# IAM-01 Dedicated non-human identity

Domain: IAM Identity, Access & Authorization · HI-AAF v1.3 · Public review · https://humanintel.net/standard/iam/iam-01

Each agent operates under a dedicated non-human identity. Reuse of human user accounts by agents is prohibited.

Every agent in production operates under its own dedicated, machine-verifiable identity, distinct from any human user account. Reuse of human credentials by agents is prohibited because it destroys attribution, makes access-control scoping impossible, and creates audit-trail gaps that are unrecoverable after the fact.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for IAM-01: All production agents operate under dedicated non-human identities; no shared or human-user credentials are in use; identity issuance follows a documented process with approval records.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- All production agents operate under dedicated non-human identities.
- No shared or human-user credentials are in use.
- Identity issuance follows a documented process with approval records.

## Framework mappings

- NIST AI RMF: MAP 4.1
- ISO/IEC 42001: A.7.4
- SOC 2 (TSC): CC6.1, CC6.2
- EU AI Act: Art. 15(2)
- Singapore: AI Verify Security

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cited by MAS-02 Agent-to-agent authentication: https://humanintel.net/standard/mas/mas-02

## Cite this control

Human Intelligence. HI-AAF v1.3, IAM-01 Dedicated non-human identity. Public review edition, July 2026. https://humanintel.net/standard/iam/iam-01