AI agent hardening controls¶
Inventory, guardrails and accountable owners for Copilot Studio agents and Entra agent identities.
| ID | Control | Priority | Effort |
|---|---|---|---|
| AG01 | Inventory every agent in the tenant | Highest | 1 h |
| AG02 | Require user authentication for Copilot Studio agents | Highest | 30 min |
| AG03 | Block HTTP requests and channels you don't use | High | 1 h |
| AG04 | Watch agent creation, publishing, sharing and authentication changes | High | 1 h |
| AG05 | Block high-risk agent identities with Conditional Access | High | 30 min |
These are the free Top 5. The M365 AI Agent Hardening Kit has all 20 controls, with the Jira import, Excel plan and read-only script.