with Scott Hesford, Senior Director of Solutions Engineering
APJ | Least Privilege and AI – Can they co-exist?
Get Instant Access to this Content
Learn more about how to secure your business from threats in places you didn't even know existed.
Agentic AI is a new privileged identity.
Link copied
It can perceive, decide, and act: triggering workflows, calling APIs, and interacting with critical systems at machine speed. But in many organisations, AI agents are being deployed faster than cybersecurity teams can keep up.
Why this matters now
Least privilege has long been one of the most effective ways to reduce an organisation’s attack surface. It limits what an attacker can do after they get in. But today, the identity landscape is shifting: human identities are still targeted, while machine identities continue to grow, and AI agents are emerging as a new, fast-expanding surface.
Unlike traditional users, agentic AI can operate continuously and accumulate access through integrations. In practice, agents often inherit privileges from their creators and gain additional permissions through nested roles, indirect relationships, and misconfigurations. That’s exactly what attackers are looking for: the chain of permissions that create the hidden paths to privilege that surface-level tools can’t map end-to-end.
What you’ll learn
How agentic AI changes the meaning of “identity” (and why that matters for security).
Where AI privilege sprawl starts: inheritance, nested roles, and shadow access paths.
How to uncover and prioritise paths to privilege across hybrid and multi-cloud environments.
Practical ways to enforce least privilege for both human and non-human identities.
A practical approach: visibility → intelligence → protection
To apply least privilege in an era of agentic AI, you need more than a list of accounts. You need to understand what every identity can actually
do across environments. In this webinar, we’ll walk through a pragmatic, privilege-centric approach built on three fundamentals: visibility, Intelligence and Protection.
Reserve your spot
Innovation shouldn’t outpace governance. If AI agents can act across your environment, they need the same discipline you apply to any privileged identity: clear boundaries, continuous visibility, and verifiable control.
Control the privilege. Control the risk.
Your Speaker
Link copied
Scott Hesford
Senior Director of Solutions Engineering
Scott Hesford
Senior Director of Solutions Engineering
Scott Hesford has over a decade of experience in IT security. Before joining BeyondTrust in 2019, he worked as Principal Consultant across APJ for CA Technologies where he specialised on technologies within Identity Governance and Administration, Advanced Authentication, Privileged Access Management, Web Access Management and API management. A trusted cyber security advisor to enterprise and mid-market customers alike, his experience spans across several industries including finance, utilities and manufacturing in addition to state and federal governments.