[{"data":1,"prerenderedAt":1284},["ShallowReactive",2],{"sc:header-data-da":3,"sc:footer-data-da":495,"author-da-andreas-hoetzinger-149c66be22f8ea":525,"content-da-andreas-hoetzinger":549,"content-events-da-andreas-hoetzinger":1273,"authors_data:Andreas Hötzinger":1274},{"lang":4,"home":5,"navigation":17,"meta":485,"contact":491},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"da":13},{"title":14,"url":15,"alt":16},"Forside","/da","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"da":21},{"title":22,"description":23},"Workplace","Intelligente, sikre og fleksible arbejdspladser bygget på Microsoft 365, der forener moderne teknologier og identitetstjenester.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"da":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"da":34},{"title":35,"url":36},"Managed Intune","/da/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"da":40},{"title":41,"url":42},"Managed Entra","/da/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"da":46},{"title":47,"url":48},"Managed Workplace","/da/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"da":52},{"title":53,"url":54},"Consulting Services","/da/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"da":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"da":64},{"title":65,"url":66},"Microsoft Entra Suite","/da/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"da":70},{"title":71,"url":72},"Microsoft Intune","/da/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"da":76},{"title":77,"url":78},"Microsoft Windows","/da/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"da":82},{"title":83,"url":84},"Windows 365 Cloud PC","/da/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"da":88},{"title":89,"url":90},"Cloud Workplace Foundation","/da/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"da":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"da":100},{"title":101,"url":102},"Microsoft 365 Copilot","/da/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"da":106},{"title":107,"url":108},"Teams","/da/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"da":112},{"title":113,"url":114},"SharePoint & Power Platform","/da/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"da":118},{"title":119,"url":120},"Exchange Online","/da/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"da":124},{"title":125,"url":126},"Information Protection & Compliance","/da/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"da":130},{"title":131,"description":132},"Azure","Sæt gang i væksten med Azure: skær ned på cloudomkostningerne, øg effektiviteten og driv innovationen med IaaS og PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"da":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"da":142},{"title":143,"url":144},"Azure Managed Services","/da/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"da":148},{"title":149,"url":150},"Azure Consulting","/da/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"da":154},{"title":155},"Scenarier",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"da":160},{"title":161,"url":162},"Planlæg din cloud","/da/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"da":166},{"title":167,"url":168},"Migrér til cloud","/da/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"da":172},{"title":173,"url":174},"Forny din forretning","/da/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"da":178},{"title":179,"url":180},"Gentænk din VMware-strategi","/da/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"da":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"da":190},{"title":191,"url":192},"Azure Foundation","/da/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"da":196},{"title":197,"url":198},"Azure AI Foundation","/da/azure/azure-ai-foundation",{"name":86,"languages":200},{"da":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"da":205},{"title":206,"url":207},"Azure Data Foundation","/da/azure/azure-data-foundation",{"name":188,"languages":209},{"da":210},{"title":211,"url":212},"Azure Container Foundation","/da/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"da":216},{"title":217,"url":218},"Managed Dark Tenant","/da/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"da":222},{"title":223,"url":224},"Cloud Adoption Framework","/da/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"da":228},{"title":229,"url":230},"Cloud Competence Center","/da/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"da":234},{"title":235,"description":236,"emergency":237},"Sikkerhed","Årvågenhed i clouden med en prisbelønnet 24/7 managed service, incident response og tidssvarende beskyttelse af din infrastruktur.",{"text":238,"href":239,"skin":240,"icon":241},"Under angreb?","/da/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"da":249},{"title":250,"url":251},"Managed Red Tenant","/da/security/managed-red-tenant",{"name":214,"languages":253},{"da":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"da":259},{"title":260,"url":261},"Sentinel Data Lake","/da/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"da":265},{"title":266,"url":267},"Security Consulting","/da/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"da":274},{"title":275,"url":276},"Cloud Security Operations Center","/da/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"da":280},{"title":281,"url":282},"Global Secure Access","/da/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"da":286},{"title":287,"url":288},"MyWorkID","/da/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"da":295},{"title":296,"url":297},"Preventive Services","/da/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"da":301},{"title":302,"url":303},"Data Security Service","/da/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"da":307},{"title":308,"url":309},"Security Copilot Agents","/da/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"da":313},{"title":314,"url":315},"Implementering af NIS2","/da/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"da":319},{"title":320,"description":321},"Produkter","Companion-produkter til et gennemført sikkert, 100 % cloud-native Microsoft-miljø, der styrker samarbejdet, netværksautentificeringen og softwarehåndteringen.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"da":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Cloudbaseret softwaredistribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"da":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certifikatdistribution fra clouden",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"da":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Arbejd med dine lokale Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"da":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrér dine data fra én server til en anden",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"da":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider til Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"da":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Autentificering til dit netværk",{"name":380,"img":381,"target":330,"languages":382},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"da":383},{"title":384,"url":385,"subtitle":386},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-overvågning i realtid",{"name":388,"img":389,"target":330,"languages":390},"sendman","products/sendman/Sendman-nav-logo.svg",{"da":391},{"title":392,"url":393,"subtitle":394},"Sendman","https://www.sendman.com","SMTP-relæet til Microsoft 365",{"name":396,"languages":397},"casestudies",{"da":398},{"title":399,"url":400,"description":401},"Cases","/da/casestudies","Pioner i clouden: din Microsoft-partner til gennemarbejdede cloudløsninger med en blueprint-baseret tilgang og ekspertise i Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"da":405},{"title":406,"description":401},"Virksomhed",[408,444,468],{"name":409,"languages":410,"children":413},"company-about-us",{"da":411},{"title":412},"Om os",[414,420,426,432,438],{"name":415,"languages":416},"company-facts-figures",{"da":417},{"title":418,"url":419},"Fakta og tal","/da/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"da":423},{"title":424,"url":425},"Kontakt og lokationer","/da/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"da":429},{"title":430,"url":431},"glueckkanja Schweiz","/da/company/switzerland",{"name":433,"languages":434},"austria",{"da":435},{"title":436,"url":437},"glueckkanja Østrig","/da/company/austria",{"name":439,"languages":440},"spain",{"da":441},{"title":442,"url":443},"glueckkanja Spanien","/da/company/spain",{"name":445,"languages":446,"children":449},"company-career",{"da":447},{"title":448},"Karriere",[450,456,462],{"name":451,"languages":452},"company-career-overview",{"da":453},{"title":454,"url":455},"Karriereoversigt","/da/career",{"name":457,"languages":458},"company-young-professionals",{"da":459},{"title":460,"url":461},"Young Professionals","/da/young-professionals",{"name":463,"languages":464},"company-jobs",{"da":465},{"title":466,"url":467},"Ledige stillinger","/da/job-offers",{"name":469,"languages":470,"children":473},"company-latest",{"da":471},{"title":472},"Aktuelt",[474,480],{"name":475,"languages":476},"company-blog",{"da":477},{"title":478,"url":479},"Blog","/da/blog",{"name":475,"languages":481},{"da":482},{"title":483,"url":484},"Events","/da/events",[486],{"name":487,"languages":488},"career-meta",{"da":489},{"title":448,"url":455,"active":490},false,{"languages":492},{"da":493},{"title":494,"url":425,"active":490},"Kontakt",{"data":496},{"bgColor":497,"number":498,"mail":499,"brandLogos":500,"logos":501,"links":505,"linksDa":515},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[502],{"img":10,"alt":16,"url":503,"class":504},"index.html","max-w-19rem",[506,509,512],{"title":507,"url":508},"Datenschutz","/de/privacy",{"title":510,"url":511},"Impressum","/de/imprint",{"title":513,"url":514},"No Cookies","/de/cookies",[516,519,522],{"title":517,"url":518},"Privatlivspolitik","/da/privacy",{"title":520,"url":521},"Juridisk information","/da/imprint",{"title":523,"url":524},"Ingen cookies","/da/cookies",{"id":526,"title":527,"body":528,"description":534,"extension":539,"meta":540,"name":541,"navigation":325,"otherLanguages":542,"path":545,"seo":546,"stem":547,"__hash__":548},"authors/andreas-hoetzinger.md","Andreas Hoetzinger",{"type":529,"value":530,"toc":535},"minimal",[531],[532,533,534],"p",{},"Als Head of Partner Alliances verantwortet Andreas Hötzinger die Partnerschaft von glueckkanja mit Microsoft und das Partnernetzwerk darum herum. Er bringt Microsoft-Programme, Förderangebote und Kundenprojekte zusammen, damit aus Lizenzen und Partnerstatus konkrete Vorhaben werden.",{"title":536,"searchDepth":537,"depth":537,"links":538},"",2,[],"md",{},"Andreas Hötzinger",{"en":543,"es":544},"As Head of Partner Alliances, Andreas Hötzinger is responsible for glueckkanja's partnership with Microsoft and for the partner network around it. He brings Microsoft programs, funding offers and customer projects together so that licenses and partner status turn into concrete projects.","Como Head of Partner Alliances, Andreas Hötzinger es responsable de la colaboración de glueckkanja con Microsoft y de la red de partners que la rodea. Conecta los programas de Microsoft, las ofertas de financiación y los proyectos de clientes para que licencias y estatus de partner se conviertan en proyectos concretos.","/andreas-hoetzinger",{"title":527,"description":534},"andreas-hoetzinger","Hm1EMUQv3yhNUPB9iGHy-G0nPLSrHscxQ-3P4JhWDgQ",[550],{"id":551,"title":552,"author":553,"body":554,"cta":500,"description":536,"eventid":500,"extension":539,"hideInRecent":490,"layout":1170,"meta":1171,"moment":1175,"navigation":325,"path":1264,"seo":1265,"stem":1266,"tags":1267,"webcast":490,"__hash__":1272},"content_da/posts/2026-10-20-who-built-these-agents.md","Hvem har bygget disse agents?",[541],{"type":529,"value":555,"toc":1160},[556,560,576,581,584,592,595,599,601,604,607,877,880,883,1017,1020,1023,1026,1030,1032,1035,1038,1041,1044,1048,1050,1053,1059,1062,1065,1068,1071,1074,1085,1089,1091,1103,1106,1110,1112,1115,1130,1133,1137,1139,1142,1146,1148,1151,1154,1157],[557,558,559],"style",{},"\n/* Die Kusto-Grammatik markiert parse_json als veraltet (rot, kursiv). Die Funktion ist aktuell, also neutral darstellen. */\nhtml .richtext pre.shiki code .s7hpK{--shiki-default:#24292e;--shiki-default-font-style:normal;--shiki-dark:#e1e4e8;--shiki-dark-font-style:normal}\n",[532,561,562,563,567,568,571,572,575],{},"I en kundetenant med ",[564,565,566],"span",{},"3.000"," brugere fandt vi ved den første gennemgang ",[564,569,570],{},"280"," agents. ",[564,573,574],{},"170"," af dem havde ingen ansvarlig tilbage, der stadig var i virksomheden. Det var ingen med onde hensigter, der havde bygget dem, men fagafdelinger, der hurtigt ville løse et problem. Præcis sådan opstod de Service Principals for ti år siden, som ingen har ryddet op i den dag i dag. Agents gentager det mønster, bare hurtigere og i større antal.",[577,578,580],"h2",{"id":579},"hvad-en-licens-ikke-kan","Hvad en licens ikke kan",[532,582,583],{},"{: .h3-font-size}",[532,585,586,587,591],{},"E7 samler E5, Copilot, ",[588,589,590],"a",{"href":66},"Entra Suite"," og Agent 365. Hvad pakken indeholder, er efterhånden beskrevet udførligt. Men en licens rydder ikke op i en tenant. Den giver os værktøjer til at se, identificere og kontrollere agents. Hvem der er ansvarlig for en agent, om den overhovedet skal eksistere, og hvad den må tilgå, afgøres ikke af licensen.",[532,593,594],{},"Dertil kommer tempoet. Agents opstår i dag de samme steder, hvor Excel-makroer opstod før i tiden: i fagafdelingerne, hurtigt og uden ticket. Det er tilsigtet, og vi synes faktisk, det er godt. Men det betyder, at antallet af ikke-menneskelige konti i kataloget vokser hurtigere end nogen anden gruppe.",[577,596,598],{"id":597},"hvad-registret-viser-og-hvad-det-ikke-viser","Hvad registret viser og hvad det ikke viser",[532,600,583],{},[532,602,603],{},"Agent 365 samler agents fra Microsoft 365, Copilot Studio, Power Platform og Foundry ét sted. Defender for Endpoint finder desuden lokalt installerede AI-agents på klienterne, inklusive de konfigurerede MCP-servere. Begge dele ender i Advanced Hunting og kan analyseres samlet via KQL. Shadow AI i bogstavelig forstand.",[532,605,606],{},"Med denne forespørgsel ser vi på, hvilke agents der faktisk kaldes, og hvilke værktøjer de bruger:",[608,609,611],"div",{"style":610},"background: var(--color-bg-grey); border-radius: 6px; padding: 1rem; margin: 0.25rem 0",[612,613,617],"pre",{"className":614,"code":615,"language":616,"meta":536,"style":536},"language-kusto shiki shiki-themes github-light github-dark","CloudAppEvents\n| where ActionType in (\"InvokeAgent\", \"InferenceCall\", \"ExecuteToolBySDK\", \"ExecuteToolByGateway\")\n| extend RawEventData_parsed = parse_json(RawEventData)\n| extend\n    Workload          = coalesce(tostring(RawEventData_parsed[\"Workload\"]), \"Unknown\"),\n    TargetAgentName   = coalesce(tostring(RawEventData_parsed[\"TargetAgentName\"]), \"Unknown\"),\n    AgentName         = coalesce(tostring(RawEventData_parsed[\"AgentName\"]), \"Unknown\"),\n    AgentBlueprintId  = coalesce(tostring(RawEventData_parsed[\"AgentBlueprintId\"]), \"Unknown\"),\n    PlatformAgentType = coalesce(\n        tostring(RawEventData_parsed[\"PlatformAgentType\"]),\n        tostring(RawEventData_parsed[\"CopilotEventData\"][\"PlatformAgentType\"]),\n        \"Unknown\"\n    )\n| project-away RawEventData_parsed\n| summarize count() by ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n","kusto",[618,619,620,628,669,687,695,726,749,772,795,806,820,837,843,849,860],"code",{"__ignoreMap":536},[564,621,624],{"class":622,"line":623},"line",1,[564,625,627],{"class":626},"sVt8B","CloudAppEvents\n",[564,629,630,633,637,640,643,646,650,653,656,658,661,663,666],{"class":622,"line":537},[564,631,632],{"class":626},"| ",[564,634,636],{"class":635},"szBVR","where",[564,638,639],{"class":626}," ActionType ",[564,641,642],{"class":635},"in",[564,644,645],{"class":626}," (",[564,647,649],{"class":648},"sZZnC","\"InvokeAgent\"",[564,651,652],{"class":626},", ",[564,654,655],{"class":648},"\"InferenceCall\"",[564,657,652],{"class":626},[564,659,660],{"class":648},"\"ExecuteToolBySDK\"",[564,662,652],{"class":626},[564,664,665],{"class":648},"\"ExecuteToolByGateway\"",[564,667,668],{"class":626},")\n",[564,670,672,674,677,680,684],{"class":622,"line":671},3,[564,673,632],{"class":626},[564,675,676],{"class":635},"extend",[564,678,679],{"class":626}," RawEventData_parsed = ",[564,681,683],{"class":682},"s7hpK","parse_json",[564,685,686],{"class":626},"(RawEventData)\n",[564,688,690,692],{"class":622,"line":689},4,[564,691,632],{"class":626},[564,693,694],{"class":635},"extend\n",[564,696,698,701,705,708,711,714,717,720,723],{"class":622,"line":697},5,[564,699,700],{"class":626},"    Workload          = ",[564,702,704],{"class":703},"sj4cs","coalesce",[564,706,707],{"class":626},"(",[564,709,710],{"class":703},"tostring",[564,712,713],{"class":626},"(RawEventData_parsed[",[564,715,716],{"class":648},"\"Workload\"",[564,718,719],{"class":626},"]), ",[564,721,722],{"class":648},"\"Unknown\"",[564,724,725],{"class":626},"),\n",[564,727,729,732,734,736,738,740,743,745,747],{"class":622,"line":728},6,[564,730,731],{"class":626},"    TargetAgentName   = ",[564,733,704],{"class":703},[564,735,707],{"class":626},[564,737,710],{"class":703},[564,739,713],{"class":626},[564,741,742],{"class":648},"\"TargetAgentName\"",[564,744,719],{"class":626},[564,746,722],{"class":648},[564,748,725],{"class":626},[564,750,752,755,757,759,761,763,766,768,770],{"class":622,"line":751},7,[564,753,754],{"class":626},"    AgentName         = ",[564,756,704],{"class":703},[564,758,707],{"class":626},[564,760,710],{"class":703},[564,762,713],{"class":626},[564,764,765],{"class":648},"\"AgentName\"",[564,767,719],{"class":626},[564,769,722],{"class":648},[564,771,725],{"class":626},[564,773,775,778,780,782,784,786,789,791,793],{"class":622,"line":774},8,[564,776,777],{"class":626},"    AgentBlueprintId  = ",[564,779,704],{"class":703},[564,781,707],{"class":626},[564,783,710],{"class":703},[564,785,713],{"class":626},[564,787,788],{"class":648},"\"AgentBlueprintId\"",[564,790,719],{"class":626},[564,792,722],{"class":648},[564,794,725],{"class":626},[564,796,798,801,803],{"class":622,"line":797},9,[564,799,800],{"class":626},"    PlatformAgentType = ",[564,802,704],{"class":703},[564,804,805],{"class":626},"(\n",[564,807,809,812,814,817],{"class":622,"line":808},10,[564,810,811],{"class":703},"        tostring",[564,813,713],{"class":626},[564,815,816],{"class":648},"\"PlatformAgentType\"",[564,818,819],{"class":626},"]),\n",[564,821,823,825,827,830,833,835],{"class":622,"line":822},11,[564,824,811],{"class":703},[564,826,713],{"class":626},[564,828,829],{"class":648},"\"CopilotEventData\"",[564,831,832],{"class":626},"][",[564,834,816],{"class":648},[564,836,819],{"class":626},[564,838,840],{"class":622,"line":839},12,[564,841,842],{"class":648},"        \"Unknown\"\n",[564,844,846],{"class":622,"line":845},13,[564,847,848],{"class":626},"    )\n",[564,850,852,854,857],{"class":622,"line":851},14,[564,853,632],{"class":626},[564,855,856],{"class":635},"project-away",[564,858,859],{"class":626}," RawEventData_parsed\n",[564,861,863,865,868,871,874],{"class":622,"line":862},15,[564,864,632],{"class":626},[564,866,867],{"class":635},"summarize",[564,869,870],{"class":703}," count()",[564,872,873],{"class":635}," by",[564,875,876],{"class":626}," ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n",[532,878,879],{},"Der er en vigtig begrænsning her: forespørgslen viser kun en del af billedet, primært Microsofts egne agents og dem, der er bygget på Microsofts platforme. Hvad der kører ved siden af, er ikke synligt her.",[532,881,882],{},"For de lokale agents på klienterne er Defender for Endpoint Plan 2 tilstrækkeligt:",[608,884,885],{"style":610},[612,886,888],{"className":614,"code":887,"language":616,"meta":536,"style":536},"AgentsInfo\n| where Platform == \"LocalAgents\"\n| summarize arg_max(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) by AgentId\n| where LifecycleStatus !in~ (\"Deleted\", \"Uninstalled\")\n| extend AgentMetadata = RawAgentInfo.localAgentMetadata\n| extend Vendor = tostring(AgentMetadata.vendor),\n         Device = tostring(AgentMetadata.deviceName)\n| summarize DeviceCount = dcount(Device) by Agent = Name, Vendor\n| sort by DeviceCount desc\n",[618,889,890,895,907,925,949,958,972,982,1002],{"__ignoreMap":536},[564,891,892],{"class":622,"line":623},[564,893,894],{"class":626},"AgentsInfo\n",[564,896,897,899,901,904],{"class":622,"line":537},[564,898,632],{"class":626},[564,900,636],{"class":635},[564,902,903],{"class":626}," Platform == ",[564,905,906],{"class":648},"\"LocalAgents\"\n",[564,908,909,911,913,916,919,922],{"class":622,"line":671},[564,910,632],{"class":626},[564,912,867],{"class":635},[564,914,915],{"class":703}," arg_max",[564,917,918],{"class":626},"(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) ",[564,920,921],{"class":635},"by",[564,923,924],{"class":626}," AgentId\n",[564,926,927,929,931,934,937,939,942,944,947],{"class":622,"line":689},[564,928,632],{"class":626},[564,930,636],{"class":635},[564,932,933],{"class":626}," LifecycleStatus ",[564,935,936],{"class":635},"!in~",[564,938,645],{"class":626},[564,940,941],{"class":648},"\"Deleted\"",[564,943,652],{"class":626},[564,945,946],{"class":648},"\"Uninstalled\"",[564,948,668],{"class":626},[564,950,951,953,955],{"class":622,"line":697},[564,952,632],{"class":626},[564,954,676],{"class":635},[564,956,957],{"class":626}," AgentMetadata = RawAgentInfo.localAgentMetadata\n",[564,959,960,962,964,967,969],{"class":622,"line":728},[564,961,632],{"class":626},[564,963,676],{"class":635},[564,965,966],{"class":626}," Vendor = ",[564,968,710],{"class":703},[564,970,971],{"class":626},"(AgentMetadata.vendor),\n",[564,973,974,977,979],{"class":622,"line":751},[564,975,976],{"class":626},"         Device = ",[564,978,710],{"class":703},[564,980,981],{"class":626},"(AgentMetadata.deviceName)\n",[564,983,984,986,988,991,994,997,999],{"class":622,"line":774},[564,985,632],{"class":626},[564,987,867],{"class":635},[564,989,990],{"class":626}," DeviceCount = ",[564,992,993],{"class":703},"dcount",[564,995,996],{"class":626},"(Device) ",[564,998,921],{"class":635},[564,1000,1001],{"class":626}," Agent = Name, Vendor\n",[564,1003,1004,1006,1009,1011,1014],{"class":622,"line":797},[564,1005,632],{"class":626},[564,1007,1008],{"class":635},"sort",[564,1010,873],{"class":635},[564,1012,1013],{"class":626}," DeviceCount ",[564,1015,1016],{"class":635},"desc\n",[532,1018,1019],{},"En agent, der handler på vegne af en bruger, arver brugerens rettigheder. Har den bruger adgang til et SharePoint-bibliotek, der er alt for bredt delt, har agenten det også. Den er blot hurtigere og mere grundig end noget menneske.",[532,1021,1022],{},"En autonom agent med sin egen identitet arbejder med egne tilladelser. Den kræver en ansvarlig, et veldefineret rettighedsprofil og en udløbsdato, ligesom ethvert andet konto med adgang til virksomhedsdata.",[532,1024,1025],{},"Registret viser, hvad der er der. Om det bør være der, er en vurdering nogen skal foretage, og den vurdering bliver aldrig færdig.",[577,1027,1029],{"id":1028},"agents-har-brug-for-identiteter-ingen-undtagelser","Agents har brug for identiteter, ingen undtagelser",[532,1031,583],{},[532,1033,1034],{},"Agents bygget med Entra Agent ID får en egen, administreret identitet. Med Agent Blueprints kan man fastlægge, hvordan en agent er opbygget, og hvilke rettigheder den får, inden den overhovedet eksisterer. Og med Entra ID Governance kører adgangsgennemgange og livscyklusstyring også for agents: oprette, godkende, tildele ansvarlige, gennemgå regelmæssigt, lade udløbe.",[532,1036,1037],{},"Conditional Access kan anvendes på agent-identiteter og blueprints, men ikke en-til-en som med mennesker. Politikker for \"alle brugere\" omfatter ikke agent-konti, og den der tilgår via API-nøgle, omgår Entra fuldstændigt. Disse huller skal man kende, inden man stoler på politikken.",[532,1039,1040],{},"Det lyder selvfølgeligt. I praksis er det det desværre ikke. Vi ser allerede i dag i mange tenants, hvor svært det er med klassiske app-registreringer og Service Principals. Forladte secrets, rettigheder fra en testfase for længst siden, ansvarlige der for længst er gået til en anden arbejdsgiver. Agents gør det ikke bedre, fordi de bygges i langt større antal og af langt flere mennesker.",[532,1042,1043],{},"Den der ikke har styr på sine Service Principals i dag, vil heller ikke have styr på sine agents i morgen.",[577,1045,1047],{"id":1046},"governance-er-en-løbende-opgave","Governance er en løbende opgave",[532,1049,583],{},[532,1051,1052],{},"Hver uge kommer der nye agents til. Ansvarlige skifter rolle eller virksomhed. Rettigheder vokser, Conditional Access-regler får undtagelser, og Sensitivity Labels vedligeholder ingen. Intet af det er et projekt med en go-live-dato, det er drift.",[532,1054,1055,1056,1058],{},"Og netop sådan går vi til det. Med ",[588,1057,41],{"href":42}," driver vi Entra ID fuldstændigt som kode for vores kunder. Det lyder som et teknisk detalje, men det er den egentlige grund til, at driften kører pålideligt.",[532,1060,1061],{},"Mange virksomheder har en ordentlig change-proces efter ITIL. Ticketen beskriver, hvad der skal ændres, og så klikkes der i portalen. Men hvem kontrollerer, at det præcis er det, der blev justeret, og ikke noget andet?",[532,1063,1064],{},"Hos os kontrolleres ikke beskrivelsen, men selve ændringen. Reglerne foreligger som kode. Det er sort på hvidt fastlagt på forhånd, hvad der ændres. En anden person godkender præcis det, og kun det rulles ud, med navn og dato. Går noget alligevel galt, er den seneste fungerende tilstand gendannet på minutter, ikke i løbet af en nattevagt.",[532,1066,1067],{},"Undtagelser følger også denne vej. Har en kunde brug for en afvigelse fra standarden, står den i repositoryet og ikke på en Excel-liste eller i en admins hoved. Den er synlig, versioneret og gennemgås som enhver anden ændring. Dermed udvandes baseline ikke stille og roligt over månederne, og ved næste audit ligger dokumentationen for, hvordan tenanten er konfigureret, og hvem der ændrede hvad hvornår, allerede klar.",[532,1069,1070],{},"Og vi holder os selv til det, vi kræver af agents. Vores egen automatisering er jo også en ikke-menneskelig identitet. Den logger på kundetenanten via fødererede identiteter, helt uden et gemt secret. Rettighederne er adskilte: én identitet må kun læse og planlægge, en anden må skrive. Ingen adgangskode der kan lækkes, intet certifikat der stille og roligt udløber.",[532,1072,1073],{},"Med agents selv er vi midt i det. Conditional Access, Access Reviews og Entitlement Management kører allerede hos os som kode. Det vi er ved at bygge nu, er agent-skabeloner i repositoryet, med identitet, rettigheder, Conditional Access, ansvarlige og udløbsdato, samt automatiske kontroller for forladte agent-identiteter, for eksempel via Maester-checks fra community'et. Med hundredvis af agents er det forskellen på overblik og håb.",[532,1075,1076,1077,1080,1081,1084],{},"Hvordan ",[588,1078,1079],{"href":303},"Purview"," beskytter de data, agents læser og videregiver, og hvordan vores ",[588,1082,1083],{"href":276},"CSOC"," overvåger deres aktivitet, beskriver vi i en separat artikel om AI-governance.",[577,1086,1088],{"id":1087},"og-agents-i-azure","Og agents i Azure?",[532,1090,583],{},[532,1092,1093,1094,1097,1098,1102],{},"Agent 365 ser også agents, der kører i Microsoft Foundry. Men nogen skal bygge og drive platformen underneath: modeller, netværk, datatilslutning, evaluering. Til det har vi bygget ",[588,1095,1096],{"href":198},"AI Foundation",", fuldstændigt som kode, så ethvert nyt AI-projekt starter med de samme rammer som det forrige. Mere om det står i vores artikel om de tre foundations: ",[588,1099,1101],{"href":1100},"/da/posts/2026-07-06-the-holy-trinity","The Holy Trinity",".",[532,1104,1105],{},"Det vigtigste punkt er forbindelsen nedad. Enhver agent fra AI Foundation får sin egen identitet i det samme Entra som resten af landskabet, med præcis de rettigheder den har brug for. Handler den på vegne af en bruger, ser den kun, hvad den bruger har lov til at se. Og den efterlader et spor, der kan revideres. Ingen særvej med egne konti og egne undtagelser, blot fordi agenten kører i Azure frem for i Microsoft 365.",[577,1107,1109],{"id":1108},"tre-spørgsmål-til-i-morgen-tidlig","Tre spørgsmål til i morgen tidlig",[532,1111,583],{},[532,1113,1114],{},"Den der vil vide, hvor de står, kan begynde med tre spørgsmål:",[1116,1117,1119,1120,1119,1124,1119,1127],"ol",{"style":1118},"margin: 0.25rem 0","\n  ",[1121,1122,1123],"li",{},"Hvilke agents har ingen aktiv ejer eller sponsor længere?",[1121,1125,1126],{},"Hvilke Service Principals har secrets, der er ældre end tolv måneder?",[1121,1128,1129],{},"Hvilke agents tilgår via API-nøgle i stedet for via Entra?",[532,1131,1132],{},"Den der hurtigt kan svare på alle tre, er længere fremme end de fleste.",[577,1134,1136],{"id":1135},"hvor-vi-begynder","Hvor vi begynder",[532,1138,583],{},[532,1140,1141],{},"Med den aktuelle tilstand, for agents er der jo allerede. I vores todages Agent 365 Workshop gør vi det synligt, hvilke agents der kører i jeres tenant, og hvor de kommer fra. Derefter har I et inventar, et risikobillede og en governance-plan med klare ansvarsforhold.",[577,1143,1145],{"id":1144},"konklusion","Konklusion",[532,1147,583],{},[532,1149,1150],{},"E7 tager fat på et reelt problem. At se, hvad der kører, er dog ikke det samme som at have styr på det. Det kræver, at nogen kigger på det hver dag, vedligeholder identiteter, beskærer rettigheder og opdager, når en agent pludselig opfører sig anderledes end dagen før.",[532,1152,1153],{},"Licensen er begyndelsen. Driften afgør det.",[532,1155,1156],{},"Bruger I allerede E7, eller mærker I, at agents begynder at formere sig hos jer, og spørger jer selv, hvem der egentlig holder øje med det? Tag fat i os. Vi kigger sammen på, hvad der kører hos jer, og hvad der bør blive. Microsoft understøtter indgangen via tilskudsprogrammer. Om det passer til jer, afklarer vi i fællesskab.",[557,1158,1159],{},"html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .s7hpK, html code.shiki .s7hpK{--shiki-default:#B31D28;--shiki-default-font-style:italic;--shiki-dark:#FDAEB7;--shiki-dark-font-style:italic}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":536,"searchDepth":537,"depth":537,"links":1161},[1162,1163,1164,1165,1166,1167,1168,1169],{"id":579,"depth":537,"text":580},{"id":597,"depth":537,"text":598},{"id":1028,"depth":537,"text":1029},{"id":1046,"depth":537,"text":1047},{"id":1087,"depth":537,"text":1088},{"id":1108,"depth":537,"text":1109},{"id":1135,"depth":537,"text":1136},{"id":1144,"depth":537,"text":1145},"post",{"lang":1172,"seoTitle":1173,"titleClass":1174,"date":1175,"categories":1176,"blogtitlepic":1178,"socialimg":1179,"customExcerpt":1180,"keywords":1181,"contactInContent":1182,"asideNav":1245,"maxContent":490,"published":325,"scripts":1263},"da","Hvem har bygget disse agents? E7, Agent 365 og spørgsmålet om ansvar","h2-font-size","2026-10-20",[1177],"Security","head-building-ai-agents.jpg","https://res.cloudinary.com/c4a8/image/upload/blog/heads/head-building-ai-agents.jpg","E7 samler E5, Copilot, Entra Suite og Agent 365. Men én licens rydder ikke op i en tenant. Hvem der er ansvarlig for en agent, og hvad den må tilgå, afgøres i driften.","Microsoft 365 E7, Agent 365, Entra Agent ID, Agent Governance, Agent Blueprints, Entra ID Governance, Conditional Access Agents, Shadow AI, Service Principals aufräumen, Defender for Endpoint Local Agents, Advanced Hunting KQL Agents, Managed Entra, Entra ID as Code, Microsoft Foundry Agents, Agent 365 Workshop",{"quote":325,"infos":1183},{"bgColor":1184,"color":1185,"boxBgColor":497,"boxColor":1185,"headline":1186,"subline":1187,"level":577,"textStyling":1188,"flush":1189,"person":1190,"form":1205},"var(--color-gk-dark-blue)","var(--color-gk-white)","Kontakt os nu","Bruger I allerede E7, eller ser I, at agents begynder at formere sig i jeres tenant, og I spørger jer selv, hvem der egentlig holder øje med det? Tag fat i os, så kigger vi sammen på, hvad der kører hos jer, og hvad der bør blive.","text-light","justify-content-end",{"image":1191,"cloudinary":325,"alt":1192,"name":1192,"quotee":1192,"quoteeTitle":1193,"quote":1194,"detailsHeader":1195,"details":1196},"/people/people-alexander-schlindwein.png","Alexander Schlindwein","Workplace Lead","I næsten enhver tenant vi overtager, finder vi Service Principals, som ingen længere ejer. Vi ser præcis det samme ske med agents nu, blot er det i dag enhver fagafdeling, der bygger dem. Derfor behandler vi dem fra starten som enhver anden identitet: med en ansvarlig, klare rettigheder og en udløbsdato, som kode og fuldt sporbart.","Vi glæder os til\u003Cbr />at høre fra jer!",[1197,1201],{"text":498,"href":1198,"details":1199,"icon":1200},"tel:+49 69 4005520","Ring nu","site/phone",{"text":1202,"href":1203,"icon":1204},"sales@glueckkanja.com","mailto:sales@glueckkanja.com","site/mail",{"ctaText":1206,"cta":1207,"method":1170,"action":1209,"fields":1210},"Send",{"skin":1208},"primary on-surface","/send",[1211,1215,1220,1223,1227,1232,1237,1240,1243],{"type":1212,"id":1213,"value":1214},"hidden","_next","successful",{"label":1216,"type":1217,"id":1218,"required":325,"requiredMsg":1219},"Navn*","text","name","Angiv venligst dit navn.",{"label":1221,"type":1217,"id":403,"required":325,"requiredMsg":1222},"Virksomhed*","Angiv venligst din virksomhed.",{"label":1224,"type":1225,"id":1225,"required":325,"requiredMsg":1226},"E-mailadresse*","email","Angiv venligst din e-mailadresse.",{"label":1228,"type":1229,"id":1230,"required":490,"requiredMsg":1231},"Din besked til os","textarea","message","Skriv venligst en besked.",{"label":1233,"type":1234,"id":1235,"required":325,"requiredMsg":1236},"Jeres data gemmes hos os med henblik på at behandle og besvare jeres henvendelse. Yderligere oplysninger om databeskyttelse finder I i vores \u003Ca href=\"/da/privacy\">privatlivspolitik\u003C/a>.","checkbox","dataprotection","Bekræft venligst",{"type":1212,"id":1238,"value":1239},"_subject","Form: Agent 365 Governance | DA",{"type":1212,"id":1241,"value":1242},"inbox_key","default",{"type":1212,"id":1244},"_gotcha",{"menuItems":1246},[1247,1249,1251,1253,1255,1257,1259,1261],{"href":1248,"text":580},"#hvad-en-licens-ikke-kan",{"href":1250,"text":598},"#hvad-registret-viser-og-hvad-det-ikke-viser",{"href":1252,"text":1029},"#agents-har-brug-for-identiteter-ingen-undtagelser",{"href":1254,"text":1047},"#governance-er-en-løbende-opgave",{"href":1256,"text":1088},"#og-agents-i-azure",{"href":1258,"text":1109},"#tre-spørgsmål-til-i-morgen-tidlig",{"href":1260,"text":1136},"#hvor-vi-begynder",{"href":1262,"text":1145},"#konklusion",{"form":325},"/posts/2026-10-20-who-built-these-agents",{"title":552,"description":536},"posts/2026-10-20-who-built-these-agents",[1177,1268,1269,1270,1271],"Microsoft Entra ID","Agent 365","AI","Identity Governance","tbzg3y9oHHsL0QwI813HrEAJQObBMZPe5s6TQhlzwOM",[],{"id":1275,"extension":1276,"meta":1277,"stem":8,"__hash__":1283},"authors_data/authors.json","json",{"Andreas Hötzinger":1278},{"display_name":541,"avatar":1279,"permalink":1280,"linkedin":1281,"imageOffsetTop":1282},"people/at-andreas-hoetzinger.png","/authors/andreas-hoetzinger","andreashoetzinger","75%","ByqFp0GQyhHZsbtcA_HFJk8O1buC5lC502rPVTWDQDs",1792437806407]