AIAGENT-001: Copilot agents restrict who can interact (no broad access)
- Plataforma
- Entra ID / M365
- Categoría
- AI Agent Governance
- Severidad
- High
- Pilar de Zero Trust
- Identity (peso 3)
- Fixtures de referencia
- 4
- Cobertura de ramas
- Observada: los fixtures prueban los veredictos que ejercitan
- Procedencia
- baseline
Qué comprueba
A Copilot Studio agent whose access-control policy is 'Any' or 'Any multitenant' can be interacted with by any user in the tenant, or by users from any tenant, without restriction. For an agent wired to organizational data and tools, that is an unauthenticated data-access and prompt-injection path. This check flags agents whose access control is set to Any / Any multitenant. When agent data is not collected the result is Not Assessed; a tenant with no agents passes (nothing to govern).
Valor recomendado
No published agent uses 'Any' or 'Any multitenant' access control; access is restricted to specific authenticated users or security groups
Remediación
In Copilot Studio, open each flagged agent's Security > Authentication and access settings and change the access control away from 'Any' / 'Any multitenant' to authenticated access restricted to your organization (and ideally to specific security groups). Re-publish the agent after tightening access.
Veredictos probados con fixtures
Cada veredicto de esta tabla está probado por un fixture de referencia en la suite de pruebas que valida el módulo. La tabla se deriva de la última ejecución en verde; no puede editarse a mano.
| Escenario | Veredicto esperado |
|---|---|
| broad | FAIL |
| clean | PASS |
| no-agents | PASS |
| not-assessed | Not Assessed |
Mapeos a marcos de referencia
- NIST SP 800-53
- AC-3, AC-6, SC-7