Can AI be your most productive employee... and your newest insider…

No exploit. No stolen credentials. No unpatched vulnerability. You've spent years protecting your crown-jewel systems with RBAC (Role Based Access Controls), MFA (Multi Factor Authentication), identity governance, and careful provisioning. A user can't access Salesforce, so they can't see Salesforce data...or can they?

In a recent investigation, we found a user who could not access Salesforce directly but was still able to retrieve Salesforce data through an AI agent with broader permissions than the user behind the keyboard. The access controls worked exactly as intended. The problem was that the AI assistant was operating with access the user didn't have.

As organizations connect AI agents to email, SharePoint, cloud storage, code repositories, and other business systems, long-held assumptions about access control are getting tested in ways many security teams haven't had to think about before.

We're the investigators behind this research. Ask us about AI agent permissions, identity boundaries, access control failures, insider risk, detection challenges, or anything else that's keeping you up at night as AI becomes another actor inside the enterprise.

Learn more about this investigation: https://www.dtex.ai/resources/i3-threat-advisory-ai-agent-access-control/?utm_medium=organic-social&utm_source=reddit&utm_campaign=AI&utm_content=threat-advisory&utm_keyword=

Join our upcoming workshop on Tuesday, Sept. 22 to walk through this live: https://www.dtex.ai/events/ita-workshop-how-shared-ai-agents-break-policy-controls/?utm_medium=organic-social&utm_source=reddit&utm_campaign=AI&utm_content=threat-advisory&utm_keyword=

Impact

Unauthorized disclosure of sensitive enterprise data can occur when AI agents have permissions exceeding those of the querying user. This can lead to exposure of intellectual property, confidential financial information, and insider trading risks. Because no direct user access or file transfer is required, traditional access controls and policy triggers may not detect this activity, increasing the risk of undetected insider threats and data leakage.

Defensive guidance

Organizations should conduct entitlement-parity reviews to ensure AI agents do not have broader permissions than the users invoking them. Integrate identity provider data, HR systems, and cloud audit logs with endpoint telemetry to correlate user entitlements and AI agent activity for improved detection. Restrict AI agent deployment and sharing to authorized personnel and approved platforms. Monitor and audit AI agent permissions regularly to prevent privilege escalation.

Summary

The investigation reveals that AI agents deployed within enterprises may operate with permissions exceeding those of the users who invoke them. In one documented case, a user without direct Salesforce access retrieved Salesforce data through a misconfigured Microsoft Copilot agent. Normally, access controls enforce user entitlements at the system of record, but misconfigured AI agents bypass these controls by using elevated privileges. This results in unauthorized data disclosure without file transfers or policy triggers. The advisory recommends integrating endpoint telemetry with identity, HR, and cloud audit logs to correlate user entitlements with AI agent activity, enabling detection of access without entitlement. The risk is particularly acute where employees build and share AI agents broadly, and where AI agents connect to multiple enterprise systems such as email, SharePoint, cloud storage, and code repositories.

Can AI be your most productive employee... and your newest insider risk? AMA

Discussion

Links cited in the discussion

Impact

Defensive guidance

Summary

References

Community reviews

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 17 Sep 2026, 15:16 UTC

Technical details

References

Community reviews