{"id":32148,"date":"2026-08-24T20:12:00","date_gmt":"2026-08-24T20:12:00","guid":{"rendered":"https:\/\/thecloud.group\/?p=32148"},"modified":"2026-08-17T20:13:23","modified_gmt":"2026-08-17T20:13:23","slug":"permis-agents-a-risque","status":"publish","type":"post","link":"https:\/\/thecloud.group\/fr\/permisos-agentes-ia-riesgo\/","title":{"rendered":"L&#039;octroi d&#039;autorisations \u00e0 un agent est une d\u00e9cision relative aux risques, et non une d\u00e9cision de configuration."},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"32148\" class=\"elementor elementor-32148\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cfd484e elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"cfd484e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;tilt&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<div class=\"elementor-shape elementor-shape-bottom\" aria-hidden=\"true\" data-negative=\"false\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewbox=\"0 0 1000 100\" preserveaspectratio=\"none\">\n\t<path class=\"elementor-shape-fill\" d=\"M0,6V0h1000v100L0,6z\"\/>\n<\/svg>\t\t<\/div>\n\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-64f4c56\" data-id=\"64f4c56\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-72fca4b elementor-hidden-mobile elementor-widget elementor-widget-image\" data-id=\"72fca4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/elementor\/thumbs\/logo-pd8scx7e21qrxkwrdlcuh7c8eeq4vmzqsjri81k6ps.png\" title=\"logo\" alt=\"logo\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-a76af51 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a76af51\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-cf15d65\" data-id=\"cf15d65\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e993978 elementor-widget elementor-widget-heading\" data-id=\"e993978\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">L&#039;octroi d&#039;autorisations \u00e0 un agent est une d\u00e9cision relative aux risques, et non une d\u00e9cision de configuration.<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c047b73 elementor-widget elementor-widget-heading\" data-id=\"c047b73\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">24 ao\u00fbt 2026<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t<div class=\"elementor-element elementor-element-43acffb e-flex e-con-boxed e-con e-parent\" data-id=\"43acffb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a5b2d83 elementor-widget elementor-widget-text-editor\" data-id=\"a5b2d83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Accorder des autorisations \u00e0 un agent d&#039;intelligence artificielle n&#039;est pas une simple t\u00e2che de configuration\u00a0: c&#039;est une d\u00e9cision risqu\u00e9e qui doit \u00eatre prise avec la m\u00eame rigueur que celle consistant \u00e0 d\u00e9terminer qui est habilit\u00e9 \u00e0 signer sur un compte bancaire. Chaque autorisation suppl\u00e9mentaire accro\u00eet le potentiel de dommage, et cette augmentation n&#039;est pas compens\u00e9e par la qualit\u00e9 du mod\u00e8le, car le risque ne provient pas d&#039;un d\u00e9faut intrins\u00e8que du mod\u00e8le\u00a0: il provient du fait qu&#039;il peut \u00eatre manipul\u00e9 ou commettre des erreurs dans le cadre des autorisations qui lui ont \u00e9t\u00e9 accord\u00e9es.<\/p><p>La formulation que nous utilisons en interne est simple\u00a0: <strong>Un agent ne peut causer de pr\u00e9judice dans un lieu o\u00f9 il n&#039;est pas autoris\u00e9 \u00e0 agir.<\/strong>. L&#039;ensemble de la conception de la s\u00e9curit\u00e9 d&#039;un syst\u00e8me multi-agents d\u00e9coule de cette phrase.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae9189b elementor-widget elementor-widget-heading\" data-id=\"ae9189b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Pourquoi les permis sont-ils le point critique et non le mod\u00e8le ?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4ec25a0 e-flex e-con-boxed e-con e-parent\" data-id=\"4ec25a0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ca71b17 elementor-widget elementor-widget-text-editor\" data-id=\"ca71b17\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Dans son rapport 2025 sur les 10 principaux risques li\u00e9s aux applications de mod\u00e8les de langage, l&#039;OWASP classe l&#039;injection de prompts en t\u00eate pour la deuxi\u00e8me ann\u00e9e cons\u00e9cutive et lui consacre une cat\u00e9gorie enti\u00e8re \u2013 LLM06, *Agence excessive* \u2013 pr\u00e9cis\u00e9ment. Elle la d\u00e9compose en trois formes\u00a0:<\/p><ul><li><strong>Fonctionnalit\u00e9 excessive<\/strong>L&#039;agent a acc\u00e8s \u00e0 des outils qui ne sont pas n\u00e9cessaires \u00e0 sa t\u00e2che.<\/li><li><strong>autorisations excessives<\/strong>: se connecte avec une identit\u00e9 qui peut \u00eatre plus que n\u00e9cessaire, g\u00e9n\u00e9ralement parce qu&#039;un compte de service existant a \u00e9t\u00e9 r\u00e9utilis\u00e9.<\/li><li><strong>Autonomie excessive<\/strong>: peut ex\u00e9cuter des actions \u00e0 fort impact sans validation humaine.<\/li><\/ul><p>Ces trois d\u00e9cisions rel\u00e8vent de choix de conception, et non de d\u00e9fauts de mod\u00e9lisation. Elles sont presque toujours prises lors de la phase d&#039;int\u00e9gration, pour des raisons techniques et \u00e0 l&#039;insu de tous les membres de l&#039;entreprise.<\/p><p>Le lien entre ces deux approches r\u00e9side dans l&#039;injection indirecte d&#039;instructions\u00a0: un contenu externe (un courriel, un PDF provenant d&#039;un fournisseur, une page web, un ticket client) contenant des instructions destin\u00e9es au mod\u00e8le. L&#039;agent interpr\u00e8te ce contenu comme faisant partie de son contexte et agit en cons\u00e9quence. Si ses autorisations sont \u00e9tendues, un texte r\u00e9dig\u00e9 par un tiers peut ainsi ex\u00e9cuter des actions au sein de vos syst\u00e8mes.<\/p><p>C\u2019est pourquoi la s\u00e9curit\u00e9 d\u2019un agent ne se r\u00e9sout pas en choisissant un meilleur mod\u00e8le, mais en limitant ses actions lorsqu\u2019une personne parvient \u00e0 l\u2019influencer.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-682fefc elementor-widget elementor-widget-heading\" data-id=\"682fefc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Les identit\u00e9s non humaines sont d\u00e9j\u00e0 plus nombreuses que les identit\u00e9s humaines.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d294403 elementor-widget elementor-widget-text-editor\" data-id=\"d294403\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Voici un changement structurel que de nombreuses organisations n&#039;ont pas encore int\u00e9gr\u00e9 \u00e0 leur gestion des acc\u00e8s. Pendant vingt ans, le contr\u00f4le des identit\u00e9s a \u00e9t\u00e9 con\u00e7u pour les personnes\u00a0: int\u00e9gration, d\u00e9part, r\u00f4les, \u00e9valuations p\u00e9riodiques. Or, les agents cr\u00e9ent des identit\u00e9s qui ne correspondent pas \u00e0 des personnes\u00a0; elles sont cr\u00e9\u00e9es en quelques minutes, n&#039;apparaissent pas dans l&#039;organigramme et sont rarement v\u00e9rifi\u00e9es.<\/p><p>Le rapport d&#039;IBM sur le co\u00fbt d&#039;une violation de donn\u00e9es en 2025 fournit les donn\u00e9es qui \u00e9tayent l&#039;argument\u00a0: <strong>Parmi les 971 organisations ayant subi un incident li\u00e9 \u00e0 l&#039;IA, 971 pr\u00e9sentaient des contr\u00f4les d&#039;acc\u00e8s inad\u00e9quats.<\/strong>. Ce n&#039;est pas un probl\u00e8me de sophistication de l&#039;attaquant, mais un probl\u00e8me de gestion des autorisations.<\/p><p>Nous l&#039;avons trait\u00e9 en d\u00e9tail dans <u><a href=\"https:\/\/thecloud.group\/fr\/identites-non-humaines-agents-dia-cybersecurite\/\">identit\u00e9s non humaines, agents d&#039;IA et cybers\u00e9curit\u00e9<\/a><\/u>, En r\u00e9sum\u00e9, voici ce qu&#039;il en est\u00a0: si votre processus de gestion des acc\u00e8s n&#039;inclut pas les identit\u00e9s non humaines, votre inventaire des acc\u00e8s est incomplet, et probablement l\u00e0 o\u00f9 il y a le plus d&#039;impact.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6089f4e elementor-widget elementor-widget-heading\" data-id=\"6089f4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Le cadre d\u00e9cisionnel : quatre niveaux de port\u00e9e<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29b879a elementor-widget elementor-widget-text-editor\" data-id=\"29b879a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Tous les permis ne pr\u00e9sentent pas le m\u00eame profil de risque. Cette classification permet de prendre une d\u00e9cision en trente minutes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ba56743 elementor-widget elementor-widget-text-editor\" data-id=\"ba56743\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table width=\"600\"><thead><tr><td width=\"200\"><p><strong>Niveau<\/strong><\/p><\/td><td width=\"200\"><p><strong>Que peut faire l&#039;agent ?<\/strong><\/p><\/td><td width=\"200\"><p><strong>Contr\u00f4le requis<\/strong><\/p><\/td><\/tr><\/thead><tbody><tr><td width=\"200\"><p><strong>1. Lecture limit\u00e9e<\/strong><\/p><\/td><td width=\"200\"><p>Interroger les donn\u00e9es d&#039;un domaine sp\u00e9cifique<\/p><\/td><td width=\"200\"><p>Journalisation des acc\u00e8s et limite de volume<\/p><\/td><\/tr><tr><td width=\"200\"><p><strong>2. Lecture approfondie<\/strong><\/p><\/td><td width=\"200\"><p>Consulter plusieurs syst\u00e8mes et des donn\u00e9es sensibles<\/p><\/td><td width=\"200\"><p>Autorisations bas\u00e9es sur les r\u00f4les, masquage des donn\u00e9es, audit<\/p><\/td><\/tr><tr><td width=\"200\"><p><strong>3. \u00c9criture r\u00e9versible<\/strong><\/p><\/td><td width=\"200\"><p>Cr\u00e9er des brouillons, des propositions, des dossiers en attente<\/p><\/td><td width=\"200\"><p>Validation humaine avant confirmation<\/p><\/td><\/tr><tr><td width=\"200\"><p><strong>4. \u00c9criture irr\u00e9versible<\/strong><\/p><\/td><td width=\"200\"><p>Paiements, communications avec les clients, changements de production<\/p><\/td><td width=\"200\"><p>Approbation explicite, double contr\u00f4le et plan de r\u00e9version<\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d683c52 elementor-widget elementor-widget-text-editor\" data-id=\"d683c52\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>En r\u00e8gle g\u00e9n\u00e9rale, <strong>L&#039;essentiel de la valeur commerciale se situe aux niveaux 1 et 3.<\/strong>, et la majeure partie du risque se situe \u00e0 l&#039;\u00e9tape 4. Un agent qui pr\u00e9pare le remboursement et le laisse en attente d&#039;approbation capte la quasi-totalit\u00e9 des gains de temps avec une fraction du risque de celui qui ex\u00e9cute le remboursement.<\/p><p>Quand quelqu&#039;un insiste sur le niveau 4, la question pertinente est\u00a0: quelle est la valeur ajout\u00e9e par rapport au niveau 3\u00a0? G\u00e9n\u00e9ralement, il s&#039;agit du temps n\u00e9cessaire pour appuyer sur un bouton. Et ce temps est rarement compens\u00e9.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-544ed85 elementor-widget elementor-widget-heading\" data-id=\"544ed85\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Sept points de contr\u00f4le non n\u00e9gociables<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-da91096 elementor-widget elementor-widget-text-editor\" data-id=\"da91096\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>L&#039;identit\u00e9 de soi par l&#039;agent.<\/strong> Nul besoin d&#039;utiliser un compte partag\u00e9 ni de r\u00e9utiliser un compte de service existant. Sans identit\u00e9 unique, il est impossible de d\u00e9terminer ce qui s&#039;est pass\u00e9.<\/p><p><strong>Indemnit\u00e9 minimale par t\u00e2che, et non par agent.<\/strong> Si l&#039;agent effectue trois t\u00e2ches diff\u00e9rentes, chacune doit avoir son propre p\u00e9rim\u00e8tre d&#039;application. Une autorisation accord\u00e9e pour une t\u00e2che est valable pour toutes les autres.<\/p><p><strong>Qualifications \u00e0 court terme.<\/strong> Des jetons qui expirent, et non des cl\u00e9s permanentes dans un fichier de configuration.<\/p><p><strong>Liste blanche des actions.<\/strong> Il convient de d\u00e9finir explicitement les op\u00e9rations autoris\u00e9es plut\u00f4t que celles qui ne le sont pas. Cette derni\u00e8re approche est toujours incompl\u00e8te.<\/p><p><strong>Limites de volume et de quantit\u00e9.<\/strong> Un agent habilit\u00e9 \u00e0 effectuer des remboursements doit se voir appliquer une limite par transaction et par jour. Ce principe s&#039;applique \u00e0 tout particulier disposant d&#039;un pouvoir d&#039;achat.<\/p><p><strong>Enregistrement complet et immuable.<\/strong> Qu&#039;est-ce qui a \u00e9t\u00e9 saisi, qu&#039;est-ce qui a \u00e9t\u00e9 d\u00e9cid\u00e9, qu&#039;est-ce qui a \u00e9t\u00e9 ex\u00e9cut\u00e9, avec quelle version du mod\u00e8le et qui l&#039;a valid\u00e9\u00a0? Sans ces informations, il n&#039;y a ni audit ni d\u00e9fense possible.<\/p><p><strong>Interrupteur d&#039;arr\u00eat.<\/strong> Un m\u00e9canisme permettant d&#039;arr\u00eater l&#039;agent sans d\u00e9ployer de code et sans d\u00e9pendre du fournisseur.<\/p><p>Aucune de ces sept pratiques n&#039;est inhabituelle. Ce sont toutes des mesures de s\u00e9curit\u00e9 standard appliqu\u00e9es \u00e0 un nouvel acteur. Ce qui est frappant, c&#039;est la fr\u00e9quence \u00e0 laquelle elles sont omises pr\u00e9cis\u00e9ment parce que l&#039;acteur est nouveau et ne correspond pas aux proc\u00e9dures existantes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-56af6f7 elementor-widget elementor-widget-heading\" data-id=\"56af6f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Comment aborder cette question sans bloquer le projet ?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fd66765 elementor-widget elementor-widget-text-editor\" data-id=\"fd66765\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Le risque de cet article est qu&#039;il soit per\u00e7u comme un plaidoyer pour l&#039;inaction. Ce n&#039;est pas le cas. L&#039;approche qui fonctionne est la mise \u00e0 l&#039;\u00e9chelle progressive.<\/p><ol><li><strong>Commencez au niveau 1 ou 3.<\/strong> Lecture limit\u00e9e ou \u00e9criture r\u00e9versible avec validation.<\/li><li><strong>Mesurer sur une p\u00e9riode d\u00e9finie.<\/strong> Combien de propositions de l&#039;agent sont approuv\u00e9es sans modification, combien sont corrig\u00e9es et combien sont rejet\u00e9es\u00a0? Ce taux repr\u00e9sente la v\u00e9ritable qualit\u00e9 de vos donn\u00e9es, et vous ne l&#039;obtenez qu&#039;une fois les transactions commenc\u00e9es.<\/li><li><strong>\u00c9largissez votre port\u00e9e gr\u00e2ce aux donn\u00e9es uniquement.<\/strong> Si le taux d&#039;approbation reste \u00e9lev\u00e9 et inchang\u00e9 pour un volume suffisant, il est judicieux de r\u00e9duire les obstacles \u00e0 la validation dans les cas \u00e0 faible impact.<\/li><li><strong>Ne jamais s&#039;agrandir sous la pression des d\u00e9lais.<\/strong> La cause la plus fr\u00e9quente d&#039;un incident est la suppression de la validation humaine pour respecter un d\u00e9lai.<\/li><\/ol><p>Il s\u2019agit du m\u00eame principe de supervision \u00e0 plusieurs niveaux que nous appliquons lors de l\u2019int\u00e9gration de composants d\u2019IA dans les syst\u00e8mes d\u2019entreprise, et c\u2019est pourquoi la gouvernance n\u2019est pas une phase finale du projet mais une propri\u00e9t\u00e9 de son architecture, comme nous l\u2019avons expliqu\u00e9 dans <u><a href=\"https:\/\/thecloud.group\/fr\/risques-hallucinations-et-gouvernance-de-lia\/\">Risques, hallucinations et gouvernance de l&#039;IA<\/a><\/u><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c79eaf3 elementor-widget elementor-widget-heading\" data-id=\"c79eaf3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">La question en une ligne<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-532d5f3 elementor-widget elementor-widget-text-editor\" data-id=\"532d5f3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Avant d&#039;approuver le d\u00e9ploiement d&#039;un agent, il est conseill\u00e9 de r\u00e9pondre \u00e0 la question suivante\u00a0: <strong>Si un inconnu pouvait \u00e9crire le texte que cet agent s&#039;appr\u00eate \u00e0 lire, quelle serait la pire chose qu&#039;il pourrait lui faire faire ?<\/strong><\/p><p>Si la r\u00e9ponse est \u00ab consulter les informations publiques \u00bb, le risque est acceptable. Si la r\u00e9ponse est \u00ab effectuer un paiement \u00bb ou \u00ab \u00e9crire \u00e0 tous nos clients \u00bb, la conception est incompl\u00e8te.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-acd5249 elementor-widget elementor-widget-heading\" data-id=\"acd5249\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Foire aux questions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0bafad2 e-flex e-con-boxed e-con e-parent\" data-id=\"0bafad2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-255e77a elementor-widget elementor-widget-n-accordion\" data-id=\"255e77a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accord\u00e9on. Ouvrez les liens avec Entr\u00e9e ou Espace, fermez-les avec \u00c9chap et naviguez avec les fl\u00e8ches directionnelles.\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3910\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-3910\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Pourquoi les autorisations repr\u00e9sentent-elles le plus grand risque pour un agent d&#039;IA\u00a0? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3910\" class=\"elementor-element elementor-element-5b9195b e-con-full e-flex e-con e-child\" data-id=\"5b9195b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-128178a elementor-widget elementor-widget-text-editor\" data-id=\"128178a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Car ils d\u00e9terminent la surface potentiellement endommag\u00e9e. Un agent ne peut causer de dommages l\u00e0 o\u00f9 il n&#039;est pas autoris\u00e9, quelle que soit la qualit\u00e9 du mod\u00e8le ou m\u00eame s&#039;il a \u00e9t\u00e9 manipul\u00e9. L&#039;OWASP consacre une cat\u00e9gorie distincte \u00e0 ce probl\u00e8me dans son classement des 10 principales applications de master en droit (LLM) pour 2025\u00a0: \u00ab\u00a0Excessive Agency\u00a0\u00bb.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3911\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3911\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Qu\u2019est-ce que \" l\u2019agentivit\u00e9 excessive \" chez les agents d\u2019IA ? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3911\" class=\"elementor-element elementor-element-0fc0d7e e-con-full e-flex e-con e-child\" data-id=\"0fc0d7e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fff5b06 elementor-widget elementor-widget-text-editor\" data-id=\"fff5b06\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Il s&#039;agit de l&#039;octroi de capacit\u00e9s excessives \u00e0 un agent, sous trois formes : fonctionnalit\u00e9s excessives (acc\u00e8s \u00e0 des outils que sa t\u00e2che ne requiert pas), permissions excessives (identit\u00e9 assortie de plus de privil\u00e8ges que n\u00e9cessaire) et autonomie excessive (ex\u00e9cution d&#039;actions \u00e0 fort impact sans validation humaine).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3912\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3912\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Qu\u2019est-ce que l\u2019injection indirecte de prompt et pourquoi est-ce important\u00a0? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3912\" class=\"elementor-element elementor-element-1872c91 e-con-full e-flex e-con e-child\" data-id=\"1872c91\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-64a1d1a elementor-widget elementor-widget-text-editor\" data-id=\"64a1d1a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Il s&#039;agit de l&#039;octroi de capacit\u00e9s excessives \u00e0 un agent, sous trois formes : fonctionnalit\u00e9s excessives (acc\u00e8s \u00e0 des outils que sa t\u00e2che ne requiert pas), permissions excessives (identit\u00e9 assortie de plus de privil\u00e8ges que n\u00e9cessaire) et autonomie excessive (ex\u00e9cution d&#039;actions \u00e0 fort impact sans validation humaine).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3913\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3913\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Quels contr\u00f4les minimaux un agent doit-il mettre en place en production\u00a0? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3913\" class=\"elementor-element elementor-element-69dc4e1 e-con-full e-flex e-con e-child\" data-id=\"69dc4e1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-770ee8f elementor-widget elementor-widget-text-editor\" data-id=\"770ee8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Sept : identit\u00e9 unique et non partag\u00e9e, autorisation minimale par t\u00e2che, identifiants \u00e0 courte dur\u00e9e de vie, liste blanche des actions autoris\u00e9es, limites de volume et de quantit\u00e9, journalisation compl\u00e8te et immuable de chaque ex\u00e9cution et un m\u00e9canisme d&#039;arr\u00eat qui ne n\u00e9cessite pas le d\u00e9ploiement de code.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3914\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3914\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Un agent peut-il \u00eatre d\u00e9ploy\u00e9 sans validation humaine\u00a0? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3914\" class=\"elementor-element elementor-element-394892d e-con-full e-flex e-con e-child\" data-id=\"394892d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6b896dc elementor-widget elementor-widget-text-editor\" data-id=\"6b896dc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Uniquement pour les actions r\u00e9versibles et \u00e0 faible impact, et seulement apr\u00e8s avoir mesur\u00e9 sur une p\u00e9riode suffisante le pourcentage de propositions approuv\u00e9es sans modification. La suppression de la validation humaine en raison de contraintes de temps est la cause la plus fr\u00e9quente d&#039;incidents dans les syst\u00e8mes multi-agents.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3915\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"6\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3915\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Comment g\u00e8re-t-on l&#039;identit\u00e9 non humaine des agents ? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3915\" class=\"elementor-element elementor-element-b0eb544 e-con-full e-flex e-con e-child\" data-id=\"b0eb544\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa43162 elementor-widget elementor-widget-text-editor\" data-id=\"aa43162\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Similaire aux contr\u00f4les d&#039;acc\u00e8s humains, mais plus rigoureux\u00a0: enregistrement document\u00e9, responsable d\u00e9sign\u00e9, permissions v\u00e9rifiables, expiration des identifiants et r\u00e9vision p\u00e9riodique. IBM a constat\u00e9 en 2025 que le protocole 97% destin\u00e9 aux organisations confront\u00e9es \u00e0 des incidents li\u00e9s \u00e0 l&#039;IA ne disposait pas de contr\u00f4les d&#039;acc\u00e8s ad\u00e9quats.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-62494f1 elementor-widget elementor-widget-text-editor\" data-id=\"62494f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table width=\"600\"><tbody><tr><td width=\"600\"><p><strong>Savez-vous pr\u00e9cis\u00e9ment ce que chaque agent que vous avez d\u00e9ploy\u00e9 peut faire ?<\/strong> Nous auditons le p\u00e9rim\u00e8tre, les identit\u00e9s, les autorisations et la tra\u00e7abilit\u00e9 de vos syst\u00e8mes d&#039;IA, et nous vous fournissons un diagnostic \u00e9crit. <u><a href=\"https:\/\/thecloud.group\/fr\/developpement-logiciel-et-programmation-professionnelle-2\/\">Demander l&#039;audit \u2192<\/a><\/u><\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2776e2f e-con-full e-flex e-con e-child\" data-id=\"2776e2f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-313fb2f elementor-widget elementor-widget-image\" data-id=\"313fb2f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-32155\" alt=\"Gestion des autorisations et des acc\u00e8s pour les agents d&#039;intelligence artificielle dans les syst\u00e8mes d&#039;entreprise\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5d096db elementor-widget elementor-widget-image\" data-id=\"5d096db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-32154\" alt=\"\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robotic_key_unlocking_vault_door_202608171511-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f22134d elementor-widget elementor-widget-image\" data-id=\"f22134d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-32046\" alt=\"\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Professional_monitoring_decentra\u2026_202608051310-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Dans le vaste paysage num\u00e9rique du XXIe si\u00e8cle, la s\u00e9curit\u00e9 est la pierre angulaire de toute entreprise. Les vuln\u00e9rabilit\u00e9s en mati\u00e8re de cybers\u00e9curit\u00e9 ne font aucune distinction entre les grandes entreprises et les jeunes pousses prometteuses.<\/p>","protected":false},"author":20,"featured_media":32155,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[859],"tags":[896,883],"class_list":["post-32148","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-ia","tag-producto-digital","tag-sistemas-empresariales"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n The Cloud Group<\/title>\n<meta name=\"description\" content=\"C\u00f3mo digitalizamos el archivo del Parlamentode Guinea Ecuatorial: alcance, retost\u00e9cnicos, soluci\u00f3n y resultado. Caso real publicado.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thecloud.group\/fr\/permis-agents-a-risque\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n\" \/>\n<meta property=\"og:description\" content=\"Descubre art\u00edculos sobre desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y transformaci\u00f3n digital para empresas.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thecloud.group\/fr\/permis-agents-a-risque\/\" \/>\n<meta property=\"og:site_name\" content=\"The Cloud Group\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/thecloudgroupglobal\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-24T20:12:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Paula Franco\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@thecloudgroup\" \/>\n<meta name=\"twitter:site\" content=\"@thecloudgroup\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Paula Franco\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\"},\"author\":{\"name\":\"Paula Franco\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/person\\\/9292d905a1c98ea7345e5e71a5fe341f\"},\"headline\":\"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n\",\"datePublished\":\"2026-08-24T20:12:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\"},\"wordCount\":1956,\"publisher\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Robot_hand_hovering_button_202608171511.jpeg\",\"keywords\":[\"producto digital\",\"sistemas empresariales\"],\"articleSection\":[\"Data &amp; IA\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\",\"url\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\",\"name\":\"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n The Cloud Group\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Robot_hand_hovering_button_202608171511.jpeg\",\"datePublished\":\"2026-08-24T20:12:00+00:00\",\"description\":\"C\u00f3mo digitalizamos el archivo del Parlamentode Guinea Ecuatorial: alcance, retost\u00e9cnicos, soluci\u00f3n y resultado. Caso real publicado.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#primaryimage\",\"url\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Robot_hand_hovering_button_202608171511.jpeg\",\"contentUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/Robot_hand_hovering_button_202608171511.jpeg\",\"width\":1024,\"height\":1024,\"caption\":\"Dar permisos a un agente de IA implica evaluar riesgos, accesos y capacidad de actuaci\u00f3n dentro de la empresa.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/permisos-agentes-ia-riesgo\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/thecloud.group\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#website\",\"url\":\"https:\\\/\\\/thecloud.group\\\/\",\"name\":\"The Cloud Group\",\"description\":\"Empresa especializada en desarrollo de software a medida, automatizaci\u00f3n empresarial e inteligencia artificial para empresas.\",\"publisher\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\"},\"alternateName\":\"TCG Software\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/thecloud.group\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\",\"name\":\"The Cloud Group\",\"alternateName\":\"TCG\",\"url\":\"https:\\\/\\\/thecloud.group\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/logoSmallFirmaCorreo.png\",\"contentUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/logoSmallFirmaCorreo.png\",\"width\":300,\"height\":190,\"caption\":\"The Cloud Group\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/thecloudgroupglobal\",\"https:\\\/\\\/x.com\\\/thecloudgroup\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/the-cloud-group\",\"https:\\\/\\\/www.instagram.com\\\/thecloudgroupglobal\",\"https:\\\/\\\/www.youtube.com\\\/@TheCloudGroup\"],\"description\":\"The Cloud Group es una empresa internacional especializada en desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y m\u00f3viles y transformaci\u00f3n digital. Ayudamos a empresas a optimizar procesos, reducir costos y acelerar su crecimiento mediante soluciones tecnol\u00f3gicas personalizadas.\",\"email\":\"paula.franco@thecloud.group\",\"telephone\":\"3042544988\",\"legalName\":\"THE CLOUD COLOMBIA SAS\",\"vatID\":\"902084280\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/person\\\/9292d905a1c98ea7345e5e71a5fe341f\",\"name\":\"Paula Franco\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"caption\":\"Paula Franco\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Accorder des autorisations \u00e0 un agent rel\u00e8ve d&#039;une d\u00e9cision d&#039;\u00e9valuation des risques, et non d&#039;un choix de configuration. - The Cloud Group","description":"Num\u00e9risation des archives du Parlement de Guin\u00e9e \u00e9quatoriale\u00a0: p\u00e9rim\u00e8tre, d\u00e9fis techniques, solution et r\u00e9sultats. \u00c9tude de cas publi\u00e9e.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thecloud.group\/fr\/permis-agents-a-risque\/","og_locale":"fr_FR","og_type":"article","og_title":"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n","og_description":"Descubre art\u00edculos sobre desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y transformaci\u00f3n digital para empresas.","og_url":"https:\/\/thecloud.group\/fr\/permis-agents-a-risque\/","og_site_name":"The Cloud Group","article_publisher":"https:\/\/www.facebook.com\/thecloudgroupglobal","article_published_time":"2026-08-24T20:12:00+00:00","og_image":[{"width":1024,"height":1024,"url":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","type":"image\/jpeg"}],"author":"Paula Franco","twitter_card":"summary_large_image","twitter_creator":"@thecloudgroup","twitter_site":"@thecloudgroup","twitter_misc":{"\u00c9crit par":"Paula Franco","Dur\u00e9e de lecture estim\u00e9e":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#article","isPartOf":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/"},"author":{"name":"Paula Franco","@id":"https:\/\/thecloud.group\/#\/schema\/person\/9292d905a1c98ea7345e5e71a5fe341f"},"headline":"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n","datePublished":"2026-08-24T20:12:00+00:00","mainEntityOfPage":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/"},"wordCount":1956,"publisher":{"@id":"https:\/\/thecloud.group\/#organization"},"image":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#primaryimage"},"thumbnailUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","keywords":["producto digital","sistemas empresariales"],"articleSection":["Data &amp; IA"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/","url":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/","name":"Accorder des autorisations \u00e0 un agent rel\u00e8ve d&#039;une d\u00e9cision d&#039;\u00e9valuation des risques, et non d&#039;un choix de configuration. - The Cloud Group","isPartOf":{"@id":"https:\/\/thecloud.group\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#primaryimage"},"image":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#primaryimage"},"thumbnailUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","datePublished":"2026-08-24T20:12:00+00:00","description":"Num\u00e9risation des archives du Parlement de Guin\u00e9e \u00e9quatoriale\u00a0: p\u00e9rim\u00e8tre, d\u00e9fis techniques, solution et r\u00e9sultats. \u00c9tude de cas publi\u00e9e.","breadcrumb":{"@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#primaryimage","url":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","contentUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Robot_hand_hovering_button_202608171511.jpeg","width":1024,"height":1024,"caption":"Dar permisos a un agente de IA implica evaluar riesgos, accesos y capacidad de actuaci\u00f3n dentro de la empresa."},{"@type":"BreadcrumbList","@id":"https:\/\/thecloud.group\/permisos-agentes-ia-riesgo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/thecloud.group\/"},{"@type":"ListItem","position":2,"name":"Dar permisos a un agente es una decisi\u00f3n de riesgo, no de configuraci\u00f3n"}]},{"@type":"WebSite","@id":"https:\/\/thecloud.group\/#website","url":"https:\/\/thecloud.group\/","name":"Le groupe Cloud","description":"Entreprise sp\u00e9cialis\u00e9e dans le d\u00e9veloppement de logiciels sur mesure, l&#039;automatisation des processus m\u00e9tier et l&#039;intelligence artificielle pour les entreprises.","publisher":{"@id":"https:\/\/thecloud.group\/#organization"},"alternateName":"TCG Software","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thecloud.group\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/thecloud.group\/#organization","name":"Le groupe Cloud","alternateName":"TCG","url":"https:\/\/thecloud.group\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/thecloud.group\/#\/schema\/logo\/image\/","url":"https:\/\/thecloud.group\/wp-content\/uploads\/2020\/05\/logoSmallFirmaCorreo.png","contentUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2020\/05\/logoSmallFirmaCorreo.png","width":300,"height":190,"caption":"The Cloud Group"},"image":{"@id":"https:\/\/thecloud.group\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/thecloudgroupglobal","https:\/\/x.com\/thecloudgroup","https:\/\/www.linkedin.com\/company\/the-cloud-group","https:\/\/www.instagram.com\/thecloudgroupglobal","https:\/\/www.youtube.com\/@TheCloudGroup"],"description":"The Cloud Group est une entreprise internationale sp\u00e9cialis\u00e9e dans le d\u00e9veloppement de logiciels sur mesure, l&#039;automatisation des processus m\u00e9tier, l&#039;intelligence artificielle, les ERP, les CRM, les applications web et mobiles, et la transformation num\u00e9rique. Nous aidons les entreprises \u00e0 optimiser leurs processus, \u00e0 r\u00e9duire leurs co\u00fbts et \u00e0 acc\u00e9l\u00e9rer leur croissance gr\u00e2ce \u00e0 des solutions technologiques personnalis\u00e9es.","email":"paula.franco@thecloud.group","telephone":"3042544988","legalName":"THE CLOUD COLOMBIA SAS","vatID":"902084280"},{"@type":"Person","@id":"https:\/\/thecloud.group\/#\/schema\/person\/9292d905a1c98ea7345e5e71a5fe341f","name":"Paula Franco","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","caption":"Paula Franco"}}]}},"_links":{"self":[{"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/posts\/32148","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/comments?post=32148"}],"version-history":[{"count":9,"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/posts\/32148\/revisions"}],"predecessor-version":[{"id":32159,"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/posts\/32148\/revisions\/32159"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/media\/32155"}],"wp:attachment":[{"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/media?parent=32148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/categories?post=32148"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thecloud.group\/fr\/wp-json\/wp\/v2\/tags?post=32148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}