Role-based access control

A Ping-sponsored paper would tie every AI agent to a named human owner

Martin Kuppinger of KuppingerCole argues role-based access cannot hold an agent that makes probabilistic, multi-step decisions, and wants per-session credentials plus logs recording what the agent was told to do.