u/Lancegoodheart

Identities and Shared Access - Permanent Blackhole?

Dealing with domain admin accounts, service accounts, application accounts, MCPs, etc., for administrative purposes is a growing hassle for us.

They're shared with users, vendors and internal engineers end up granting admin access to AI agents as well to automate their tasks. Our IT team is beginning to lose track of these accounts. We need visibility not only over these accounts, but their usage and the extent of access they grant.

Googlefu doesn't help either - There's a million tools with a solution segment of their own. My assumption is that Identity Governance & Administration (IGA) should now cover all non-human identities as well but I don't see leading products move toward this yet.

What is the common agreement on the way forward? Are there ways to have a single place to manage all identities, agents, and access - probably going to end up vibe coding a tool to do this for me.

reddit.com
u/Lancegoodheart — 8 hours ago