AIAGENT-004: Copilot agent access is scoped to security groups
- Plataforma
- Entra ID / M365
- Categoría
- AI Agent Governance
- Severidad
- Medium
- Pilar de Zero Trust
- Identity (peso 2)
- Fixtures de referencia
- 3
- Cobertura de ramas
- Observada: los fixtures prueban los veredictos que ejercitan
- Procedencia
- baseline
Qué comprueba
An authenticated Copilot Studio agent with no authorized security groups is reachable by any authenticated user in the tenant. Scoping an agent to specific security groups limits its audience to those with a business need, applying least privilege to who can invoke an agent and the data it fronts. This check flags authenticated agents that have no authorized security groups configured.
Valor recomendado
Authenticated agents that front sensitive data are scoped to specific authorized security groups rather than all authenticated users
Remediación
For agents that front sensitive data, configure authorized security groups in the agent's access settings so only members of those groups can interact with the agent. Leave tenant-wide access only for agents deliberately intended for all staff.
Veredictos probados con fixtures
Cada veredicto de esta tabla está probado por un fixture de referencia en la suite de pruebas que valida el módulo. La tabla se deriva de la última ejecución en verde; no puede editarse a mano.
| Escenario | Veredicto esperado |
|---|---|
| clean | PASS |
| not-assessed | Not Assessed |
| unscoped | WARN |
Mapeos a marcos de referencia
- NIST SP 800-53
- AC-2, AC-3, AC-6