The audit log says my name: what an agent inherits when you hand it your credentials
The New Stack 1 week ago 19
An investigation measured what an AI coding agent inherits when it authenticates to Azure SQL using a human’s cached Azure CLI credentials, and found the database logs reflect the human’s identity and machine details rather than any agent-specific intent. It observed a token with scope user_impersonation, 37 group claims, and an 84-minute access token lifetime, and the agent reached 107 permissions on one production analytics store while the other store held only two. The study concludes that auditing and downstream controls can’t reliably distinguish agent actions from human actions, so permissioning and logging must be changed to separate actor and subject (and to turn on non-production auditing), rather than relying on borrowed credentials.