---
title: "Advanced Identity Cloud Agent Governance: custodian and reviewer tasks"
description: View and manage AI agents as a custodian. Review agent profiles, certify entitlements, and request access to tools on behalf of agents.
component: pingoneaic
page_id: pingoneaic:release-notes:rapid-channel/IGA-4223/iga-agent-governance-enduser
canonical_url: https://docs.pingidentity.com/pingoneaic/release-notes/rapid-channel/IGA-4223/iga-agent-governance-enduser.html
section_ids:
  view_and_manage_agents_as_a_custodian: View and manage agents as a custodian
  access_reviews: Access reviews
  access_requests: Access requests
---

# Advanced Identity Cloud Agent Governance: custodian and reviewer tasks

As a custodian, certifier, or reviewer, you are responsible for managing and overseeing AI agents. You interact with the hosted pages to perform governance tasks such as reviewing agent profiles, entering and approving access requests, and certifying agent entitlements.

## View and manage agents as a custodian

Custodians manage agents' access and lifecycle. Agent Governance events support succession management, ensuring new custodians are assigned when existing ones move within or leave the organization.

To view the agents assigned to you and review their properties and entitlements:

1. On the hosted page, click My Access > My Agents.

2. On the My Agents page, select an agent to view its details.

   ![Screen capture of the agent profile page showing the display name and description.](../../_images/IGA-4223/agent-governance-custodian-view.png)

3. Click the Entitlements tab to view the agent's access to tools and permissions.

4. Click the ellipsis icon ([icon: more_horiz, set=material, size=inline]) for a specific entitlement.

5. Click View Details to see more information about that entitlement, including its description from the entitlement glossary.

   ![Screen capture of the agent entitlements showing a list of entitlements with a detail modal open.](../../_images/IGA-4223/agent-governance-end-user-agent-entitlements.png)

## Access reviews

Access reviews enable human oversight of agent access and reduce access drift, improving your organization's security posture. When a campaign is active, you review agent access to ensure it is correct and complies with your organization's security policies.

To review and certify, revoke, or flag exceptions for agent access:

1. On the hosted pages, click Inbox > Access Reviews.

2. On the Access Reviews page, select an active campaign to review the agents included in that campaign.

3. For each agent, review the agent's properties and entitlements to determine if the access is appropriate.

   ![Screen capture of the access review page showing agents and review actions.](../../_images/IGA-4223/agent-governance-end-user-access-review.png)

   1. Under Actions, click Certify, Revoke, or Allow an exception for the agent's access.

   2. If you need additional reviewers or information, click the ellipsis icon ([icon: more_horiz, set=material, size=inline]) to do the following:

      * Forward: Forward the review to another user who might have more context about the agent or its access.

      * View Reviewers: View who else is reviewing this agent's access in the current campaign.

      * Add a Comment: Provide additional context or information about the agent's access for other reviewers to see.

      * View Activity: View the agent's activity history to help inform your decision about whether to certify or revoke access.

## Access requests

As a custodian or administrator, you can request access to tools on behalf of agents. Agent Governance lets you set a time limit on how long an agent retains access to a tool or entitlement, limiting agents to only the access they need for a specific task.

To request tool access for an agent:

1. On the hosted pages, click My Requests, and then click [icon: add, set=material, size=inline] New Request.

2. In the New Request modal, select Other Users, and then click Next.

3. For Users, select an agent, for example, AGT001 CrewAI, and then click Next.

4. On the Access Catalog page, click the Entitlements tab.

5. Select the entitlements you want to request access to for the agent.

6. In the entitlement modal, click Add to Request.

7. In the right pane, enter the justification for why the agent needs this access and the duration for which access is needed.

8. Click Complete Request to submit the access request for approval.

9. On the My Requests page, track the status of your access request.

   When the status changes to Approved, the agent has access to the requested entitlements for the specified duration.

   ![Screen capture of the My Requests page showing access request details.](../../_images/IGA-4223/agent-governance-end-user-access-request.png)