{"id":32148,"date":"2026-08-24T20:12:00","date_gmt":"2026-08-24T20:12:00","guid":{"rendered":"https:\/\/thecloud.group\/?p=32148"},"modified":"2026-08-17T20:13:23","modified_gmt":"2026-08-17T20:13:23","slug":"permits-agents-at-risk","status":"publish","type":"post","link":"https:\/\/thecloud.group\/en\/permisos-agentes-ia-riesgo\/","title":{"rendered":"Granting permissions to an agent is a risk decision, not a configuration decision."},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"32148\" class=\"elementor elementor-32148\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cfd484e elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"cfd484e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;tilt&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<div class=\"elementor-shape elementor-shape-bottom\" aria-hidden=\"true\" data-negative=\"false\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewbox=\"0 0 1000 100\" preserveaspectratio=\"none\">\n\t<path class=\"elementor-shape-fill\" d=\"M0,6V0h1000v100L0,6z\"\/>\n<\/svg>\t\t<\/div>\n\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-64f4c56\" data-id=\"64f4c56\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-72fca4b elementor-hidden-mobile elementor-widget elementor-widget-image\" data-id=\"72fca4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/elementor\/thumbs\/logo-pd8scx7e21qrxkwrdlcuh7c8eeq4vmzqsjri81k6ps.png\" title=\"logo\" alt=\"logo\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-a76af51 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a76af51\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-cf15d65\" data-id=\"cf15d65\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e993978 elementor-widget elementor-widget-heading\" data-id=\"e993978\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Granting permissions to an agent is a risk decision, not a configuration decision.<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c047b73 elementor-widget elementor-widget-heading\" data-id=\"c047b73\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">August 24, 2026<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t<div class=\"elementor-element elementor-element-43acffb e-flex e-con-boxed e-con e-parent\" data-id=\"43acffb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a5b2d83 elementor-widget elementor-widget-text-editor\" data-id=\"a5b2d83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Granting permissions to an artificial intelligence agent is not a configuration task: it&#039;s a risky decision that should be made with the same rigor as deciding who has signatory authority on a bank account. Each additional permission expands the potential for harm, and this expansion isn&#039;t offset by the quality of the model, because the risk doesn&#039;t stem from the model being flawed: it stems from the fact that it can be manipulated or make mistakes within the scope you&#039;ve granted it.<\/p><p>The formulation we use internally is simple: <strong>An agent cannot cause harm in a place where he is not authorized.<\/strong>. The entire security design of an agentic system is derived from that phrase.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae9189b elementor-widget elementor-widget-heading\" data-id=\"ae9189b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why are permits the critical point and not the model?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4ec25a0 e-flex e-con-boxed e-con e-parent\" data-id=\"4ec25a0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ca71b17 elementor-widget elementor-widget-text-editor\" data-id=\"ca71b17\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>OWASP, in its 2025 Top 10 Risks for Language Model Applications, ranks prompt injection first for the second consecutive year, and dedicates an entire category\u2014LLM06, *Excessive Agency*\u2014to this exact problem. It breaks it down into three forms:<\/p><ul><li><strong>Excessive functionality<\/strong>The agent has access to tools that their task does not require.<\/li><li><strong>Excessive permissions<\/strong>: logs in with an identity that may be more than necessary, usually because an existing service account was reused.<\/li><li><strong>Excessive autonomy<\/strong>: can execute high-impact actions without human validation.<\/li><\/ul><p>All three are design decisions, not model flaws. And all three are almost always made during the integration phase, for technical reasons and without anyone in the business knowing.<\/p><p>The link between these two approaches is indirect prompt injection: external content\u2014an email, a PDF from a vendor, a web page, a customer ticket\u2014containing instructions directed to the model. The agent reads this as part of its context and acts accordingly. If its permissions are broad, text written by a third party can end up executing actions within your systems.<\/p><p>This is why the safety of an agent is not solved by choosing a better model. It is solved by limiting what the agent can do when someone manages to influence it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-682fefc elementor-widget elementor-widget-heading\" data-id=\"682fefc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Non-human identities already outnumber human ones<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d294403 elementor-widget elementor-widget-text-editor\" data-id=\"d294403\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Here&#039;s a structural change that many organizations haven&#039;t incorporated into their access management. For twenty years, identity control was designed for people: onboarding, offboarding, roles, periodic reviews. Agents introduce identities that aren&#039;t people; they&#039;re created in minutes, don&#039;t appear on the organizational chart, and are rarely reviewed.<\/p><p>IBM&#039;s 2025 Cost of a Data Breach report provides the data that concludes the argument: <strong>The 97% of organizations that suffered an AI-related incident lacked adequate access controls<\/strong>. It&#039;s not a problem of the attacker&#039;s sophistication. It&#039;s a problem of permission hygiene.<\/p><p>We have covered it in depth in <u><a href=\"https:\/\/thecloud.group\/en\/non-human-identities-ai-agents-cybersecurity\/\">non-human identities, AI agents, and cybersecurity<\/a><\/u>, But the operational summary is this: if your access management process does not include non-human identities, your access inventory is incomplete, and probably in the part that can do the most.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6089f4e elementor-widget elementor-widget-heading\" data-id=\"6089f4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The decision framework: four levels of scope<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29b879a elementor-widget elementor-widget-text-editor\" data-id=\"29b879a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Not all permits have the same risk profile. This classification allows for a decision to be made in a thirty-minute meeting.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ba56743 elementor-widget elementor-widget-text-editor\" data-id=\"ba56743\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table width=\"600\"><thead><tr><td width=\"200\"><p><strong>Level<\/strong><\/p><\/td><td width=\"200\"><p><strong>What can the agent do?<\/strong><\/p><\/td><td width=\"200\"><p><strong>Required control<\/strong><\/p><\/td><\/tr><\/thead><tbody><tr><td width=\"200\"><p><strong>1. Limited reading<\/strong><\/p><\/td><td width=\"200\"><p>Query data for a specific domain<\/p><\/td><td width=\"200\"><p>Access logging and volume limit<\/p><\/td><\/tr><tr><td width=\"200\"><p><strong>2. Extensive reading<\/strong><\/p><\/td><td width=\"200\"><p>Consult multiple systems and sensitive data<\/p><\/td><td width=\"200\"><p>Role-based permissions, data masking, auditing<\/p><\/td><\/tr><tr><td width=\"200\"><p><strong>3. Reversible writing<\/strong><\/p><\/td><td width=\"200\"><p>Create drafts, proposals, pending records<\/p><\/td><td width=\"200\"><p>Human validation before confirming<\/p><\/td><\/tr><tr><td width=\"200\"><p><strong>4. Irreversible writing<\/strong><\/p><\/td><td width=\"200\"><p>Payments, customer communications, production changes<\/p><\/td><td width=\"200\"><p>Explicit approval, double control, and reversal plan<\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d683c52 elementor-widget elementor-widget-text-editor\" data-id=\"d683c52\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The rule of thumb is that <strong>Most of the business value is in levels 1 and 3<\/strong>, and most of the risk is in step 4. An agent who prepares the reimbursement and leaves it pending approval captures almost all of the time savings with a fraction of the risk of one who executes the reimbursement.<\/p><p>When someone insists on level 4, the right question is how much additional value it provides compared to level 3. It&#039;s usually the time it takes a person to press a button. It rarely makes up for it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-544ed85 elementor-widget elementor-widget-heading\" data-id=\"544ed85\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Seven controls that should be non-negotiable<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-da91096 elementor-widget elementor-widget-text-editor\" data-id=\"da91096\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Identity of oneself by agent.<\/strong> Never a shared account or the reuse of an existing service account. Without a unique identity, there is no way to attribute what happened.<\/p><p><strong>Minimum allowance per task, not per agent.<\/strong> If the agent performs three different tasks, each should have its own scope. A permission granted for one task becomes available for all the others.<\/p><p><strong>Short-term credentials.<\/strong> Tokens that expire, not permanent keys in a configuration file.<\/p><p><strong>Whitelist of stocks.<\/strong> Explicitly define which operations can be executed, rather than defining which ones cannot. The latter is always incomplete.<\/p><p><strong>Volume and amount limits.<\/strong> An agent who can issue refunds should have a limit per transaction and per day. It&#039;s the same principle that applies to any individual with spending power.<\/p><p><strong>Complete and immutable record.<\/strong> What was entered, what was decided, what was executed, with which version of the model, and who validated it. Without this, there is no audit or possible defense.<\/p><p><strong>Stop switch.<\/strong> A mechanism to stop the agent without deploying code and without depending on the vendor.<\/p><p>None of the seven are unusual. They are all standard security practices applied to a new actor. What is striking is how often they are omitted precisely because the actor is new and doesn&#039;t fit into existing procedures.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-56af6f7 elementor-widget elementor-widget-heading\" data-id=\"56af6f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How to approach this without blocking the project<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fd66765 elementor-widget elementor-widget-text-editor\" data-id=\"fd66765\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The risk of this article is that it might be read as an argument for inaction. It is not. The approach that works is progressive scaling:<\/p><ol><li><strong>Start at level 1 or 3.<\/strong> Limited reading or reversible writing with validation.<\/li><li><strong>Measure over a defined period.<\/strong> How many of the agent&#039;s proposals are approved without changes, how many are corrected, and how many are rejected? That rate is your true quality data, and you don&#039;t have it until you&#039;re actually trading.<\/li><li><strong>Expand your reach with data alone.<\/strong> If the unchanged approval rate remains high over a sufficient volume, it makes sense to reduce validation friction in lower-impact cases.<\/li><li><strong>Never expand due to schedule pressure.<\/strong> The most common cause of an incident is removing human validation to meet a deadline.<\/li><\/ol><p>This is the same principle of tiered oversight that we apply when integrating AI components into enterprise systems, and the reason why governance is not a final phase of the project but a property of its architecture, as we explained in <u><a href=\"https:\/\/thecloud.group\/en\/risks-hallucinations-and-ai-governance\/\">AI risks, hallucinations, and governance<\/a><\/u><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c79eaf3 elementor-widget elementor-widget-heading\" data-id=\"c79eaf3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The one-line question<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-532d5f3 elementor-widget elementor-widget-text-editor\" data-id=\"532d5f3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Before approving any agent deployment, it&#039;s advisable to answer this: <strong>If a stranger could write the text that this agent is about to read, what is the worst thing they could get him to do?<\/strong><\/p><p>If the answer is &quot;consult public information,&quot; the risk is acceptable. If the answer is &quot;issue a payment&quot; or &quot;write to all our customers,&quot; the design is not complete.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-acd5249 elementor-widget elementor-widget-heading\" data-id=\"acd5249\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Frequently Asked Questions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0bafad2 e-flex e-con-boxed e-con e-parent\" data-id=\"0bafad2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-255e77a elementor-widget elementor-widget-n-accordion\" data-id=\"255e77a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3910\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-3910\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Why are permissions the biggest risk for an AI agent? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3910\" class=\"elementor-element elementor-element-5b9195b e-con-full e-flex e-con e-child\" data-id=\"5b9195b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-128178a elementor-widget elementor-widget-text-editor\" data-id=\"128178a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Because they determine the potential damage surface. An agent cannot cause damage where it is not authorized, regardless of the model&#039;s quality or whether it has been manipulated. OWASP dedicates a separate category to this problem in its Top 10 LLM Applications for 2025: Excessive Agency.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3911\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3911\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> What is &quot;excessive agency&quot; in AI agents? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3911\" class=\"elementor-element elementor-element-0fc0d7e e-con-full e-flex e-con e-child\" data-id=\"0fc0d7e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fff5b06 elementor-widget elementor-widget-text-editor\" data-id=\"fff5b06\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>It is the granting of excessive capacity to an agent, in three forms: excessive functionality (access to tools that its task does not require), excessive permissions (identity with more privileges than necessary) and excessive autonomy (execution of high-impact actions without human validation).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3912\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3912\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> What is indirect prompt injection and why does it matter? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3912\" class=\"elementor-element elementor-element-1872c91 e-con-full e-flex e-con e-child\" data-id=\"1872c91\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-64a1d1a elementor-widget elementor-widget-text-editor\" data-id=\"64a1d1a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>It is the granting of excessive capacity to an agent, in three forms: excessive functionality (access to tools that its task does not require), excessive permissions (identity with more privileges than necessary) and excessive autonomy (execution of high-impact actions without human validation).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3913\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3913\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> What minimum controls should an agent have in production? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3913\" class=\"elementor-element elementor-element-69dc4e1 e-con-full e-flex e-con e-child\" data-id=\"69dc4e1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-770ee8f elementor-widget elementor-widget-text-editor\" data-id=\"770ee8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Seven: unique and non-shared identity, minimum permission per task, short-lived credentials, whitelist of allowed actions, volume and amount limits, complete and immutable logging of each execution, and a stop mechanism that does not require deploying code.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3914\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3914\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Can an agent be deployed without human validation? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3914\" class=\"elementor-element elementor-element-394892d e-con-full e-flex e-con e-child\" data-id=\"394892d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6b896dc elementor-widget elementor-widget-text-editor\" data-id=\"6b896dc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Only for reversible and low-impact actions, and only after measuring over a sufficient period what percentage of proposals are approved without changes. Removing human validation due to schedule pressure is the most common cause of incidents in agentic systems.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3915\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"6\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3915\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> How are the non-human identities of agents managed? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3915\" class=\"elementor-element elementor-element-b0eb544 e-con-full e-flex e-con e-child\" data-id=\"b0eb544\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa43162 elementor-widget elementor-widget-text-editor\" data-id=\"aa43162\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Similar to human access controls, but with more discipline: documented registration, assigned owner, reviewable permissions, credential expiration, and periodic review. IBM documented in 2025 that the 97% protocol for organizations experiencing AI-related incidents lacked adequate access controls.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-62494f1 elementor-widget elementor-widget-text-editor\" data-id=\"62494f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table width=\"600\"><tbody><tr><td width=\"600\"><p><strong>Do you know exactly what each agent you have deployed can do?<\/strong> We audit the scope, identities, permissions, and traceability of your AI systems, and deliver the diagnosis in writing. <u><a href=\"https:\/\/thecloud.group\/en\/technology-consulting\/\">Request the audit \u2192<\/a><\/u><\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2776e2f e-con-full e-flex e-con e-child\" data-id=\"2776e2f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-313fb2f elementor-widget elementor-widget-image\" data-id=\"313fb2f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-32155\" alt=\"Managing permissions and access for Artificial Intelligence agents in enterprise systems\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5d096db elementor-widget elementor-widget-image\" data-id=\"5d096db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-32154\" alt=\"\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f22134d elementor-widget elementor-widget-image\" data-id=\"f22134d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-32046\" alt=\"\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>In the vast digital landscape of the 21st century, security is the cornerstone of any business. Cybersecurity vulnerabilities make no distinction between corporate giants and promising startups.<\/p>","protected":false},"author":20,"featured_media":32155,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[859],"tags":[896,883],"class_list":["post-32148","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-ia","tag-producto-digital","tag-sistemas-empresariales"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n The Cloud Group<\/title>\n<meta name=\"description\" content=\"C\u00f3mo digitalizamos el archivo del Parlamentode Guinea Ecuatorial: alcance, retost\u00e9cnicos, soluci\u00f3n y resultado. Caso real publicado.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thecloud.group\/en\/permits-agents-at-risk\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n\" \/>\n<meta property=\"og:description\" content=\"Descubre art\u00edculos sobre desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y transformaci\u00f3n digital para empresas.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thecloud.group\/en\/permits-agents-at-risk\/\" \/>\n<meta property=\"og:site_name\" content=\"The Cloud Group\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/thecloudgroupglobal\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-24T20:12:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Paula Franco\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@thecloudgroup\" \/>\n<meta name=\"twitter:site\" content=\"@thecloudgroup\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Paula Franco\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\"},\"author\":{\"name\":\"Paula Franco\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/person\\\/9292d905a1c98ea7345e5e71a5fe341f\"},\"headline\":\"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n\",\"datePublished\":\"2026-08-24T20:12:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\"},\"wordCount\":1956,\"publisher\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Robot_hand_hovering_button_202608171511.jpeg\",\"keywords\":[\"producto digital\",\"sistemas empresariales\"],\"articleSection\":[\"Data &amp; IA\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\",\"url\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\",\"name\":\"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n The Cloud Group\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Robot_hand_hovering_button_202608171511.jpeg\",\"datePublished\":\"2026-08-24T20:12:00+00:00\",\"description\":\"C\u00f3mo digitalizamos el archivo del Parlamentode Guinea Ecuatorial: alcance, retost\u00e9cnicos, soluci\u00f3n y resultado. Caso real publicado.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#primaryimage\",\"url\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Robot_hand_hovering_button_202608171511.jpeg\",\"contentUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Robot_hand_hovering_button_202608171511.jpeg\",\"width\":1024,\"height\":1024,\"caption\":\"Dar permisos a un agente de IA implica evaluar riesgos, accesos y capacidad de actuaci\u00f3n dentro de la empresa.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/thecloud.group\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#website\",\"url\":\"https:\\\/\\\/thecloud.group\\\/\",\"name\":\"The Cloud Group\",\"description\":\"Empresa especializada en desarrollo de software a medida, automatizaci\u00f3n empresarial e inteligencia artificial para empresas.\",\"publisher\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\"},\"alternateName\":\"TCG Software\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/thecloud.group\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\",\"name\":\"The Cloud Group\",\"alternateName\":\"TCG\",\"url\":\"https:\\\/\\\/thecloud.group\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/logoSmallFirmaCorreo.png\",\"contentUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/logoSmallFirmaCorreo.png\",\"width\":300,\"height\":190,\"caption\":\"The Cloud Group\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/thecloudgroupglobal\",\"https:\\\/\\\/x.com\\\/thecloudgroup\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/the-cloud-group\",\"https:\\\/\\\/www.instagram.com\\\/thecloudgroupglobal\",\"https:\\\/\\\/www.youtube.com\\\/@TheCloudGroup\"],\"description\":\"The Cloud Group es una empresa internacional especializada en desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y m\u00f3viles y transformaci\u00f3n digital. Ayudamos a empresas a optimizar procesos, reducir costos y acelerar su crecimiento mediante soluciones tecnol\u00f3gicas personalizadas.\",\"email\":\"paula.franco@thecloud.group\",\"telephone\":\"3042544988\",\"legalName\":\"THE CLOUD COLOMBIA SAS\",\"vatID\":\"902084280\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/person\\\/9292d905a1c98ea7345e5e71a5fe341f\",\"name\":\"Paula Franco\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"caption\":\"Paula Franco\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Granting permissions to an agent is a risk decision, not a configuration choice. - The Cloud Group","description":"How we digitized the archive of the Parliament of Equatorial Guinea: scope, technical challenges, solution and result. Real case published.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thecloud.group\/en\/permits-agents-at-risk\/","og_locale":"en_US","og_type":"article","og_title":"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n","og_description":"Descubre art\u00edculos sobre desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y transformaci\u00f3n digital para empresas.","og_url":"https:\/\/thecloud.group\/en\/permits-agents-at-risk\/","og_site_name":"The Cloud Group","article_publisher":"https:\/\/www.facebook.com\/thecloudgroupglobal","article_published_time":"2026-08-24T20:12:00+00:00","og_image":[{"width":1024,"height":1024,"url":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","type":"image\/jpeg"}],"author":"Paula Franco","twitter_card":"summary_large_image","twitter_creator":"@thecloudgroup","twitter_site":"@thecloudgroup","twitter_misc":{"Written by":"Paula Franco","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#article","isPartOf":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/"},"author":{"name":"Paula Franco","@id":"https:\/\/thecloud.group\/#\/schema\/person\/9292d905a1c98ea7345e5e71a5fe341f"},"headline":"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n","datePublished":"2026-08-24T20:12:00+00:00","mainEntityOfPage":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/"},"wordCount":1956,"publisher":{"@id":"https:\/\/thecloud.group\/#organization"},"image":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#primaryimage"},"thumbnailUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","keywords":["producto digital","sistemas empresariales"],"articleSection":["Data &amp; IA"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/","url":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/","name":"Granting permissions to an agent is a risk decision, not a configuration choice. - The Cloud Group","isPartOf":{"@id":"https:\/\/thecloud.group\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#primaryimage"},"image":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#primaryimage"},"thumbnailUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","datePublished":"2026-08-24T20:12:00+00:00","description":"How we digitized the archive of the Parliament of Equatorial Guinea: scope, technical challenges, solution and result. Real case published.","breadcrumb":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#primaryimage","url":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","contentUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","width":1024,"height":1024,"caption":"Dar permisos a un agente de IA implica evaluar riesgos, accesos y capacidad de actuaci\u00f3n dentro de la empresa."},{"@type":"BreadcrumbList","@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/thecloud.group\/"},{"@type":"ListItem","position":2,"name":"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n"}]},{"@type":"WebSite","@id":"https:\/\/thecloud.group\/#website","url":"https:\/\/thecloud.group\/","name":"The Cloud Group","description":"Company specializing in custom software development, business automation and artificial intelligence for businesses.","publisher":{"@id":"https:\/\/thecloud.group\/#organization"},"alternateName":"TCG Software","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thecloud.group\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/thecloud.group\/#organization","name":"The Cloud Group","alternateName":"TCG","url":"https:\/\/thecloud.group\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/thecloud.group\/#\/schema\/logo\/image\/","url":"https:\/\/thecloud.group\/wp-content\/uploads\/2020\/05\/logoSmallFirmaCorreo.png","contentUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2020\/05\/logoSmallFirmaCorreo.png","width":300,"height":190,"caption":"The Cloud Group"},"image":{"@id":"https:\/\/thecloud.group\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/thecloudgroupglobal","https:\/\/x.com\/thecloudgroup","https:\/\/www.linkedin.com\/company\/the-cloud-group","https:\/\/www.instagram.com\/thecloudgroupglobal","https:\/\/www.youtube.com\/@TheCloudGroup"],"description":"The Cloud Group is an international company specializing in custom software development, business automation, artificial intelligence, ERP, CRM, web and mobile applications, and digital transformation. We help companies optimize processes, reduce costs, and accelerate their growth through customized technology solutions.","email":"paula.franco@thecloud.group","telephone":"3042544988","legalName":"THE CLOUD COLOMBIA SAS","vatID":"902084280"},{"@type":"Person","@id":"https:\/\/thecloud.group\/#\/schema\/person\/9292d905a1c98ea7345e5e71a5fe341f","name":"Paula Franco","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","caption":"Paula Franco"}}]}},"_links":{"self":[{"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/posts\/32148","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/comments?post=32148"}],"version-history":[{"count":9,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/posts\/32148\/revisions"}],"predecessor-version":[{"id":32159,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/posts\/32148\/revisions\/32159"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/media\/32155"}],"wp:attachment":[{"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/media?parent=32148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/categories?post=32148"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/tags?post=32148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}