Agent access should follow a named work lifecycle, with permissions removed when a role or task ends
Source: Workday
Workday has signed a definitive agreement to acquire C1.ai, with a close expected in the fourth quarter of its fiscal 2027, subject to customary conditions. Workday says its existing Agent System of Record provides a place to register and manage agents. The proposed C1.ai combination would connect that inventory to access decisions across Workday and other enterprise applications, using events such as a person joining, changing role, or leaving. The acquisition and cross-application integration are plans, not current delivered capabilities.
Why this matters: Treat agent identity as an access lifecycle rather than an inventory field. Record the human or service owner, delegated purpose, target systems, allowed actions, approval path, and expiry for each agent. Test how access changes when the owner moves, a task ends, or an agent is retired, and confirm that revocation propagates across connected applications. Evaluate Workday's and C1.ai's current capabilities separately until the deal closes and the proposed integration can be tested in a real environment.
Read Workday's C1.ai acquisition announcement