MITRE ATLASmitigation
AML.M0026 Privileged AI Agent Permissions Configuration
- Created
- 2025-10-29
Description
AI agents may be granted elevated privileges above that of a normal user to enable desired workflows. When deploying a privileged AI agent, or an agent that interacts with multiple users, it is important to implement robust policies and controls on permissions of the privileged agent. These controls include Role-Based Access Controls (RBAC), Attribute-Based Access Controls (ABAC), and the principle of least privilege so that the agent is only granted the necessary permissions to access tools and resources required to accomplish its designated task(s).
Related
Mitigates · MITRE ATLAS (7)
- AML.T0101 Data Destruction via AI Agent Tool Invocation technique
- AML.T0082 RAG Credential Harvesting technique
- AML.T0085 Data from AI Services technique
- AML.T0085.000 RAG Databases sub-technique
- AML.T0085.001 AI Agent Tools sub-technique
- AML.T0086 Exfiltration via AI Agent Tool Invocation technique
- AML.T0053 AI Agent Tool Invocation technique