On-behalf-of
In short: On-behalf-of describes an agent acting with a specific person's authority rather than its own. The agent's actions should be checked against that person's permissions and logged under their name. Microsoft extends Entra Identity Governance to agents that act on behalf of users in this way.
Which controls use this term?
- GOV-18Delegation bounded by the person's permissions. Ensure an agent acting for a person can never do more than that person is allowed to do.
- GOV-13Per-action audit log tied to a person. Log every agent action with the agent, the person it acted for, the tool, the decision and the time.
Which terms are related?
Least privilege, Audit trail, Chain of custody, Delegation, MCP gateway.
Reviewed by The Register desk