RECENTProduct update
Visibility into service principals used by AI agents (Preview)
Analysis / inference: Microsoft Defender for Identity adds inventory visibility for Entra ID service principals utilized by AI agents.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
The non-human identity inventory added a Used by AI agents column and an insight card to identify and prioritize AI agent service principals.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisWhy it matters
As organizations adopt AI solutions, tracking non-human identities tied to AI agents is critical for preventing unmonitored privilege escalation and shadow AI risks within Microsoft Entra ID.
Operational impact
SOC and identity teams gain immediate visibility into AI agent service principals without requiring manual asset discovery.
Section 03 · Recommended actions
- Review the identity inventory to identify active service principals flagged as used by AI agents.
What to check
- Check the non-human identity inventory in Microsoft Defender for Identity for the new Used by AI agents column.
- Review the insight cards highlighting service principals utilized by AI agents.
Affected scope
ProductsDefender for Identity