AIAGENT-001: Copilot agents restrict who can interact (no broad access)

Plataforma
Entra ID / M365
Categoría
AI Agent Governance
Severidad
High
Pilar de Zero Trust
Identity (peso 3)
Fixtures de referencia
4
Cobertura de ramas
Observada: los fixtures prueban los veredictos que ejercitan
Procedencia
baseline

Qué comprueba

A Copilot Studio agent whose access-control policy is 'Any' or 'Any multitenant' can be interacted with by any user in the tenant, or by users from any tenant, without restriction. For an agent wired to organizational data and tools, that is an unauthenticated data-access and prompt-injection path. This check flags agents whose access control is set to Any / Any multitenant. When agent data is not collected the result is Not Assessed; a tenant with no agents passes (nothing to govern).

Valor recomendado

No published agent uses 'Any' or 'Any multitenant' access control; access is restricted to specific authenticated users or security groups

Remediación

In Copilot Studio, open each flagged agent's Security > Authentication and access settings and change the access control away from 'Any' / 'Any multitenant' to authenticated access restricted to your organization (and ideally to specific security groups). Re-publish the agent after tightening access.

Veredictos probados con fixtures

Cada veredicto de esta tabla está probado por un fixture de referencia en la suite de pruebas que valida el módulo. La tabla se deriva de la última ejecución en verde; no puede editarse a mano.

Escenarios de veredicto de AIAGENT-001
EscenarioVeredicto esperado
broadFAIL
cleanPASS
no-agentsPASS
not-assessedNot Assessed

Mapeos a marcos de referencia

NIST SP 800-53
AC-3, AC-6, SC-7