Delinea report: AI agents retain access to enterprise data after task completion

Delinea's "2026 Identity Security Report" points out that AI agents and tools retain permissions after tasks are completed, maintaining access to customer records, employee information, financial data, security logs, and source code until expiration or revocation. 42% of IT and security leaders say their organizations cannot automatically remove AI access at the end of a session, only 36% can always trace AI access to sensitive data back to an authorized person, and fewer than one in five can detect out-of-bounds access in real time.