A method for finding out what your agents can do in your systems, compared with what they need, before redesigning their access.
What the baseline diagnostic covers
The asset walks a diagnostic lead through the agent and account inventory, permission analysis, shared and privileged accounts, credentials, revocation, attribution, failures, claim grading, and sign-off. It ends with a diagnostic questionnaire and an evidence inventory.
- Inventorying agents and their service accounts
- Analyzing granted against used permissions
- Finding shared, unowned, and privileged accounts
- Testing credential handling