Copilot Studio agents now receive Entra identities

Microsoft Learn, last updated July 8, 2026, says new Copilot Studio agents are automatically assigned Microsoft Entra Agent IDs. Admins can see those agents in the Entra admin center, review connector permissions as API permissions, target them with Conditional Access, and inspect related sign-in activity.
Before this, agent governance could feel split between the Copilot Studio maker experience and identity/security administration. That made it harder for security teams to see which agents existed, what they could access, and where risk should be reviewed. Entra Agent IDs move agents closer to the normal identity governance model. Adoption teams now need to treat serious agents less like content assets and more like identity-bearing workload objects with lifecycle, permission, and monitoring responsibilities.
Analysis
Ask your Entra admin to list new Copilot Studio agent identities and pick one pilot agent for a permission review. Check connector permissions, Conditional Access fit, and sign-in logs.
Source note
Pulse published by Collab365 Spaces, reviewed by Helen Jones on . Cite as "Copilot Studio agents now get Entra identities", Collab365 Spaces. 1 source referenced.