JumpCloud study: AI agents are getting system access faster than identity controls can follow
A JumpCloud survey of 250 IT leaders in the US and UK found that more than half of organizations use AI agents that can change systems, permissions or files, yet only 41% of those have fully brought agents under the same identity and access policies as human users. 72% report a considerable gap between what AI may access and what they can prove it accessed, and 92% had at least one AI-related incident or exposure in the past year.
JumpCloud's report "Enterprise AI Access Is Outpacing Control", released October 7, surveyed 250 IT leaders in the US and UK. It finds that organizations are handing AI agents access to systems faster than they can secure them: more than half now use agents that can change systems, permissions or files.
Governance trails that access. Among organizations using AI agents, only 41% have fully integrated them into the same IAM policies applied to human users. 72% report a considerable gap between what AI is allowed to access and what they can prove it actually accessed. 92% experienced at least one AI-related incident or exposure in the past 12 months, and 36% investigated an AI-related concern but could not determine what the AI had accessed.
The study also found differences between workplace platforms: 11% of organizations that run primarily on Google Workspace fell into the lowest AI-auditability tier, compared with 21% of those primarily on Microsoft 365. JumpCloud, which sells identity and device management, proposes an "Agentic IAM Lifecycle" for discovering, registering and governing agents alongside employees, with an owner, scoped permissions and tracked actions for every agent.