As AI agents proliferate in enterprise operations, permission management becomes one of the most practical levers to secure them. Agents operate with the access people give them, so the old problem of broad privileges now occurs at machine speed.
Governance is often seen as a brake on this dynamic, especially as labor platforms turn agents into everyday tools. According to Ryan Nigro (pictured), security, trust and enablement team leader at monday.com, monday.com Ltd., which relaunched as an AI work platform with native agents, believes that well-designed guardrails enable teams to move faster.
“A car’s brakes aren’t designed to slow down all the time,” Nigro said. “So you can be sure to drive faster.”
Nigro spoke with theCUBE’s Rebecca Knight at monday.com’s Elevate event during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed how permission management is crucial to the security of AI agents. (*Disclosure below.)
Authorization management as the core of AI governance
Nigro’s approach is based on least privilege, a concept that cybersecurity teams first applied to human users. AI largely does what employees already do, so granting permissions to employees also becomes a problem for agents, he explained. The solution is to introduce AI piecemeal, giving each tool the minimal access it needs and expanding it as results become apparent.
“You don’t want to enable all features and give access to everyone at once. Those are just bad permissions,” Nigro said.
The biggest gaps arise from everyday staff moves. An employee moving from finance to legal can retain access to both departments in companies without strict permissions management, Nigro noted. He cited an IBM Corp. study that estimated 80% to 90% of breaches were due to human error related to over-approval.
“It’s just about making sure your users get just enough to complete their tasks, but not too much to cause harm,” Nigro said. “There is no reason why a sales rep should have the ability to change your production environment.”
Here’s the full video interview, part of SiliconANGLE and theCUBE’s coverage of monday.com’s Elevate event:
(*Disclosure: monday.com sponsored this segment from theCUBE. Neither monday.com nor other sponsors have editorial control over the content of theCUBE or SiliconANGLE.)
Photo: SiliconANGLE
Support our mission to keep content open and free by interacting with theCUBE community. Join theCUBE Alumni Trust Networkwhere technology leaders connect, share information and create opportunities.
- Over 15 million viewers of theCUBE videosto spark conversations about AI, cloud, cybersecurity and more
- Over 11.4k theCUBE alumni — Connect with more than 11,400 technology and business leaders shaping the future through a unique, trusted network
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands, reaching over 15 million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is a game-changer in audience engagement, leveraging the theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of the industry conversation.
