--- title: Would You Give an AI Agent Read-Only Access to Production? description: A discussion question is posed to DevOps and platform engineers about how much production access AI agents should be given, starting with read-only log and... canonical: https://daily.dev/posts/would-you-give-an-ai-agent-read-only-access-to-production--lfvoohrmg twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Would You Give an AI Agent Read-Only Access to Production? | daily.dev og:description: A discussion question is posed to DevOps and platform engineers about how much production access AI agents should be given, starting with read-only log and... og:url: https://daily.dev/posts/would-you-give-an-ai-agent-read-only-access-to-production--lfvoohrmg og:image: https://api.daily.dev/og/posts/LfVoohRmG.png og:image:alt: Would You Give an AI Agent Read-Only Access to Production? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Would You Give an AI Agent Read-Only Access to Production? **[DevOps & Platform Engineering Hub](https://daily.dev/sources/sanjay)** · [@divyansh30](https://daily.dev/divyansh30) · 1 min read · 1 upvotes · 0 comments ## Summary A discussion question is posed to DevOps and platform engineers about how much production access AI agents should be given, starting with read-only log and infrastructure checks. It links to a write-up describing a real setup for using a read-only AI agent for DevOps lookups and first-pass incident investigation, covering access controls, command restrictions, prompt injection risks, budgets, and audit logs, then opens the floor for opinions on where to draw the line between investigation and making changes. ## Content I've been seeing more people experiment with AI agents for DevOps work, especially for checking logs, looking through infrastructure, and helping with incident investigation. The part I'm still unsure about is how much access we'd actually want to give them. Read-only access feels reasonable. But what happens when the agent starts suggesting fixes, or eventually wants to make changes itself? I'm curious what other DevOps and platform engineers think: - Would you give an AI agent read-only access to production? - What would you let it check on its own? - Where would you draw the line between investigation and making changes? - Would you ever allow an AI agent to make a production change without approval? I came across this write-up about using a read-only AI agent for DevOps lookups and first-pass incident investigation. It also talks about access controls, command restrictions, prompt injection, budgets, and audit logs. [https://www.kubeblogs.com/ai-agent-for-devops-what-actually-worked/](https://www.kubeblogs.com/ai-agent-for-devops-what-actually-worked/) Where would you draw the line with AI agents in your own production environment? #DevOps #PlatformEngineering #AIOps #DevSecOps #CloudSecurity #AI ## Similar posts on daily.dev - [I gave my coding agent read-only access to my server and it started fixing actual bugs](https://daily.dev/posts/i-gave-my-coding-agent-read-only-access-to-my-server-and-it-started-fixing-actual-bugs-xhg5hozew) · XDA Developers · 0 upvotes · 0 comments - [Your Coding Agent Has Production Access. Nobody Wrote the Incident Plan.](https://daily.dev/posts/your-coding-agent-has-production-access-nobody-wrote-the-incident-plan--lrcqfww93) · Medium · 0 upvotes · 0 comments - [How to Move AI SRE Agents From Demo to Production](https://daily.dev/posts/how-to-move-ai-sre-agents-from-demo-to-production-qn4gnrozx) · DevOps.com · 0 upvotes · 0 comments - [AI Agents Are Privileged Users; Who Is Auditing Their Access?](https://daily.dev/posts/ai-agents-are-privileged-users-who-is-auditing-their-access--gprca2dhv) · Dark Reading · 0 upvotes · 0 comments - [Your AI agent just blamed the network team. Now what?](https://daily.dev/posts/your-ai-agent-just-blamed-the-network-team-now-what--bxfzldyzd) · LeadDev · 0 upvotes · 0 comments --- Tags: [#devops](https://daily.dev/tags/devops), [#ai-agents](https://daily.dev/tags/ai-agents), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/would-you-give-an-ai-agent-read-only-access-to-production--lfvoohrmg) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/would-you-give-an-ai-agent-read-only-access-to-production--lfvoohrmg","headline":"Would You Give an AI Agent Read-Only Access to Production?","text":"A discussion question is posed to DevOps and platform engineers about how much production access AI agents should be given, starting with read-only log and infrastructure checks. It links to a write-up describing a real setup for using a read-only AI agent for DevOps lookups and first-pass incident investigation, covering access controls, command restrictions, prompt injection risks, budgets, and audit logs, then opens the floor for opinions on where to draw the line between investigation and making changes.","url":"https://daily.dev/posts/would-you-give-an-ai-agent-read-only-access-to-production--lfvoohrmg","datePublished":"2026-08-14T01:56:19.297Z","dateModified":"2026-09-13T21:13:34.259Z","author":{"@type":"Person","name":"Divyansh","url":"https://daily.dev/divyansh30","image":"https://media.daily.dev/image/upload/s--f9lbkpFv--/f_auto/v1744873189/avatars/avatar_JMQ4qarKTe7zPurSPRrzM","description":"Aspiring engineer with an interest in AI, tech and DevOps :)","interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"EndorseAction"},"userInteractionCount":1070}},"image":"https://media.daily.dev/image/upload/s--h0RAJhfN--/f_auto/v1786672580/posts/LfVoohRmG?_a=BAMAMicg0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/squads/sanjay","name":"DevOps & Platform Engineering Hub"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DevOps & Platform Engineering Hub","item":"https://daily.dev/squads/sanjay"},{"@type":"ListItem","position":3,"name":"Would You Give an AI Agent Read-Only Access to Production?"}]} ```