Our agent runs scheduled tasks overnight after the user logs off. Whose credentials should it use?

Borrowing the creator's full access is the default that causes incidents. Give unattended agents their own identity with narrow scopes, an owner and an expiry, and keep delegation for interactive work.

Updated Nov 2026 · Original practice questions with worked answers and teaching rubrics. Our editorial policy explains the sources, review process and limits.