Task-scoped authorization grants an identity permission to perform a specific task, rather than giving it broad, persistent access. The permission is limited to the resources and actions needed for that task and may expire when the task or authorization window ends.
In cyber security, this approach supports least privilege and limits the damage caused by mistakes, compromised credentials, or misuse. For AI agents, access can be granted for a particular workflow and revoked or narrowed as circumstances change. Effective controls enforce permissions when the agent accesses a resource or invokes a tool, and record what was allowed, when it changed, and why.