How are teams handling auth/IAM for production agents?

Reddit r/AI_Agents News

Summary

A discussion on how teams handle authentication and identity management for AI agents in production, covering service accounts, credential storage, approval workflows, and auditing.

For people running agents in production: how are you handling auth/IAM? I’m trying to understand what teams are actually doing once agents move beyond demos. Specifically: \- does the agent run as a service account, the user, or its own identity? \- how do you scope tool/API access per task or session? where do credentials live? \- do you require approval for sensitive actions? \- how do you audit what the agent did later? Most examples I see either use broad API keys or skip this entirely. Curious what people are doing in real systems.
Original Article

Similar Articles