Cisco Introduces Privileged Infrastructure Access to Replace Standing Admin Credentials

On October 26, 2026, Cisco announced Privileged Infrastructure Access, an access model designed to manage network and infrastructure operations for human operators, automated scripts, and AI agents. According to the company, the architecture addresses risks where traditional static credentials prompt engineers to bypass controls during maintenance. The system provides temporary access mediated by cryptographic identities, expiring privileges once tasks conclude, while allowing organizations using Cisco ISE and TACACS+ to incorporate existing policy context.

Key takeaways

• Cisco introduced Privileged Infrastructure Access, shifting privileged administration from standing credentials to temporary, identity-bound sessions.
• Access rights are designed to expire upon task completion, enforcing least privilege to mitigate risks from machine-speed, AI-driven attacks.
• The workflow supports human operators and AI agents, recording session activity across switches, routers, Kubernetes clusters, and cloud resources.
• Customers using Cisco ISE and TACACS+ can leverage existing device and policy context to govern access across Cisco equipment and other infrastructure.