BR /Future of Work · AI Security
IBM puts agent identity and short-lived access at the center of enterprise AI
At TechXchange, IBM announced agent identity, credential controls and evaluation tools, while broader discovery and containment remain in preview.
What happened
IBM announced new enterprise agent controls on October 27. Agent Identity records ownership and authority, while HashiCorp Vault supplies narrowly scoped credentials that can expire or be revoked. IBM lists Agent Identity and Vault 2.2 as generally available.
The company also describes evaluation and cost tracking in watsonx Orchestrate. Its cross-platform agent discovery and isolated execution capabilities are in technology preview, making availability an important distinction when assessing the announcement.
BELL RIVER perspective · Editorial analysis
What it means for business
For security and platform teams, the practical task is to connect each automated action to an accountable owner and a clearly limited permission.
- Keep an inventory of agents, owners and permitted actions.
- Test credential revocation before giving agents production access.
- Separate generally available controls from preview features in rollout plans.
Vendor controls still require correct configuration and operational testing; their announcement does not prove that an agent deployment is secure.
Sources & editorial note
This brief summarises a third-party announcement. The business perspective is BELL RIVER’s interpretation, not a vendor claim or a report of a BELL RIVER client project.