Glossary
Agent identity
The separate, non-human principal every agent acts as, with scoped short-lived tokens and least privilege.
Every One3 agent has its own agent identity: a distinct principal type that is never a human account and never shares a human's credentials. It is bound to the Digital Employee record and its template version, granted scoped permissions, and issued short-lived tokens per run — no long-lived secrets.
Permissions are the intersection of the role template, tenant grants, the owner's own permissions and data classification, so an agent can never access what its owner can't. Every Action carries the agent principal, the run id and on-behalf-of identity, and is signed into a hash-chained audit log. Identities are reviewed periodically, suspended on incidents and revoked at retirement.
See how One3 would run your business
Tell us about your team and the outcomes you want. We will walk you through the apps, the Digital Employees and the plan for your industry.