Your identity, your permissions
AI agents act through the Factor CLI, signed in as you, so they can see and do only what you can in Kpow.
- Single sign-on through OpenID Connect, with tokens refreshed automatically
- RBAC and multi-tenancy scope what an agent can read and change
- Data masking applies to everything an agent reads
- Changes wait in staged approval and land in the Kpow audit log