A user gives an agent a task. Maybe it needs to read invoices, update a CRM record, check an internal dashboard, or call a few APIs on their behalf. The easy model is to let the agent act with whatever access the user already has.
But I am not sure that makes sense once the user has a lot of authority. If I can delete a workspace, change billing, export customer data, or invite an admin, does an agent helping me with one task need access to all of that too Giving the agent its own identity and narrower permissions sounds safer. But then another question comes up: how narrow can those permissions be before the agent keeps hitting boundaries halfway through the task?
So I am curious how teams building agents are thinking about this today.
Does the agent inherit the user s authority? Does it get its own identity with access only to specific APIs or actions? Or are you handling this another way? And where do you draw the line between the user is allowed to do this and the agent is allowed to do this for the user ?
the one year free offer for startups is honestly such a smart move, basically lets you build the whole stack without cobbling together five different auth tools.
MonoCloud for Startups
EverTutor AI
Congrats on the launch identity is one of those problems that only looks simple until you have to build it yourself Really Building authentication and identity is never as straightforward as it seems Excited to see products taking a fresh approach here Congratulations to the team and hope you have a fantastic launch
MonoCloud for Startups
@suryansh_tiwari2 thank you so much. it always looks like a solved problem until you're actually in it 😄 really appreciate the support!
One Dollar Resume Review
Amazing, the product looks so good, the tiers are so generous, so excited to try it out 🥳
MonoCloud for Startups
Macaly
one layer for users + agents is smart 👏 auth is def heading this way
MonoCloud for Startups
@petrkovacik Thanks Petr! Agreed, once agents started acting for users the split between "user auth" and "machine auth" stopped making sense. Curious how you're handling it at Macaly, are the apps people build getting agent access into their stack yet?
Lessssgooooo MonoCloud