# Cisco’s Privileged Infrastructure Access ties admin and AI agent privileges to the task > Source: > Published: 2026-10-26 20:00:13+00:00 ### Cisco’s Privileged Infrastructure Access ties admin and AI agent privileges to the task Cisco Systems Inc. today introduced Privileged Infrastructure Access to let administrators and artificial intelligence agents work on network infrastructure with privileges that last only as long as the task at hand. The release goes after the excess access network engineers often carry on routers and switches, which Matt Caulfield, vice president of identity products at Cisco, described in a [blog post](https://blogs.cisco.com/security/cisco-rethinks-privileged-infrastructure-access) announcing it. In his example, a configuration update pushed to hundreds of switches during a maintenance window fails on some of them, and an administrator has to fix the problem before the window closes. The privilege needed for that kind of job is, as he put it, “often broader and more persistent than the task demands.” When a network engineer logs into a router or switch, Caulfield wrote, the single sign-on and multifactor authentication guarding a company’s applications often stay behind. Teams that find the approved access route too slow for urgent work carve out exceptions that he said end up as the norm, with usable credentials still sitting in place after the job. If the secure path is not also the fastest, operators “will find another way in.” Back in that maintenance window, the administrator would request access for the specific fix through Privileged Infrastructure Access. The session that opens runs under a cryptographic identity, with privilege cut to what the repair requires. No privilege exists at all, Caulfield wrote, “if there is no work being done.” For security teams, each session leaves behind “a clear record of who accessed what,” in Caulfield’s words, along with the policy that applied and any changes made. He wrote that AI agents and automation scripts work under the same task-scoped rules as people, so an agent does not “inherit broad, unmanaged access simply because” it is in a hurry. Caulfield set the launch against a threat picture that he said AI has reshaped. Sophisticated attack capabilities that were once the preserve of well-funded nation-state groups are now available to many more adversaries, according to the post. His example was the Hugging Face Inc. incident [in July](https://siliconangle.com/2026/07/21/openai-says-ai-models-broke-testing-hacked-hugging-face/). In that case, OpenAI Group PBC disclosed that two of its models had escaped a test environment and used credentials they should not have had to reach production systems at Hugging Face. Today’s launch builds on a partnership Cisco struck [in August](https://blogs.cisco.com/security/identity-everywhere-bringing-infrastructure-identity-to-agentic-it) with infrastructure identity company Teleport. Alongside technology integration and licensing, the deal included an undisclosed stake that made Cisco the startup’s largest strategic investor. Peter Bailey, who heads Cisco’s security business, and Teleport co-founder and Chief Executive Ev Kontsevoy wrote at the time that privileged access for network and infrastructure administrators would be the first use case. As they said, Teleport “brokers and records the session, then ends the privilege with the access window.” ##### Photo: [Wikimedia Commons](https://commons.wikimedia.org/wiki/File:Ciscosign.jpg) # A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. **Join theCUBE’s Alumni Trust Network**, where technology leaders connect, share intelligence and create opportunities. - **15M+ viewers of theCUBE videos** , powering conversations across AI, cloud, cybersecurity and more - **11.4k+ theCUBE alumni** — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network ### Are you an AWS customer?  Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: [https://siliconangle.com/aws-marketplace/](https://siliconangle.com/aws-marketplace/) ##### **About SiliconANGLE Media** [SiliconANGLE](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552), [theCUBE Network](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da), [theCUBE Research](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f), [CUBE365](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6), [theCUBE AI](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683)and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.