Microsoft announces new controls for agent security and digital sovereignty
Diesen Beitrag auf Deutsch lesen
Agent 365, dynamic permissions, monitoring and sovereignty controls address agent governance, while availability and licensing remain unclear for most features.
TL;DR
Agent 365, included in Microsoft 365 E7, assesses individual agent risk using identity, data, device, cloud, network and activity signals. Dynamic Agent Permissions and Adaptive Conditional Access adjust access, while Project Perception continuously monitors agents. Availability, rollout, regions and licensing remain unspecified for most announced features.
Original by Anastasios Ntaflos, on MVPTreff. Read the original
This is our own summary, not a republication or full translation.
Governance takeaway
- Admins/CoE: Check Microsoft Learn for availability, rollout, region and licensing before planning Agent 365 or the Sovereign Control Panel, because most statuses are unspecified.
- Security/Compliance: Map agent permissions, activity monitoring, key custody and access records to current controls, because the announcements address these governance questions with new components.
- Leadership/Business: Treat sovereignty and agent security as validation decisions, not assumed capabilities, because tenant usability still requires administrator review.
Frequently asked questions
What signals does Agent 365 use to assess AI agent risk?
Agent 365 evaluates individual agent risk from signals covering identities, data, devices, cloud environments, networks and agent activities.
How do Dynamic Agent Permissions and Adaptive Conditional Access control agents?
They dynamically control agent access rights and complement Agent 365 risk assessment, but the source gives no further implementation details.
Is the Sovereign Control Panel generally available?
The source does not state a general availability status for Sovereign Control Panel; rollout, region and licensing details remain to be clarified.