Read The Day

AITechnical add-onStory 04

Agents can carry the user’s permissions

What changedAWS connects Microsoft Entra ID, Bedrock AgentCore Gateway and ServiceNow using an on-behalf-of token exchange, so an agent does not need to operate through a shared master account.

By Read The Day editorial desk

Architecture illustration for connecting ServiceNow to an AI agent while retaining the user’s identity.

The useful part

Why it matters

Authentication should follow the human through the tool chain; the agent must never silently inherit broader access.

Evidence

Primary source

AWS

Read the complete 4 November 2026 edition