[{"data":1,"prerenderedAt":1286},["ShallowReactive",2],{"sc:header-data-en":3,"sc:footer-data-en":492,"author-en-andreas-hoetzinger-149c66be22f8ea":521,"content-en-andreas-hoetzinger":545,"content-events-en-andreas-hoetzinger":1275,"authors_data:Andreas Hötzinger":1276},{"lang":4,"home":5,"navigation":17,"meta":482,"contact":488},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"en":13},{"title":14,"url":15,"alt":16},"Home","/en","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"en":21},{"title":22,"description":23},"Workplace","Microsoft 365-powered for smart, secure, and flexible workspaces, seamlessly integrating cutting-edge technologies and identity services.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"en":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"en":34},{"title":35,"url":36},"Managed Intune","/en/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"en":40},{"title":41,"url":42},"Managed Entra","/en/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"en":46},{"title":47,"url":48},"Managed Workplace","/en/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"en":52},{"title":53,"url":54},"Consulting Services","/en/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"en":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"en":64},{"title":65,"url":66},"Microsoft Entra Suite","/en/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"en":70},{"title":71,"url":72},"Microsoft Intune","/en/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"en":76},{"title":77,"url":78},"Microsoft Windows","/en/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"en":82},{"title":83,"url":84},"Windows 365 Cloud PC","/en/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"en":88},{"title":89,"url":90},"Cloud Workplace Foundation","/en/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"en":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"en":100},{"title":101,"url":102},"Microsoft 365 Copilot","/en/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"en":106},{"title":107,"url":108},"Teams","/en/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"en":112},{"title":113,"url":114},"SharePoint & Power Platform","/en/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"en":118},{"title":119,"url":120},"Exchange Online","/en/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"en":124},{"title":125,"url":126},"Information Protection & Compliance","/en/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"en":130},{"title":131,"description":132},"Azure","Fuel growth with Azure: Cut cloud costs, boost efficiency, and drive innovation through IaaS and PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"en":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"en":142},{"title":143,"url":144},"Azure Managed Services","/en/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"en":148},{"title":149,"url":150},"Azure Consulting","/en/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"en":154},{"title":155},"Scenarios",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"en":160},{"title":161,"url":162},"Plan your Cloud","/en/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"en":166},{"title":167,"url":168},"Migrate to the cloud","/en/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"en":172},{"title":173,"url":174},"Innovate your business","/en/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"en":178},{"title":179,"url":180},"Rethink your VMware strategy","/en/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"en":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"en":190},{"title":191,"url":192},"Azure Foundation","/en/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"en":196},{"title":197,"url":198},"Azure AI Foundation","/en/azure/azure-ai-foundation",{"name":86,"languages":200},{"en":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"en":205},{"title":206,"url":207},"Azure Data Foundation","/en/azure/azure-data-foundation",{"name":188,"languages":209},{"en":210},{"title":211,"url":212},"Azure Container Foundation","/en/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"en":216},{"title":217,"url":218},"Managed Dark Tenant","/en/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"en":222},{"title":223,"url":224},"Cloud Adoption Framework","/en/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"en":228},{"title":229,"url":230},"Cloud Competence Center","/en/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"en":234},{"title":235,"description":236,"emergency":237},"Security","Vigilance in the cloud with an award-winning 24/7 managed service, incident response and state-of-the-art protection for your infrastructure.",{"text":238,"href":239,"skin":240,"icon":241},"Under Attack?","/en/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"en":249},{"title":250,"url":251},"Managed Red Tenant","/en/security/managed-red-tenant",{"name":214,"languages":253},{"en":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"en":259},{"title":260,"url":261},"Sentinel Data Lake","/en/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"en":265},{"title":266,"url":267},"Security Consulting","/en/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"en":274},{"title":275,"url":276},"Cloud Security Operations Center","/en/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"en":280},{"title":281,"url":282},"Global Secure Access","/en/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"en":286},{"title":287,"url":288},"MyWorkID","/en/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"en":295},{"title":296,"url":297},"Preventive Services","/en/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"en":301},{"title":302,"url":303},"Data Security Service","/en/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"en":307},{"title":308,"url":309},"Security Copilot Agents","/en/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"en":313},{"title":314,"url":315},"Implementing NIS2","/en/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"en":319},{"title":320,"description":321},"Products","Innovative companion products for a completely secure, 100% cloud-native Microsoft environment that enhance collaboration, network authentication and software management.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"en":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Cloudbased Software distribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"en":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certificate distribution from the cloud",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"en":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Work with your local office 365 data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"en":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrate your data from one server to another",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"en":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider for Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"en":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Authentication for your network",{"name":380,"img":381,"target":330,"languages":382},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"en":383},{"title":384,"url":385,"subtitle":386},"Autopilot Monitor","https://www.autopilotmonitor.com","Real-time Windows Autopilot monitoring",{"name":388,"img":389,"target":330,"languages":390},"sendman","products/sendman/Sendman-nav-logo.svg",{"en":391},{"title":392,"url":393,"subtitle":394},"Sendman","https://www.sendman.com","The SMTP relay for Microsoft 365",{"name":396,"languages":397},"casestudies",{"en":398},{"title":399,"url":400,"description":401},"Case Studies","/en/casestudies","Pioneer in the Cloud: Your top Microsoft partner for comprehensive cloud solutions with a Blueprint-based approach and Infrastructure-as-Code expertise.",{"name":403,"languages":404,"children":407},"company",{"en":405},{"title":406,"description":401},"Company",[408,444,465],{"name":409,"languages":410,"children":413},"company-about-us",{"en":411},{"title":412},"About us",[414,420,426,432,438],{"name":415,"languages":416},"company-facts-figures",{"en":417},{"title":418,"url":419},"Facts & Figures","/en/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"en":423},{"title":424,"url":425},"Contact & Locations","/en/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"en":429},{"title":430,"url":431}," glueckkanja Switzerland","/en/company/switzerland",{"name":433,"languages":434},"austria",{"en":435},{"title":436,"url":437},"glueckkanja Austria","/en/company/austria",{"name":439,"languages":440},"spain",{"en":441},{"title":442,"url":443},"glueckkanja Spain","/en/company/spain",{"name":445,"languages":446,"children":449},"company-career",{"en":447},{"title":448},"Career",[450,456,459],{"name":451,"languages":452},"company-career-overview",{"en":453},{"title":454,"url":455},"Career overview","/en/career",{"name":457,"languages":458},"company-young-professionals",{},{"name":460,"languages":461},"company-jobs",{"en":462},{"title":463,"url":464},"Job offers","/en/job-offers",{"name":466,"languages":467,"children":470},"company-latest",{"en":468},{"title":469},"Latest",[471,477],{"name":472,"languages":473},"company-blog",{"en":474},{"title":475,"url":476},"Blog","/en/blog",{"name":472,"languages":478},{"en":479},{"title":480,"url":481},"Events","/en/events",[483],{"name":484,"languages":485},"career-meta",{"en":486},{"title":448,"url":455,"active":487},false,{"languages":489},{"en":490},{"title":491,"url":425,"active":487},"Contact",{"data":493},{"bgColor":494,"number":495,"mail":496,"brandLogos":497,"logos":498,"links":502,"linksEn":512},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[499],{"img":10,"alt":16,"url":500,"class":501},"index.html","max-w-19rem",[503,506,509],{"title":504,"url":505},"Datenschutz","/de/privacy",{"title":507,"url":508},"Impressum","/de/imprint",{"title":510,"url":511},"No Cookies","/de/cookies",[513,516,519],{"title":514,"url":515},"Privacy","/en/privacy",{"title":517,"url":518},"Imprint","/en/imprint",{"title":510,"url":520},"/en/cookies",{"id":522,"title":523,"body":524,"description":530,"extension":535,"meta":536,"name":537,"navigation":325,"otherLanguages":538,"path":541,"seo":542,"stem":543,"__hash__":544},"authors/andreas-hoetzinger.md","Andreas Hoetzinger",{"type":525,"value":526,"toc":531},"minimal",[527],[528,529,530],"p",{},"Als Head of Partner Alliances verantwortet Andreas Hötzinger die Partnerschaft von glueckkanja mit Microsoft und das Partnernetzwerk darum herum. Er bringt Microsoft-Programme, Förderangebote und Kundenprojekte zusammen, damit aus Lizenzen und Partnerstatus konkrete Vorhaben werden.",{"title":532,"searchDepth":533,"depth":533,"links":534},"",2,[],"md",{},"Andreas Hötzinger",{"en":539,"es":540},"As Head of Partner Alliances, Andreas Hötzinger is responsible for glueckkanja's partnership with Microsoft and for the partner network around it. He brings Microsoft programs, funding offers and customer projects together so that licenses and partner status turn into concrete projects.","Como Head of Partner Alliances, Andreas Hötzinger es responsable de la colaboración de glueckkanja con Microsoft y de la red de partners que la rodea. Conecta los programas de Microsoft, las ofertas de financiación y los proyectos de clientes para que licencias y estatus de partner se conviertan en proyectos concretos.","/andreas-hoetzinger",{"title":523,"description":530},"andreas-hoetzinger","Hm1EMUQv3yhNUPB9iGHy-G0nPLSrHscxQ-3P4JhWDgQ",[546],{"id":547,"title":548,"author":549,"body":550,"cta":497,"description":532,"eventid":497,"extension":535,"hideInRecent":487,"layout":1166,"meta":1167,"moment":1171,"navigation":325,"path":1266,"seo":1267,"stem":1268,"tags":1269,"webcast":487,"__hash__":1274},"content_en/posts/2026-10-20-who-built-these-agents.md","Who Built These Agents?",[537],{"type":525,"value":551,"toc":1156},[552,556,572,577,580,588,591,595,597,600,603,873,876,879,1013,1016,1019,1022,1026,1028,1031,1034,1037,1040,1044,1046,1049,1055,1058,1061,1064,1067,1070,1081,1085,1087,1099,1102,1106,1108,1111,1126,1129,1133,1135,1138,1142,1144,1147,1150,1153],[553,554,555],"style",{},"\n/* The Kusto grammar marks parse_json as deprecated (red, italic). The function is current, so render it neutrally. */\nhtml .richtext pre.shiki code .s7hpK{--shiki-default:#24292e;--shiki-default-font-style:normal;--shiki-dark:#e1e4e8;--shiki-dark-font-style:normal}\n",[528,557,558,559,563,564,567,568,571],{},"In a customer tenant with ",[560,561,562],"span",{},"3,000"," users, our first inventory turned up ",[560,565,566],{},"280"," agents. ",[560,569,570],{},"170"," of them had no owner still at the company. Nobody malicious built them; they were built by business units that needed a quick fix. That is exactly how service principals came into being ten years ago, and nobody has cleaned those up either. Agents are repeating the pattern, just faster and at greater scale.",[573,574,576],"h2",{"id":575},"what-a-license-cant-do","What a License Can't Do",[528,578,579],{},"{: .h3-font-size}",[528,581,582,583,587],{},"E7 bundles E5, Copilot, the ",[584,585,586],"a",{"href":66},"Entra Suite"," and Agent 365. What is included in the package has been covered extensively elsewhere. A license does not clean up your tenant. It gives you the tools to see, identify and control agents. Whether a given agent should exist, who is accountable for it and what it is allowed to access are not questions a license answers.",[528,589,590],{},"Add to that the pace. Agents are being created today in the same places Excel macros used to be: inside business units, quickly and without a ticket. That is intentional, and we think it is the right way. It does mean, however, that the number of non-human accounts in the directory is growing faster than any other category.",[573,592,594],{"id":593},"what-the-registry-shows-and-what-it-doesnt","What the Registry Shows and What It Doesn't",[528,596,579],{},[528,598,599],{},"Agent 365 collects agents from Microsoft 365, Copilot Studio, Power Platform and Foundry in one place. Defender for Endpoint additionally finds locally installed AI agents on endpoints, including configured MCP servers. Both land in Advanced Hunting and can be evaluated together with KQL. Shadow AI in the most literal sense.",[528,601,602],{},"This query shows which agents are actually being invoked and which tools they use in the process:",[604,605,607],"div",{"style":606},"background: var(--color-bg-grey); border-radius: 6px; padding: 1rem; margin: 0.25rem 0",[608,609,613],"pre",{"className":610,"code":611,"language":612,"meta":532,"style":532},"language-kusto shiki shiki-themes github-light github-dark","CloudAppEvents\n| where ActionType in (\"InvokeAgent\", \"InferenceCall\", \"ExecuteToolBySDK\", \"ExecuteToolByGateway\")\n| extend RawEventData_parsed = parse_json(RawEventData)\n| extend\n    Workload          = coalesce(tostring(RawEventData_parsed[\"Workload\"]), \"Unknown\"),\n    TargetAgentName   = coalesce(tostring(RawEventData_parsed[\"TargetAgentName\"]), \"Unknown\"),\n    AgentName         = coalesce(tostring(RawEventData_parsed[\"AgentName\"]), \"Unknown\"),\n    AgentBlueprintId  = coalesce(tostring(RawEventData_parsed[\"AgentBlueprintId\"]), \"Unknown\"),\n    PlatformAgentType = coalesce(\n        tostring(RawEventData_parsed[\"PlatformAgentType\"]),\n        tostring(RawEventData_parsed[\"CopilotEventData\"][\"PlatformAgentType\"]),\n        \"Unknown\"\n    )\n| project-away RawEventData_parsed\n| summarize count() by ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n","kusto",[614,615,616,624,665,683,691,722,745,768,791,802,816,833,839,845,856],"code",{"__ignoreMap":532},[560,617,620],{"class":618,"line":619},"line",1,[560,621,623],{"class":622},"sVt8B","CloudAppEvents\n",[560,625,626,629,633,636,639,642,646,649,652,654,657,659,662],{"class":618,"line":533},[560,627,628],{"class":622},"| ",[560,630,632],{"class":631},"szBVR","where",[560,634,635],{"class":622}," ActionType ",[560,637,638],{"class":631},"in",[560,640,641],{"class":622}," (",[560,643,645],{"class":644},"sZZnC","\"InvokeAgent\"",[560,647,648],{"class":622},", ",[560,650,651],{"class":644},"\"InferenceCall\"",[560,653,648],{"class":622},[560,655,656],{"class":644},"\"ExecuteToolBySDK\"",[560,658,648],{"class":622},[560,660,661],{"class":644},"\"ExecuteToolByGateway\"",[560,663,664],{"class":622},")\n",[560,666,668,670,673,676,680],{"class":618,"line":667},3,[560,669,628],{"class":622},[560,671,672],{"class":631},"extend",[560,674,675],{"class":622}," RawEventData_parsed = ",[560,677,679],{"class":678},"s7hpK","parse_json",[560,681,682],{"class":622},"(RawEventData)\n",[560,684,686,688],{"class":618,"line":685},4,[560,687,628],{"class":622},[560,689,690],{"class":631},"extend\n",[560,692,694,697,701,704,707,710,713,716,719],{"class":618,"line":693},5,[560,695,696],{"class":622},"    Workload          = ",[560,698,700],{"class":699},"sj4cs","coalesce",[560,702,703],{"class":622},"(",[560,705,706],{"class":699},"tostring",[560,708,709],{"class":622},"(RawEventData_parsed[",[560,711,712],{"class":644},"\"Workload\"",[560,714,715],{"class":622},"]), ",[560,717,718],{"class":644},"\"Unknown\"",[560,720,721],{"class":622},"),\n",[560,723,725,728,730,732,734,736,739,741,743],{"class":618,"line":724},6,[560,726,727],{"class":622},"    TargetAgentName   = ",[560,729,700],{"class":699},[560,731,703],{"class":622},[560,733,706],{"class":699},[560,735,709],{"class":622},[560,737,738],{"class":644},"\"TargetAgentName\"",[560,740,715],{"class":622},[560,742,718],{"class":644},[560,744,721],{"class":622},[560,746,748,751,753,755,757,759,762,764,766],{"class":618,"line":747},7,[560,749,750],{"class":622},"    AgentName         = ",[560,752,700],{"class":699},[560,754,703],{"class":622},[560,756,706],{"class":699},[560,758,709],{"class":622},[560,760,761],{"class":644},"\"AgentName\"",[560,763,715],{"class":622},[560,765,718],{"class":644},[560,767,721],{"class":622},[560,769,771,774,776,778,780,782,785,787,789],{"class":618,"line":770},8,[560,772,773],{"class":622},"    AgentBlueprintId  = ",[560,775,700],{"class":699},[560,777,703],{"class":622},[560,779,706],{"class":699},[560,781,709],{"class":622},[560,783,784],{"class":644},"\"AgentBlueprintId\"",[560,786,715],{"class":622},[560,788,718],{"class":644},[560,790,721],{"class":622},[560,792,794,797,799],{"class":618,"line":793},9,[560,795,796],{"class":622},"    PlatformAgentType = ",[560,798,700],{"class":699},[560,800,801],{"class":622},"(\n",[560,803,805,808,810,813],{"class":618,"line":804},10,[560,806,807],{"class":699},"        tostring",[560,809,709],{"class":622},[560,811,812],{"class":644},"\"PlatformAgentType\"",[560,814,815],{"class":622},"]),\n",[560,817,819,821,823,826,829,831],{"class":618,"line":818},11,[560,820,807],{"class":699},[560,822,709],{"class":622},[560,824,825],{"class":644},"\"CopilotEventData\"",[560,827,828],{"class":622},"][",[560,830,812],{"class":644},[560,832,815],{"class":622},[560,834,836],{"class":618,"line":835},12,[560,837,838],{"class":644},"        \"Unknown\"\n",[560,840,842],{"class":618,"line":841},13,[560,843,844],{"class":622},"    )\n",[560,846,848,850,853],{"class":618,"line":847},14,[560,849,628],{"class":622},[560,851,852],{"class":631},"project-away",[560,854,855],{"class":622}," RawEventData_parsed\n",[560,857,859,861,864,867,870],{"class":618,"line":858},15,[560,860,628],{"class":622},[560,862,863],{"class":631},"summarize",[560,865,866],{"class":699}," count()",[560,868,869],{"class":631}," by",[560,871,872],{"class":622}," ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n",[528,874,875],{},"One caveat applies: this query only shows part of the picture, primarily Microsoft-native agents and agents built on Microsoft platforms. Whatever is running alongside those is not visible here.",[528,877,878],{},"For local agents on endpoints, Defender for Endpoint Plan 2 is sufficient:",[604,880,881],{"style":606},[608,882,884],{"className":610,"code":883,"language":612,"meta":532,"style":532},"AgentsInfo\n| where Platform == \"LocalAgents\"\n| summarize arg_max(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) by AgentId\n| where LifecycleStatus !in~ (\"Deleted\", \"Uninstalled\")\n| extend AgentMetadata = RawAgentInfo.localAgentMetadata\n| extend Vendor = tostring(AgentMetadata.vendor),\n         Device = tostring(AgentMetadata.deviceName)\n| summarize DeviceCount = dcount(Device) by Agent = Name, Vendor\n| sort by DeviceCount desc\n",[614,885,886,891,903,921,945,954,968,978,998],{"__ignoreMap":532},[560,887,888],{"class":618,"line":619},[560,889,890],{"class":622},"AgentsInfo\n",[560,892,893,895,897,900],{"class":618,"line":533},[560,894,628],{"class":622},[560,896,632],{"class":631},[560,898,899],{"class":622}," Platform == ",[560,901,902],{"class":644},"\"LocalAgents\"\n",[560,904,905,907,909,912,915,918],{"class":618,"line":667},[560,906,628],{"class":622},[560,908,863],{"class":631},[560,910,911],{"class":699}," arg_max",[560,913,914],{"class":622},"(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) ",[560,916,917],{"class":631},"by",[560,919,920],{"class":622}," AgentId\n",[560,922,923,925,927,930,933,935,938,940,943],{"class":618,"line":685},[560,924,628],{"class":622},[560,926,632],{"class":631},[560,928,929],{"class":622}," LifecycleStatus ",[560,931,932],{"class":631},"!in~",[560,934,641],{"class":622},[560,936,937],{"class":644},"\"Deleted\"",[560,939,648],{"class":622},[560,941,942],{"class":644},"\"Uninstalled\"",[560,944,664],{"class":622},[560,946,947,949,951],{"class":618,"line":693},[560,948,628],{"class":622},[560,950,672],{"class":631},[560,952,953],{"class":622}," AgentMetadata = RawAgentInfo.localAgentMetadata\n",[560,955,956,958,960,963,965],{"class":618,"line":724},[560,957,628],{"class":622},[560,959,672],{"class":631},[560,961,962],{"class":622}," Vendor = ",[560,964,706],{"class":699},[560,966,967],{"class":622},"(AgentMetadata.vendor),\n",[560,969,970,973,975],{"class":618,"line":747},[560,971,972],{"class":622},"         Device = ",[560,974,706],{"class":699},[560,976,977],{"class":622},"(AgentMetadata.deviceName)\n",[560,979,980,982,984,987,990,993,995],{"class":618,"line":770},[560,981,628],{"class":622},[560,983,863],{"class":631},[560,985,986],{"class":622}," DeviceCount = ",[560,988,989],{"class":699},"dcount",[560,991,992],{"class":622},"(Device) ",[560,994,917],{"class":631},[560,996,997],{"class":622}," Agent = Name, Vendor\n",[560,999,1000,1002,1005,1007,1010],{"class":618,"line":793},[560,1001,628],{"class":622},[560,1003,1004],{"class":631},"sort",[560,1006,869],{"class":631},[560,1008,1009],{"class":622}," DeviceCount ",[560,1011,1012],{"class":631},"desc\n",[528,1014,1015],{},"An agent acting on behalf of a user inherits that user's permissions. If that user has access to a SharePoint library that is shared far too broadly, so does the agent. The difference is that the agent is faster and more thorough than any human.",[528,1017,1018],{},"An autonomous agent with its own identity works with its own permissions. It needs someone accountable for it, a clean permission profile and an expiration date, just like any other account that touches company data.",[528,1020,1021],{},"The registry shows what is there. Whether it should be there is a judgment call, and that judgment is never finished.",[573,1023,1025],{"id":1024},"agents-need-identities-no-exceptions","Agents Need Identities, No Exceptions",[528,1027,579],{},[528,1029,1030],{},"Agents built with Entra Agent ID get their own managed identity. Agent Blueprints let you define how an agent is built and what permissions it receives before it even exists. And with Entra ID Governance, access reviews and lifecycle management apply to agents as well: create, approve, assign owners, review regularly, let expire.",[528,1032,1033],{},"Conditional Access can be applied to agent identities and blueprints, but not in the same way as for users. Policies scoped to \"all users\" do not cover agent accounts, and anything authenticating via API key bypasses Entra entirely. You need to know these gaps before you rely on the policy.",[528,1035,1036],{},"That sounds obvious. In practice it rarely is. We already see in many tenants how difficult this is with classic app registrations and service principals: orphaned secrets, permissions left over from some test phase, owners who moved on long ago. Agents don't improve this, because they are being created in larger numbers by far more people.",[528,1038,1039],{},"Organizations that don't have their service principals under control today will not have their agents under control tomorrow.",[573,1041,1043],{"id":1042},"governance-is-ongoing-work","Governance Is Ongoing Work",[528,1045,579],{},[528,1047,1048],{},"New agents arrive every week. Owners change roles or leave. Permissions creep upward, Conditional Access rules accumulate exceptions, and nobody maintains the sensitivity labels. None of this is a project with a go-live date; it is operations.",[528,1050,1051,1052,1054],{},"That is exactly how we approach it. With ",[584,1053,41],{"href":42}," we run Entra ID for our customers entirely as code. That sounds like a technical detail, but it is the actual reason operations stays reliable.",[528,1056,1057],{},"Many organizations have a clean change process following ITIL. The ticket describes what should be changed, then someone clicks through the portal. But who verifies that exactly that change was made and nothing else?",[528,1059,1060],{},"With us, it is not the description that gets reviewed but the change itself. The rules exist as code. Before anything happens, it is clear in black and white what will change. A second person approves exactly that, and only that is deployed, with a name and a date attached. If something goes wrong anyway, the last working state is restored in minutes, not during a night shift.",[528,1062,1063],{},"Exceptions follow the same path. If a customer needs a deviation from the standard, it lives in the repository, not in a spreadsheet or in an admin's memory. It is visible, versioned and reviewed like any other change. That way the baseline does not quietly erode over the months, and at the next audit the full record of how the tenant is configured and who changed what and when is already there.",[528,1065,1066],{},"We also hold ourselves to the same standards we require of agents. Our own automation is a non-human identity too. It authenticates to the customer tenant using federated credentials, with no stored secret. The permissions are separated: one identity may only read and plan, another may write. No password that can leak, no certificate that silently expires.",[528,1068,1069],{},"On the agent side we are in the middle of building this out. Conditional Access, access reviews and entitlement management already run as code for us today. What we are currently building are agent templates in the repository, complete with identity, permissions, Conditional Access, owners and expiration dates, along with automated checks for orphaned agent identities using Maester checks from the community, among other things. With hundreds of agents, that is the difference between visibility and hope.",[528,1071,1072,1073,1076,1077,1080],{},"How ",[584,1074,1075],{"href":303},"Purview"," protects the data that agents read and pass on, and how our ",[584,1078,1079],{"href":276},"CSOC"," monitors their activity, we cover in a separate article on AI governance.",[573,1082,1084],{"id":1083},"what-about-agents-in-azure","What About Agents in Azure?",[528,1086,579],{},[528,1088,1089,1090,1093,1094,1098],{},"Agent 365 also sees agents running in Microsoft Foundry. But someone has to build and operate the platform underneath: models, networking, data connectivity, evaluation. That is what we built the ",[584,1091,1092],{"href":198},"AI Foundation"," for, entirely as code, so every new AI project starts with the same guardrails as the last one. More on that in our article on the three foundations: ",[584,1095,1097],{"href":1096},"/en/posts/2026-07-06-the-holy-trinity","The Holy Trinity",".",[528,1100,1101],{},"The most important point is the connection downward. Every agent from the AI Foundation gets its own identity in the same Entra as the rest of the environment, with exactly the permissions it needs. When it acts on behalf of a user, it sees only what that user is allowed to see. And it leaves a trail that can be audited. No special path with its own accounts and its own exceptions just because the agent runs in Azure rather than Microsoft 365.",[573,1103,1105],{"id":1104},"three-questions-for-tomorrow-morning","Three Questions for Tomorrow Morning",[528,1107,579],{},[528,1109,1110],{},"Anyone who wants to know where they stand can start with three questions:",[1112,1113,1115,1116,1115,1120,1115,1123],"ol",{"style":1114},"margin: 0.25rem 0","\n  ",[1117,1118,1119],"li",{},"Which agents no longer have an active owner or sponsor?",[1117,1121,1122],{},"Which service principals have secrets older than twelve months?",[1117,1124,1125],{},"Which agents authenticate via API key instead of through Entra?",[528,1127,1128],{},"Anyone who can answer all three quickly is ahead of most.",[573,1130,1132],{"id":1131},"where-we-start","Where We Start",[528,1134,579],{},[528,1136,1137],{},"With the current state, because the agents are already there. In our two-day Agent 365 Workshop we make visible which agents are running in your tenant and where they came from. You leave with an inventory, a risk picture and a governance plan with clear ownership.",[573,1139,1141],{"id":1140},"conclusion","Conclusion",[528,1143,579],{},[528,1145,1146],{},"E7 addresses a real problem. Seeing what is running, though, is not the same as having it under control. That requires someone looking every day, maintaining identities, trimming permissions and noticing when an agent suddenly behaves differently than it did yesterday.",[528,1148,1149],{},"The license is the starting point. Operations is what decides.",[528,1151,1152],{},"Already running E7, or noticing agents multiplying in your tenant and wondering who is actually keeping an eye on it? Get in touch. We will look together at what is running and what should stay. Microsoft supports the initial engagement through funding programs. We can clarify together whether that applies to your situation.",[553,1154,1155],{},"html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .s7hpK, html code.shiki .s7hpK{--shiki-default:#B31D28;--shiki-default-font-style:italic;--shiki-dark:#FDAEB7;--shiki-dark-font-style:italic}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":532,"searchDepth":533,"depth":533,"links":1157},[1158,1159,1160,1161,1162,1163,1164,1165],{"id":575,"depth":533,"text":576},{"id":593,"depth":533,"text":594},{"id":1024,"depth":533,"text":1025},{"id":1042,"depth":533,"text":1043},{"id":1083,"depth":533,"text":1084},{"id":1104,"depth":533,"text":1105},{"id":1131,"depth":533,"text":1132},{"id":1140,"depth":533,"text":1141},"post",{"lang":1168,"seoTitle":1169,"titleClass":1170,"date":1171,"categories":1172,"blogtitlepic":1173,"socialimg":1174,"customExcerpt":1175,"keywords":1176,"contactInContent":1177,"asideNav":1240,"maxContent":487,"published":325,"scripts":1265},"en","Who Built These Agents? E7, Agent 365 and the Question of Accountability","h2-font-size","2026-10-20",[235],"head-building-ai-agents.jpg","https://res.cloudinary.com/c4a8/image/upload/blog/heads/head-building-ai-agents.jpg","E7 bundles E5, Copilot, the Entra Suite and Agent 365. But a license doesn't clean up your tenant. Who is accountable for an agent and what it can access is a decision for operations, not procurement.","Microsoft 365 E7, Agent 365, Entra Agent ID, Agent Governance, Agent Blueprints, Entra ID Governance, Conditional Access Agents, Shadow AI, Service Principals aufräumen, Defender for Endpoint Local Agents, Advanced Hunting KQL Agents, Managed Entra, Entra ID as Code, Microsoft Foundry Agents, Agent 365 Workshop",{"quote":325,"infos":1178},{"bgColor":1179,"color":1180,"boxBgColor":494,"boxColor":1180,"headline":1181,"subline":1182,"level":573,"textStyling":1183,"flush":1184,"person":1185,"form":1200},"var(--color-gk-dark-blue)","var(--color-gk-white)","Get in Touch","Already running E7, or noticing that agents are multiplying in your tenant and wondering who's keeping track? Reach out and we'll take a look together at what's running and what should stay.","text-light","justify-content-end",{"image":1186,"cloudinary":325,"alt":1187,"name":1187,"quotee":1187,"quoteeTitle":1188,"quote":1189,"detailsHeader":1190,"details":1191},"/people/people-alexander-schlindwein.png","Alexander Schlindwein","Workplace Lead","In almost every tenant we take over, we find service principals that nobody owns anymore. We're watching the same thing happen with agents right now, except every department is building them. That's why we treat them like any other identity from day one: with a clear owner, defined permissions, an expiration date, managed as code, and fully auditable.","We look forward to\u003Cbr />hearing from you!",[1192,1196],{"text":495,"href":1193,"details":1194,"icon":1195},"tel:+49 69 4005520","Call us now","site/phone",{"text":1197,"href":1198,"icon":1199},"sales@glueckkanja.com","mailto:sales@glueckkanja.com","site/mail",{"ctaText":1201,"cta":1202,"method":1166,"action":1204,"fields":1205},"Submit",{"skin":1203},"primary on-surface","/send",[1206,1210,1215,1218,1222,1227,1232,1235,1238],{"type":1207,"id":1208,"value":1209},"hidden","_next","successful",{"label":1211,"type":1212,"id":1213,"required":325,"requiredMsg":1214},"Name*","text","name","Please enter your name.",{"label":1216,"type":1212,"id":403,"required":325,"requiredMsg":1217},"Company*","Please enter your company.",{"label":1219,"type":1220,"id":1220,"required":325,"requiredMsg":1221},"Email address*","email","Please enter your email address.",{"label":1223,"type":1224,"id":1225,"required":487,"requiredMsg":1226},"Your message","textarea","message","Please enter a message.",{"label":1228,"type":1229,"id":1230,"required":325,"requiredMsg":1231},"Your data will be stored to process and respond to your inquiry. For more information on data protection, please see our \u003Ca href=\"/en/privacy\">Privacy Policy\u003C/a>.","checkbox","dataprotection","Please confirm",{"type":1207,"id":1233,"value":1234},"_subject","Form: Agent 365 Governance | EN",{"type":1207,"id":1236,"value":1237},"inbox_key","default",{"type":1207,"id":1239},"_gotcha",{"menuItems":1241},[1242,1245,1248,1251,1254,1257,1260,1263],{"href":1243,"text":1244},"#what-a-license-cant-do","What a license can't do",{"href":1246,"text":1247},"#what-the-registry-shows-and-what-it-doesnt","What the registry shows and what it doesn't",{"href":1249,"text":1250},"#agents-need-identities-no-exceptions","Agents need identities, no exceptions",{"href":1252,"text":1253},"#governance-is-ongoing-work","Governance is ongoing work",{"href":1255,"text":1256},"#what-about-agents-in-azure","What about agents in Azure?",{"href":1258,"text":1259},"#three-questions-for-tomorrow-morning","Three questions for tomorrow morning",{"href":1261,"text":1262},"#where-we-start","Where we start",{"href":1264,"text":1141},"#conclusion",{"form":325},"/posts/2026-10-20-who-built-these-agents",{"title":548,"description":532},"posts/2026-10-20-who-built-these-agents",[235,1270,1271,1272,1273],"Microsoft Entra ID","Agent 365","AI","Identity Governance","QqsvJEa5FijLXeUDxBfensyFDLXVdRZgJa5F28GtCO8",[],{"id":1277,"extension":1278,"meta":1279,"stem":8,"__hash__":1285},"authors_data/authors.json","json",{"Andreas Hötzinger":1280},{"display_name":537,"avatar":1281,"permalink":1282,"linkedin":1283,"imageOffsetTop":1284},"people/at-andreas-hoetzinger.png","/authors/andreas-hoetzinger","andreashoetzinger","75%","ByqFp0GQyhHZsbtcA_HFJk8O1buC5lC502rPVTWDQDs",1792437806058]