References — Secure AI

↳ Agent Identity & Access Management · Agent Observability & Governance · Microsoft Entra Agent ID · Microsoft Entra ID Governance

Agent management in Microsoft 365 admin center Doc

Agent management roles and permissions in Microsoft 365 admin center Doc

Agent settings in Microsoft 365 admin center Doc

Assign and deploy agents for Microsoft 365 Copilot Doc

Data, privacy, and security for web search in Microsoft 365 Copilot and Microsoft 365 Copilot Chat Doc

Domain exclusion overview Doc

Governance and Lifecycle actions for agents available in Microsoft 365 admin center Doc

Graph API for agent registry and agent details Doc

Least privilege for AI agents (agentic identities + RBAC) Doc

↳ Agent Identity & Access Management · Agent Observability & Governance · Microsoft Entra Agent ID · Microsoft Entra ID Governance

Manage agent instances in Microsoft 365 admin center Doc

Manage agent registry in Microsoft 365 admin center Doc

Manage agent requests in Microsoft 365 admin center Doc

Manage agents in the Microsoft 365 admin center Doc

Manage tools for agents in Microsoft 365 admin center Doc

Microsoft 365 Copilot Agents usage report Doc

Microsoft Agent 365 licensing FAQ FAQ

↳ Agent Identity & Access Management · Agent Observability & Governance · Secure the Agent Runtime

Observability integration for Copilot Studio Doc

Observability SDK Doc

Policy templates Doc

Registry sync in the Microsoft 365 agent registry (preview) Doc

Security for Microsoft 365 Copilot Doc

Shadow AI in Microsoft 365 admin center Doc

Understand agent details in Microsoft 365 admin center Doc

Use Agent Map in the Microsoft 365 admin center Doc

Work IQ MCP overview Doc

Microsoft 365 App Compliance Program 2

Microsoft 365 App Compliance Program overview Doc

What is Publisher Attestation? Doc

Microsoft 365 Archive 1

Overview of Microsoft 365 Archive Doc

Microsoft Copilot Studio 6

Agent runtime protection status Doc

Automatic security scan in Copilot Studio Doc

Configure web channel security Doc

Enable external threat detection and protection for Copilot Studio custom agents Doc

Key concepts - Copilot Studio security and governance Doc

Use tools with custom agents Doc

Microsoft Dataverse 2

Control transcript access and retention Doc

View and download transcripts in Power Apps Doc

Microsoft Defender for Cloud 4

AI threat protection in Microsoft Defender for Cloud Doc

Alerts for AI services Doc

Overview - AI security posture management Doc

What is Defender Cloud Security Posture Management (CSPM)? Doc

Microsoft Defender for Cloud Apps 1

Cloud app discovery overview - Microsoft Defender for Cloud Apps Doc

Microsoft Defender for Endpoint 2

AI agent runtime protection with Microsoft Defender for Endpoint (Preview) Doc

Local AI agent discovery with Microsoft Defender for Endpoint Doc

Microsoft Defender XDR 7

AgentsInfo (Preview) Doc

AI agent posture risk in Microsoft Defender (preview) Doc

Assess your organization's AI risk with Microsoft Security Dashboard for AI (Preview) Doc

Detect and investigate threats to AI agents using Microsoft Defender Doc

Discover AI agents and assess security posture using Microsoft Defender Doc

Protect AI agents in real time using Microsoft Defender Doc

Secure AI agents at scale using Microsoft Agent 365 Doc

Microsoft Entra Agent ID 1

What is Microsoft Entra Agent ID? Doc

Microsoft Entra ID 1

Conditional Access for agents Doc

Microsoft Entra ID Governance 2

Govern AI agent identities and access the same way you govern your employees Blog

Governing Agent Identities Doc

Microsoft Entra ID Protection 1

ID Protection for agents Doc

Microsoft Entra Internet Access 6

AI agent discovery in Global Secure Access Doc

Generative AI Insights in Global Secure Access Doc

Global Secure Access web content filtering Doc

Learn about Secure Web And AI Gateway for Microsoft Copilot Studio agents Doc

Protect enterprise generative AI applications with prompt injection protection Doc

Shadow AI discovery in Global Secure Access Doc

Microsoft Foundry 30

Architecting Secure and Trustworthy AI Agents with Microsoft Foundry – Apr 2026 Blog

↳ Secure Agents Built in Azure AI Foundry

Agentic Workflows: Task Adherence (preview) Doc

AI gateway in Azure API Management Doc

AI Red Teaming Agent Doc

Authentication and authorization in Microsoft Foundry Doc

Azure AI security best practices Doc

↳ Secure Agents Built in Azure AI Foundry

Azure security baseline for Microsoft Foundry Doc

↳ Secure Agents Built in Azure AI Foundry

Built-in evaluators reference Doc

Built-in policies for model deployment in Microsoft Foundry portal Doc

Configure a private link for Microsoft Foundry Doc

Configure AI Gateway in your Foundry resources Doc

Configure keyless authentication with Microsoft Entra ID Doc

Configure managed virtual network for Microsoft Foundry projects Doc

Customer-managed keys (CMKs) for Microsoft Foundry Doc

Enforce token limits for models Doc

Foundry Models sold by Azure abuse monitoring Doc

Govern MCP tools by using an AI gateway (preview) Doc

Guardrails and controls overview in Microsoft Foundry Doc

How to use Risks & Safety monitoring in Microsoft Foundry (classic) Doc

Manage compliance and security in Microsoft Foundry Doc

Microsoft Foundry architecture Doc

Monitor model deployments in Microsoft Foundry Models Doc

Prompt shields content filtering Doc

Protected material detection filter Doc

Risk and safety evaluators Doc

Role-based access control for Microsoft Foundry Doc

Set up tracing in Microsoft Foundry Doc

Tracing and data handling Doc

Transition Microsoft Copilot Studio and Microsoft Foundry agent security capabilities to Microsoft Agent 365 Doc

Use your own resources Doc

Microsoft Intune 3

Blocking and removing apps on Intune managed devices (Windows, iOS/iPadOS, Android and macOS) Blog

How does Microsoft Intune support Agent 365? Doc

Manage approved apps for Windows devices with App Control for Business policy and Managed Installers for Microsoft Intune Doc

Microsoft Power Platform admin center 18

Block cookie replay attacks in Dataverse Doc

Block unmanaged customizations in Dataverse Doc

Configure data policies for agents Doc

Connector classification Doc

Create and manage masking rules Doc

Data policies Doc

Environment groups Doc

Environment routing Doc

IP firewall in Power Platform environments Doc

Limit sharing Doc

Manage Dataverse auditing Doc

Manage your customer-managed encryption key Doc

Managed environments overview Doc

Pipelines in Power Platform Doc

Run pipelines in Power Platform Doc

Securely access customer data by using Customer Lockbox in Power Platform and Dynamics 365 Doc

Solution checker enforcement in managed environments Doc

Use solution checker to validate your solutions Doc

Microsoft Purview 11

Microsoft Purview Referential Architecture Diagrams – Apr 2026 Blog

↳ Detect & Respond to AI Data Risk · Protect Enterprise Data Used by AI · Secure SharePoint Grounding Data

Audit Copilot Studio activities in Microsoft Purview Doc

↳ Microsoft Sentinel

Classifiers overview Doc

Configure a Communication Compliance policy to detect generative AI interactions Doc

Learn about sensitive information types Doc

Microsoft Purview deployment models Doc

↳ Protect Enterprise Data Used by AI · Secure SharePoint Grounding Data

Microsoft Purview eDiscovery Doc

Search for and delete Copilot data in eDiscovery Doc

Secure & governed data foundation for Microsoft 365 Copilot: A deployment blueprint Doc

↳ Protect Enterprise Data Used by AI · Secure SharePoint Grounding Data · SharePoint Advanced Management

Turn audit log search on or off Doc

Use Microsoft Purview to manage data security & compliance for other AI apps Doc

Microsoft Purview Compliance Manager 2

Build and manage assessments in Compliance Manager Doc

Use Microsoft Purview to manage data security & compliance for Microsoft Agent 365 Doc

↳ Microsoft Purview Data Lifecycle Management

Microsoft Purview Data Lifecycle Management 1

Learn about retention for Copilot & AI apps Doc

Microsoft Purview Data Loss Prevention 6

Help prevent sharing via Microsoft Edge for Business to unmanaged AI apps from managed devices Doc

Learn about Data Loss Prevention for Cloud Apps in Edge for Business Doc

Learn about Endpoint data loss prevention Doc

Learn about Microsoft Purview Network Data Security Doc

Learn about the Microsoft 365 Copilot location for data loss prevention Doc

Use Network Data Security to help prevent sharing sensitive information with unmanaged AI Doc

Microsoft Purview Data Security Posture Management 1

Learn about Data Security Posture Management Doc

Microsoft Purview Information Protection 3

How data is protected and audited in Microsoft 365 and Microsoft 365 Copilot Doc

Learn about sensitivity labels Doc

Use Microsoft Purview to manage data security & compliance for Microsoft 365 Copilot & Microsoft 365 Copilot Chat Doc

Microsoft Purview Insider Risk Management 4

Help dynamically mitigate risks with Adaptive Protection Doc

Investigate insider risk threats in the Microsoft Defender portal Doc

Learn about Insider Risk Management Doc

Microsoft Purview data security and compliance protections for generative AI apps Doc

Microsoft Security Copilot 2

Microsoft Security Copilot and Chat in Microsoft Defender Doc

What is Microsoft Security Copilot? Doc

Microsoft Sentinel 5

Asset data ingestion in the Microsoft Sentinel data lake Doc

Audit logs for Copilot and AI applications Doc

CopilotActivity table reference Doc

Find your Microsoft Sentinel data connector Doc

What is the Microsoft Sentinel solution for Microsoft Business Apps? Doc

SharePoint Advanced Management 6

Content Management Assessment Doc

Data access governance reports for SharePoint and OneDrive sites Doc

Restrict access to a SharePoint site with Restricted Access Control Doc

Restricted Content Discovery Doc

Site lifecycle management Doc

What is the SharePoint Admin Agent? Doc

SharePoint Online 2

Manage access to agents in SharePoint Doc

Manage sharing settings for SharePoint and OneDrive Doc

Windows 365 for Agents 2

Security overview Doc

What is Windows 365 for Agents? Doc

Guides & other 30

Announcing Public Preview: Agent Identities Asset Connector for Microsoft Sentinel – Jun 2026 Blog

↳ SecOps for AI

Reconstructing AI activity in investigations – Jun 2026 Blog

↳ SecOps for AI

Agent 365 connector: Monitor, hunt, and investigate AI agent activity in Microsoft Sentinel – May 2026 Blog

↳ SecOps for AI

Administering and Governing Agents whitepaper – May 2026 Whitepaper

↳ Secure Agents Built in Microsoft Copilot Studio

The Microsoft Copilot Data Connector for Microsoft Sentinel is Now in Public Preview – Feb 2026 Blog

↳ SecOps for AI

Agent Security Playbook Whitepaper

↳ Secure Agents Built in Microsoft Copilot Studio

Agents for Microsoft 365 Copilot Doc

↳ The Microsoft agent landscape

Apply principles of Zero Trust to Microsoft 365 Copilot Doc

↳ Protect Enterprise Data Used by AI · Secure SharePoint Grounding Data

Complete AI threat modeling Doc

↳ Agent Identity & Access Management · Agent Observability & Governance · Secure the Agent Runtime

Defend against indirect prompt injection attacks Doc

↳ Secure Agents Built in Azure AI Foundry · Secure Agents Built in Microsoft Copilot Studio · Secure the Agent Runtime

European Commission — AI Act regulatory framework Doc