Can administer users, roles or credentials

The agent can create or disable users, reset passwords or MFA, or change roles. Anyone who can steer the agent can take over accounts or grant themselves access. Critical when the agent is customer-facing or L1 support, or the manifest marks identity-admin out of scope.

high base severity
4 test fixtures

high identity-admin-action

Flagged

// tools.json
  1   [
  2     {
  3 >     "name": "reset_user_mfa",
  4       "input_schema": {
  5         "type": "object",

Fix

Move identity changes to a separate, privileged workflow with its own approval, or remove the action. If it must stay, verify the requester's identity out of band before acting.

Fine

[
  {
    "name": "list_password_rules",
    "input_schema": {
      "type": "object",
      "properties": {}
    }
  }
]

References

← All rules

Running agents in production?Qlucent assesses agent permissions and data boundaries. →