Oswell Ops

Agent Identity & Access

Review agent identities, token leases, delegated access, and least-privilege recommendations.

Managed Identities
128
12 new
Least Privilege
91%
3 pp vs last week
Elevated Agents
7
3 under review
Stale Scopes
11
5 removable
Token TTL Median
18m
Healthy
Approval Leases
24
All active

Least Privilege Coverage

Permission Risk

Permission Diff

Compare current scopes against observed usage and recommended least-privilege access.

Removable Scopes11
Approval-Gated5

Token Lease Posture

Ephemeral Tokens91%
Long TTL Tokens3
Vault Brokered100%

Permission Recommendations

Reduce Finance DB vendor read from the invoice agent profile. Require human approval context before refund.execute is available. Move ticket update permission behind an escalation-only role. Keep research retrieval pinned to approved corpora only.

I
Invoice Validation Agent
Least-privilege identity for invoice read and validation workflows.
agent-invoice-prodOAuth 2.0Restricted3 Resources15 minFinance ServiceProductionLow2 mins agoActive
C
Customer Support Agent
Delegated support identity with ticket, CRM, and memory access.
agent-support-prodOIDCStandard7 Resources30 minSupport PlatformProductionMedium5 mins agoActive
F
Finance Approval Agent
Elevated approval identity under least-privilege review.
agent-finance-approveOAuth 2.0Elevated11 Resources4 hoursFinance PlatformProductionHigh1 min agoReview Required
R
Research Agent
Read-only identity for approved retrieval and summarization.
agent-research-prodOIDCRestricted5 Resources20 minKnowledge GatewayProductionLow9 mins agoActive
I
Invoice Validation Agent
Least-privilege identity for invoice read and validation workflows.
agent-invoice-prodOAuth 2.0Restricted3 Resources15 minFinance ServiceProductionLow2 mins agoActive
C
Customer Support Agent
Delegated support identity with ticket, CRM, and memory access.
agent-support-prodOIDCStandard7 Resources30 minSupport PlatformProductionMedium5 mins agoActive
F
Finance Approval Agent
Elevated approval identity under least-privilege review.
agent-finance-approveOAuth 2.0Elevated11 Resources4 hoursFinance PlatformProductionHigh1 min agoReview Required
R
Research Agent
Read-only identity for approved retrieval and summarization.
agent-research-prodOIDCRestricted5 Resources20 minKnowledge GatewayProductionLow9 mins agoActive
I
Invoice Validation Agent
Least-privilege identity for invoice read and validation workflows.
agent-invoice-prodOAuth 2.0Restricted3 Resources15 minFinance ServiceProductionLow2 mins agoActive
C
Customer Support Agent
Delegated support identity with ticket, CRM, and memory access.
agent-support-prodOIDCStandard7 Resources30 minSupport PlatformProductionMedium5 mins agoActive
Showing 1 to 10 of 36 records