The Agent Identity and Authority Manager owns the identity, credentials, permissions and runtime trust of AI agents and other non-human identities. Role 3.2 sets the security baseline and runs security operations. Role 13.1 defines the scope of authority in the architecture. Role 1.1 authorises and Role 1.3 validates OPR06 runtime authority; Role 1.3 owns OPR06 (ROLES12, t261u; was Role 4.1). This role makes sure every agent has a verifiable identity, authenticates before it acts, holds only the permissions its task needs, is checked against current authority before high-risk actions, and can be trusted — or stopped — when it works with other agents.

Standing duties

• Assign unique, verifiable identities to agents (and to instances or executions where needed), protect their credentials and run the identity lifecycle: provisioning, rotation, suspension and revocation (ACAAI IA-1.1 to IA-1.4).
• Grant agents contextual least privilege and run continuous authorisation validation before high-risk actions, checking current policy, delegated authority, consent status, the originating request and the delegation chain (ACAAI IA-2.1, IA-2.3).
• Establish multi-agent trust: verify collaborating agents, secure inter-agent communications and detect unauthorised coordination (ACAAI RS-5.1 to RS-5.3).
• Raise ACT02 when a new privileged identity, delegation path or agent integration changes who the system can act as; raise ACT03 on credential compromise or unauthorised coordination.
• Do not grant OPR06 business authorisation: validate the authorisations Role 4.1 grants and enforce them technically. [SUPERSEDED (ROLES11 / ROLES12, t261u): OPR06 owner is Role 1.3; Role 1.1 authorises, Role 1.3 validates.]

Accountable to: CISO / Head of Identity and Access Management (or GM: Security)

Primary domain: Establish (agent identity and authority scheme, inside the EST13 security scope and the EST03 identity scheme) and Operate (identity lifecycle, authorisation validation and multi-agent trust at runtime). Does not Direct, accept residual risk or grant OPR06 (OPR06: owner Role 1.3; Role 1.1 authorises and Role 1.3 validates runtime authority (ROLES12, t261u)).

Linked EN 18286 clauses: 10.1.1, 10.1.1.2

Format: 3 hours of training, EUR 200.