\n                            \n                                                            <div class=\"content-comparison__text txt-16 txt-16-m\">\n                                    <p>Like any employee, an agent only gets the access its task requires. Because it chooses its tools while it works, four control points decide on every action whether it is allowed.<\/p>\n                                <\/div>\n                            \n                                                            <ul class=\"content-comparison__points\">\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">A dedicated identity with short-lived, key-bound credentials<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Autonomy level per system and data classification<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">A catalog of permitted operations<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Task-scoped access for minutes<\/li>\n                                                                            <li class=\"content-comparison__point txt-16 txt-16-m\">Human approval per action for payments, permissions and deletions<\/li>\n                                                                    <\/ul>\n                                                    <\/li>\n                                    <\/ul>\n            \n        <\/div>\n    <\/section>\n\n\n    <section id=\"block_98035e605a062d89fe0becb2acdc13f8\"\n             class=\"features-outcome-cards section\"             data-section data-theme=\"dark\">\n\n        <div class=\"features-outcome-cards__inner container\">\n\n            <div class=\"features-outcome-cards__header section-header\">\n                                    <p class=\"features-outcome-cards__tag title-tag\">Results<\/p>\n                \n                <div class=\"features-outcome-cards__head-row section-header__row\">\n                                            <h2 class=\"features-outcome-cards__title section-header__title h-40 h-32-m\">What clear rights for agents achieve<\/h2>\n                                    <\/div>\n            <\/div>\n\n                            <ul class=\"features-outcome-cards__list\">\n                                            <li class=\"features-outcome-cards__item\">\n                                                            <figure class=\"features-outcome-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-8.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (8)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-outcome-cards__item-content\">\n                                                                    <h3 class=\"features-outcome-cards__item-title h-24 h-22-m\">Complete audit trail<\/h3>\n                                \n                                                                    <div class=\"features-outcome-cards__item-text txt-16 txt-16-m\">\n                                        <p>The log always shows the agent and the person it acts for. An end-to-end correlation ID makes every action traceable.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-outcome-cards__item\">\n                                                            <figure class=\"features-outcome-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/ph_gear-fine-fill.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"ph_gear-fine-fill\" \/>                                <\/figure>\n                            \n                            <div class=\"features-outcome-cards__item-content\">\n                                                                    <h3 class=\"features-outcome-cards__item-title h-24 h-22-m\">Task-scoped access<\/h3>\n                                \n                                                                    <div class=\"features-outcome-cards__item-text txt-16 txt-16-m\">\n                                        <p>The agent receives access for the duration of a task and returns it afterward. Nothing is granted in advance.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-outcome-cards__item\">\n                                                            <figure class=\"features-outcome-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-9.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (9)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-outcome-cards__item-content\">\n                                                                    <h3 class=\"features-outcome-cards__item-title h-24 h-22-m\">Every action checked<\/h3>\n                                \n                                                                    <div class=\"features-outcome-cards__item-text txt-16 txt-16-m\">\n                                        <p>Task, data, tool and output are checked separately. An instruction found in a document does not count as a task.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                            <li class=\"features-outcome-cards__item\">\n                                                            <figure class=\"features-outcome-cards__item-icon m-contain\">\n                                    <img decoding=\"async\" width=\"20\" height=\"20\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Icon-10.svg 20w\" sizes=\"auto, (max-width: 20px) 100vw, 20px\" title=\"Icon (10)\" \/>                                <\/figure>\n                            \n                            <div class=\"features-outcome-cards__item-content\">\n                                                                    <h3 class=\"features-outcome-cards__item-title h-24 h-22-m\">Audit-ready under DORA<\/h3>\n                                \n                                                                    <div class=\"features-outcome-cards__item-text txt-16 txt-16-m\">\n                                        <p>Every layer of the control model maps to a provision of the DORA RTS, in Articles 12, 20 and 21.<\/p>\n                                    <\/div>\n                                                            <\/div>\n                        <\/li>\n                                    <\/ul>\n            \n        <\/div>\n    <\/section>\n\n\n    <section id=\"block_85e124f30b5bb9985d523ff48dbc2984\"\n             class=\"steps-process section\"             data-section data-theme=\"light\">\n\n                    <figure class=\"steps-process__image m-contain\">\n                <img decoding=\"async\" width=\"455\" height=\"339\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg\" class=\"attachment-full size-full\" alt=\"Abstract digital network icon\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/Layer_1.svg 455w\" sizes=\"auto, (max-width: 455px) 100vw, 455px\" title=\"Layer_1\" \/>            <\/figure>\n        \n        <div class=\"steps-process__inner container\">\n\n            <div class=\"steps-process__header section-header\">\n                                    <p class=\"steps-process__tag title-tag\">Approach<\/p>\n                \n                <div class=\"steps-process__head-row section-header__row\">\n                                            <h2 class=\"steps-process__title section-header__title h-40 h-32-m\">From inventory to pilot<\/h2>\n                    \n                                            <ol class=\"steps-process__list\">\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">01<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Inventory<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>An inventory of all agents with purpose, owner, target systems and last use, including agents built by employees.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">02<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Define autonomy levels<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>For each system and data classification, we define whether an agent may observe, recommend or act with approval.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">03<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Operations catalog and delegation<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>For every agent we define which operations it may perform and on whose behalf it acts.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">04<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Set up control points<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>A central policy decides on task, data, tool and output. Enforcement happens close to the tool.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                            <li class=\"steps-process__item\">\n                                    <div class=\"steps-process__item-header\">\n                                        <span class=\"steps-process__item-number\">05<\/span>\n                                                                                    <h3 class=\"steps-process__item-title h-24 h-22-m\">Pilot and evidence<\/h3>\n                                                                            <\/div>\n\n                                                                            <div class=\"steps-process__item-text txt-16\">\n                                            <p>One use case covering all six layers of the control model, then access reviews of agent permissions and a tested shutdown.<\/p>\n                                        <\/div>\n                                                                    <\/li>\n                                                    <\/ol>\n                                    <\/div>\n            <\/div>\n\n        <\/div>\n    <\/section>\n\n\n    <section id=\"contact\"\n             class=\"cta-contact-form section\"             data-section data-theme=\"light\">\n\n        <div class=\"cta-contact-form__inner container\">\n            <div class=\"cta-contact-form__panel\">\n                                    <figure class=\"cta-contact-form__bg m-cover\">\n                        <img decoding=\"async\" width=\"2720\" height=\"1058\" src=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1.png\" class=\"attachment-full size-full\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-1920x747.png 1920w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-1440x560.png 1440w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-1280x498.png 1280w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-767x298.png 767w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1-300x117.png 300w, https:\/\/wertfels.com\/wp-content\/uploads\/2026\/08\/tg_image_195989443-1-1.png 2720w\" sizes=\"auto, (max-width: 2720px) 100vw, 2720px\" title=\"tg_image_195989443 1\" \/>                    <\/figure>\n                \n                <div class=\"cta-contact-form__header\">\n                                            <p class=\"cta-contact-form__tag title-tag\">Ready for the next step<\/p>\n                    \n                                            <div class=\"cta-contact-form__text-group\">\n                                                            <h2 class=\"cta-contact-form__title h-40 h-32-m\">Talk to us about your AI agents<\/h2>\n                            \n                                                            <div class=\"cta-contact-form__text txt-16 txt-16-m\">Tell us briefly about your project. We will get back to you and discuss where your IAM stands today.<\/div>\n                                                    <\/div>\n                                    <\/div>\n\n                                    <div class=\"cta-contact-form__form-wrap cf7\">\n                        \n<div class=\"wpcf7 no-js\" id=\"wpcf7-f1445-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"1445\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/challenges\/1368#wpcf7-f1445-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"1445\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.2.3\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f1445-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<label class=\"w-50\">\n<span class=\"label\">* Name<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Enter your name\" value=\"\" type=\"text\" name=\"your-name\" \/><\/span>\n<\/label>\n\n<label class=\"w-50\">\n<span class=\"label\">* Email<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Enter your email address\" value=\"\" type=\"email\" name=\"your-email\" \/><\/span>\n<\/label>\n\n<label class=\"w-50\">\n<span class=\"label\">* Company name<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-company\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Enter your company name\" value=\"\" type=\"text\" name=\"your-company\" \/><\/span>\n<\/label>\n\n<label class=\"w-50\">\n<span class=\"label\">* Industry<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-industry\"><select class=\"wpcf7-form-control wpcf7-select wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" name=\"your-industry\"><option value=\"\">Select industry<\/option><option value=\"Banking\">Banking<\/option><option value=\"Insurance\">Insurance<\/option><option value=\"Financial services\">Financial services<\/option><option value=\"Automotive\">Automotive<\/option><option value=\"Public sector\">Public sector<\/option><option value=\"Other\">Other<\/option><\/select><\/span>\n<\/label>\n\n<label>\n<span class=\"label\">Message<\/span>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-message\"><textarea cols=\"40\" rows=\"10\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea\" aria-invalid=\"false\" placeholder=\"Your message\" name=\"your-message\"><\/textarea><\/span>\n<\/label>\n<div class=\"wpcf7-turnstile cf-turnstile\" data-appearance=\"interaction-only\" data-theme=\"light\" data-size=\"flexible\" data-before-interactive-callback=\"wfTsZeigen\" data-sitekey=\"0x4AAAAAAE0D1HVD3x9dyaaX\" data-response-field-name=\"_wpcf7_turnstile_response\"><\/div>\n<button class=\"wpcf7-form-control wpcf7-submit has-spinner btn btn--arrow\" type=\"submit\" value=\"Book an initial call\">Book an initial call<\/button><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n                        <div class=\"cf7-thanks\">\n                            <span class=\"cf7-thanks__icon\" aria-hidden=\"true\"><\/span>\n\n                                                            <p class=\"cf7-thanks__title h-28 h-24-m\">Thank you for your inquiry.<\/p>\n                            \n                                                            <div class=\"cf7-thanks__text txt-16\">\n                                    <p>Your message has been sent successfully. Our team will get back to you shortly.<\/p>\n                                <\/div>\n                                                    <\/div>\n                    <\/div>\n                            <\/div>\n        <\/div>\n    <\/section>\n","protected":false},"excerpt":{"rendered":"<p>An agent decides at runtime which tools it calls. A permission list modeled on service accounts does not describe it.<\/p>\n","protected":false},"featured_media":959,"template":"","class_list":["post-1368","challenges","type-challenges","status-publish","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI agents without an authorization concept | WertFels<\/title>\n<meta name=\"description\" content=\"An AI agent gets a goal and picks its own tools. Least privilege, control points and DORA evidence for banks and insurers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI agents without an authorization concept | WertFels\" \/>\n<meta property=\"og:description\" content=\"An AI agent gets a goal and picks its own tools. Least privilege, control points and DORA evidence for banks and insurers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/\" \/>\n<meta property=\"og:site_name\" content=\"WertFels\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/ai-agents-without-authorisation-concept\\\/\",\"url\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/ai-agents-without-authorisation-concept\\\/\",\"name\":\"AI agents without an authorization concept | WertFels\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/ai-agents-without-authorisation-concept\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/ai-agents-without-authorisation-concept\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/whitepaper-ki-agenten.jpg\",\"datePublished\":\"2026-09-26T15:14:41+00:00\",\"description\":\"An AI agent gets a goal and picks its own tools. Least privilege, control points and DORA evidence for banks and insurers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/ai-agents-without-authorisation-concept\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/ai-agents-without-authorisation-concept\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/ai-agents-without-authorisation-concept\\\/#primaryimage\",\"url\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/whitepaper-ki-agenten.jpg\",\"contentUrl\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/whitepaper-ki-agenten.jpg\",\"width\":2048,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/herausforderungen\\\/ai-agents-without-authorisation-concept\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/wertfels.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI agents without an authorization concept\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/wertfels.com\\\/en\\\/\",\"name\":\"WertFels\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#organization\",\"name\":\"WertFels GmbH\",\"alternateName\":\"WertFels\",\"url\":\"https:\\\/\\\/wertfels.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/wertfels-logo-696.png\",\"contentUrl\":\"https:\\\/\\\/wertfels.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/wertfels-logo-696.png\",\"width\":696,\"height\":696,\"caption\":\"WertFels GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/wertfels.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/wertfels-gmbh\"],\"legalName\":\"WertFels GmbH\",\"description\":\"Beratungshaus f\u00fcr Identity und Access Management. Schwerpunkt sind Banken, Versicherer und weitere regulierte Branchen, dazu Non-Human Identities und agentische KI.\",\"email\":\"info@wertfels.com\",\"telephone\":\"+49 89 244102321\",\"vatID\":\"DE328699375\",\"foundingDate\":\"2020-01-20\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"Schellingstra\u00dfe 109a\",\"postalCode\":\"80798\",\"addressLocality\":\"M\u00fcnchen\",\"addressCountry\":\"DE\"},\"identifier\":{\"@type\":\"PropertyValue\",\"name\":\"Handelsregister\",\"value\":\"HRB 31625, Amtsgericht Wiesbaden\"},\"areaServed\":[{\"@type\":\"Country\",\"name\":\"Deutschland\"},{\"@type\":\"Country\",\"name\":\"\u00d6sterreich\"},{\"@type\":\"Country\",\"name\":\"Schweiz\"}],\"knowsAbout\":[\"Identity und Access Management\",\"Identity Governance und Administration\",\"Privileged Access Management\",\"Non-Human Identities\",\"Agentische KI\",\"DORA\",\"NIS2\",\"BAIT und VAIT\"],\"contactPoint\":{\"@type\":\"ContactPoint\",\"contactType\":\"Vertrieb\",\"telephone\":\"+49 89 244102321\",\"email\":\"info@wertfels.com\",\"availableLanguage\":[\"de\",\"en\"],\"areaServed\":[\"DE\",\"AT\",\"CH\"]}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI agents without an authorization concept | WertFels","description":"An AI agent gets a goal and picks its own tools. Least privilege, control points and DORA evidence for banks and insurers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/","og_locale":"en_US","og_type":"article","og_title":"AI agents without an authorization concept | WertFels","og_description":"An AI agent gets a goal and picks its own tools. Least privilege, control points and DORA evidence for banks and insurers.","og_url":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/","og_site_name":"WertFels","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/","url":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/","name":"AI agents without an authorization concept | WertFels","isPartOf":{"@id":"https:\/\/wertfels.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/#primaryimage"},"image":{"@id":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/#primaryimage"},"thumbnailUrl":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/whitepaper-ki-agenten.jpg","datePublished":"2026-09-26T15:14:41+00:00","description":"An AI agent gets a goal and picks its own tools. Least privilege, control points and DORA evidence for banks and insurers.","breadcrumb":{"@id":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/#primaryimage","url":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/whitepaper-ki-agenten.jpg","contentUrl":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/whitepaper-ki-agenten.jpg","width":2048,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/wertfels.com\/en\/herausforderungen\/ai-agents-without-authorisation-concept\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wertfels.com\/en\/"},{"@type":"ListItem","position":2,"name":"AI agents without an authorization concept"}]},{"@type":"WebSite","@id":"https:\/\/wertfels.com\/en\/#website","url":"https:\/\/wertfels.com\/en\/","name":"WertFels","description":"","publisher":{"@id":"https:\/\/wertfels.com\/en\/#organization"},"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/wertfels.com\/en\/#organization","name":"WertFels GmbH","alternateName":"WertFels","url":"https:\/\/wertfels.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wertfels.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/wertfels-logo-696.png","contentUrl":"https:\/\/wertfels.com\/wp-content\/uploads\/2026\/09\/wertfels-logo-696.png","width":696,"height":696,"caption":"WertFels GmbH"},"image":{"@id":"https:\/\/wertfels.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/wertfels-gmbh"],"legalName":"WertFels GmbH","description":"Beratungshaus f\u00fcr Identity und Access Management. Schwerpunkt sind Banken, Versicherer und weitere regulierte Branchen, dazu Non-Human Identities und agentische KI.","email":"info@wertfels.com","telephone":"+49 89 244102321","vatID":"DE328699375","foundingDate":"2020-01-20","address":{"@type":"PostalAddress","streetAddress":"Schellingstra\u00dfe 109a","postalCode":"80798","addressLocality":"M\u00fcnchen","addressCountry":"DE"},"identifier":{"@type":"PropertyValue","name":"Handelsregister","value":"HRB 31625, Amtsgericht Wiesbaden"},"areaServed":[{"@type":"Country","name":"Deutschland"},{"@type":"Country","name":"\u00d6sterreich"},{"@type":"Country","name":"Schweiz"}],"knowsAbout":["Identity und Access Management","Identity Governance und Administration","Privileged Access Management","Non-Human Identities","Agentische KI","DORA","NIS2","BAIT und VAIT"],"contactPoint":{"@type":"ContactPoint","contactType":"Vertrieb","telephone":"+49 89 244102321","email":"info@wertfels.com","availableLanguage":["de","en"],"areaServed":["DE","AT","CH"]}}]}},"_links":{"self":[{"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/challenges\/1368","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/challenges"}],"about":[{"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/types\/challenges"}],"version-history":[{"count":0,"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/challenges\/1368\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/media\/959"}],"wp:attachment":[{"href":"https:\/\/wertfels.com\/en\/wp-json\/wp\/v2\/media?parent=1368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}