An agent can accelerate the work; the permissions attached to an accepted credential determine what that work can reach. For an administrator reading about the ConnectWise compromise, that puts a concrete check ahead of the debate about automation: which accounts used by the supplier can still sign in, and what can they do?

The Record reports that a Chinese government-aligned group used automated tools in the attack on ConnectWise, an IT management software company. Microsoft’s account describes agents scaling supply chain compromise and credential abuse across enterprise environments. Neither description establishes which downstream accounts remain usable. That requires evidence from the receiving system.

The supplier has an incident to investigate. The customer has an access decision.

A successful sign-in records that the receiving system accepted the credential. Establishing who used it requires more evidence. An account can retain its familiar name and permissions while the circumstances in which it is being used have changed.

That leaves the administrator with two records to reconcile: the supplier’s account of the compromise and the customer’s own record of accepted access. The relevant evidence is the account, its permissions and its activity. The presence of an AI agent does not answer any of those questions.

Disabling a compromised supplier account or revoking its credentials would close that route. Where the downstream system continues to accept them, whoever holds those credentials retains the access that system grants.