Customer Managed Key

Encrypts Dataverse data at rest with your own key held in Azure Key Vault instead of the default Microsoft-managed key, letting you rotate it or revoke Microsoft's access on demand. Reduces the risk of unauthorized access to agent data at rest and supports encryption sovereignty.