[{"data":1,"prerenderedAt":1283},["ShallowReactive",2],{"sc:header-data-nl":3,"sc:footer-data-nl":495,"author-nl-andreas-hoetzinger-149c66be22f8ea":525,"content-nl-andreas-hoetzinger":549,"content-events-nl-andreas-hoetzinger":1272,"authors_data:Andreas Hötzinger":1273},{"lang":4,"home":5,"navigation":17,"meta":485,"contact":491},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"nl":13},{"title":14,"url":15,"alt":16},"Home","/nl","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"nl":21},{"title":22,"description":23},"Workplace","Slimme, veilige en flexibele werkplekken op basis van Microsoft 365, waarin moderne technologie en identiteitsdiensten samenkomen.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"nl":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"nl":34},{"title":35,"url":36},"Managed Intune","/nl/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"nl":40},{"title":41,"url":42},"Managed Entra","/nl/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"nl":46},{"title":47,"url":48},"Managed Workplace","/nl/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"nl":52},{"title":53,"url":54},"Consulting Services","/nl/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"nl":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"nl":64},{"title":65,"url":66},"Microsoft Entra Suite","/nl/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"nl":70},{"title":71,"url":72},"Microsoft Intune","/nl/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"nl":76},{"title":77,"url":78},"Microsoft Windows","/nl/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"nl":82},{"title":83,"url":84},"Windows 365 Cloud PC","/nl/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"nl":88},{"title":89,"url":90},"Cloud Workplace Foundation","/nl/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"nl":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"nl":100},{"title":101,"url":102},"Microsoft 365 Copilot","/nl/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"nl":106},{"title":107,"url":108},"Teams","/nl/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"nl":112},{"title":113,"url":114},"SharePoint & Power Platform","/nl/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"nl":118},{"title":119,"url":120},"Exchange Online","/nl/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"nl":124},{"title":125,"url":126},"Information Protection & Compliance","/nl/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"nl":130},{"title":131,"description":132},"Azure","Groeien met Azure: lagere cloudkosten, meer efficiëntie en ruimte voor innovatie met IaaS en PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"nl":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"nl":142},{"title":143,"url":144},"Azure Managed Services","/nl/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"nl":148},{"title":149,"url":150},"Azure Consulting","/nl/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"nl":154},{"title":155},"Scenario's",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"nl":160},{"title":161,"url":162},"Plan je cloud","/nl/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"nl":166},{"title":167,"url":168},"Migreren naar de cloud","/nl/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"nl":172},{"title":173,"url":174},"Vernieuw je business","/nl/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"nl":178},{"title":179,"url":180},"Herzie je VMware-strategie","/nl/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"nl":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"nl":190},{"title":191,"url":192},"Azure Foundation","/nl/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"nl":196},{"title":197,"url":198},"Azure AI Foundation","/nl/azure/azure-ai-foundation",{"name":86,"languages":200},{"nl":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"nl":205},{"title":206,"url":207},"Azure Data Foundation","/nl/azure/azure-data-foundation",{"name":188,"languages":209},{"nl":210},{"title":211,"url":212},"Azure Container Foundation","/nl/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"nl":216},{"title":217,"url":218},"Managed Dark Tenant","/nl/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"nl":222},{"title":223,"url":224},"Cloud Adoption Framework","/nl/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"nl":228},{"title":229,"url":230},"Cloud Competence Center","/nl/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"nl":234},{"title":235,"description":236,"emergency":237},"Security","Waakzaam in de cloud met een bekroonde 24/7 managed service, incident response en moderne bescherming van je infrastructuur.",{"text":238,"href":239,"skin":240,"icon":241},"Onder aanval?","/nl/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"nl":249},{"title":250,"url":251},"Managed Red Tenant","/nl/security/managed-red-tenant",{"name":214,"languages":253},{"nl":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"nl":259},{"title":260,"url":261},"Sentinel Data Lake","/nl/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"nl":265},{"title":266,"url":267},"Security Consulting","/nl/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"nl":274},{"title":275,"url":276},"Cloud Security Operations Center","/nl/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"nl":280},{"title":281,"url":282},"Global Secure Access","/nl/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"nl":286},{"title":287,"url":288},"MyWorkID","/nl/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"nl":295},{"title":296,"url":297},"Preventive Services","/nl/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"nl":301},{"title":302,"url":303},"Data Security Service","/nl/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"nl":307},{"title":308,"url":309},"Security Copilot Agents","/nl/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"nl":313},{"title":314,"url":315},"NIS2 implementeren","/nl/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"nl":319},{"title":320,"description":321},"Producten","Companion-producten voor een volledig beveiligde, 100% cloud-native Microsoft-omgeving die samenwerking, netwerkauthenticatie en softwarebeheer versterken.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"nl":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Softwaredistributie vanuit de cloud",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"nl":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certificaatdistributie vanuit de cloud",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"nl":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Werk met je lokale Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"nl":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migreer je data van de ene server naar de andere",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"nl":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider voor Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"nl":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Authenticatie voor je netwerk",{"name":380,"img":381,"target":330,"languages":382},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"nl":383},{"title":384,"url":385,"subtitle":386},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-monitoring in realtime",{"name":388,"img":389,"target":330,"languages":390},"sendman","products/sendman/Sendman-nav-logo.svg",{"nl":391},{"title":392,"url":393,"subtitle":394},"Sendman","https://www.sendman.com","De SMTP-relay voor Microsoft 365",{"name":396,"languages":397},"casestudies",{"nl":398},{"title":399,"url":400,"description":401},"Case studies","/nl/casestudies","Pionier in de cloud: je Microsoft-partner voor doordachte cloudoplossingen met een blueprint-gebaseerde aanpak en expertise in Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"nl":405},{"title":406,"description":401},"Bedrijf",[408,444,468],{"name":409,"languages":410,"children":413},"company-about-us",{"nl":411},{"title":412},"Over ons",[414,420,426,432,438],{"name":415,"languages":416},"company-facts-figures",{"nl":417},{"title":418,"url":419},"Facts & Figures","/nl/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"nl":423},{"title":424,"url":425},"Contact & locaties","/nl/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"nl":429},{"title":430,"url":431}," glueckkanja Zwitserland","/nl/company/switzerland",{"name":433,"languages":434},"austria",{"nl":435},{"title":436,"url":437},"glueckkanja Oostenrijk","/nl/company/austria",{"name":439,"languages":440},"spain",{"nl":441},{"title":442,"url":443},"glueckkanja Spanje","/nl/company/spain",{"name":445,"languages":446,"children":449},"company-career",{"nl":447},{"title":448},"Carrière",[450,456,462],{"name":451,"languages":452},"company-career-overview",{"nl":453},{"title":454,"url":455},"Carrière-overzicht","/nl/career",{"name":457,"languages":458},"company-young-professionals",{"nl":459},{"title":460,"url":461},"Young Professionals","/nl/young-professionals",{"name":463,"languages":464},"company-jobs",{"nl":465},{"title":466,"url":467},"Vacatures","/nl/job-offers",{"name":469,"languages":470,"children":473},"company-latest",{"nl":471},{"title":472},"Actueel",[474,480],{"name":475,"languages":476},"company-blog",{"nl":477},{"title":478,"url":479},"Blog","/nl/blog",{"name":475,"languages":481},{"nl":482},{"title":483,"url":484},"Events","/nl/events",[486],{"name":487,"languages":488},"career-meta",{"nl":489},{"title":448,"url":455,"active":490},false,{"languages":492},{"nl":493},{"title":494,"url":425,"active":490},"Contact",{"data":496},{"bgColor":497,"number":498,"mail":499,"brandLogos":500,"logos":501,"links":505,"linksNl":515},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[502],{"img":10,"alt":16,"url":503,"class":504},"index.html","max-w-19rem",[506,509,512],{"title":507,"url":508},"Datenschutz","/de/privacy",{"title":510,"url":511},"Impressum","/de/imprint",{"title":513,"url":514},"No Cookies","/de/cookies",[516,519,522],{"title":517,"url":518},"Privacy","/nl/privacy",{"title":520,"url":521},"Juridische informatie","/nl/imprint",{"title":523,"url":524},"Geen cookies","/nl/cookies",{"id":526,"title":527,"body":528,"description":534,"extension":539,"meta":540,"name":541,"navigation":325,"otherLanguages":542,"path":545,"seo":546,"stem":547,"__hash__":548},"authors/andreas-hoetzinger.md","Andreas Hoetzinger",{"type":529,"value":530,"toc":535},"minimal",[531],[532,533,534],"p",{},"Als Head of Partner Alliances verantwortet Andreas Hötzinger die Partnerschaft von glueckkanja mit Microsoft und das Partnernetzwerk darum herum. Er bringt Microsoft-Programme, Förderangebote und Kundenprojekte zusammen, damit aus Lizenzen und Partnerstatus konkrete Vorhaben werden.",{"title":536,"searchDepth":537,"depth":537,"links":538},"",2,[],"md",{},"Andreas Hötzinger",{"en":543,"es":544},"As Head of Partner Alliances, Andreas Hötzinger is responsible for glueckkanja's partnership with Microsoft and for the partner network around it. He brings Microsoft programs, funding offers and customer projects together so that licenses and partner status turn into concrete projects.","Como Head of Partner Alliances, Andreas Hötzinger es responsable de la colaboración de glueckkanja con Microsoft y de la red de partners que la rodea. Conecta los programas de Microsoft, las ofertas de financiación y los proyectos de clientes para que licencias y estatus de partner se conviertan en proyectos concretos.","/andreas-hoetzinger",{"title":527,"description":534},"andreas-hoetzinger","Hm1EMUQv3yhNUPB9iGHy-G0nPLSrHscxQ-3P4JhWDgQ",[550],{"id":551,"title":552,"author":553,"body":554,"cta":500,"description":536,"eventid":500,"extension":539,"hideInRecent":490,"layout":1170,"meta":1171,"moment":1175,"navigation":325,"path":1263,"seo":1264,"stem":1265,"tags":1266,"webcast":490,"__hash__":1271},"content_nl/posts/2026-10-20-who-built-these-agents.md","Wie heeft deze agents gebouwd?",[541],{"type":529,"value":555,"toc":1160},[556,560,576,581,584,592,595,599,601,604,607,877,880,883,1017,1020,1023,1026,1030,1032,1035,1038,1041,1044,1048,1050,1053,1059,1062,1065,1068,1071,1074,1085,1089,1091,1103,1106,1110,1112,1115,1130,1133,1137,1139,1142,1146,1148,1151,1154,1157],[557,558,559],"style",{},"\n/* Die Kusto-Grammatik markiert parse_json als veraltet (rot, kursiv). Die Funktion ist aktuell, also neutral darstellen. */\nhtml .richtext pre.shiki code .s7hpK{--shiki-default:#24292e;--shiki-default-font-style:normal;--shiki-dark:#e1e4e8;--shiki-dark-font-style:normal}\n",[532,561,562,563,567,568,571,572,575],{},"In een klanttenant met ",[564,565,566],"span",{},"3.000"," gebruikers hebben we bij het eerste inventaris ",[564,569,570],{},"280"," agents aangetroffen. ",[564,573,574],{},"170"," daarvan hadden geen verantwoordelijke meer die nog bij het bedrijf werkte. Ze zijn niet gebouwd door kwaadwillenden, maar door afdelingen die snel een probleem wilden oplossen. Precies zo zijn tien jaar geleden de Service Principals ontstaan die tot op de dag van vandaag niemand heeft opgeruimd. Agents herhalen dat patroon, alleen sneller en op grotere schaal.",[577,578,580],"h2",{"id":579},"wat-een-licentie-niet-kan","Wat een licentie niet kan",[532,582,583],{},"{: .h3-font-size}",[532,585,586,587,591],{},"E7 bundelt E5, Copilot, de ",[588,589,590],"a",{"href":66},"Entra Suite"," en Agent 365. Wat het pakket inhoudt, is inmiddels voldoende beschreven. Maar een licentie ruimt geen tenant op. Ze geeft ons de middelen om agents te zien, te identificeren en te beheersen. Of een agent er mag zijn, wie er verantwoordelijk voor is en wat die mag benaderen, bepaalt ze niet.",[532,593,594],{},"Daar komt het tempo bij. Agents ontstaan tegenwoordig daar waar vroeger Excel-macro's werden gebouwd: in de business, snel en zonder ticket. Dat is de bedoeling, en wij vinden dat ook prima. Het betekent echter dat het aantal niet-menselijke accounts in de directory sneller groeit dan welke andere groep ook.",[577,596,598],{"id":597},"wat-de-registry-laat-zien-en-wat-niet","Wat de registry laat zien en wat niet",[532,600,583],{},[532,602,603],{},"Agent 365 verzamelt agents uit Microsoft 365, Copilot Studio, Power Platform en Foundry op één plek. Defender for Endpoint vindt bovendien lokaal geïnstalleerde AI-agents op de clients, inclusief de geconfigureerde MCP-servers. Beide komen terecht in Advanced Hunting en zijn via KQL samen te analyseren. Shadow AI in de letterlijke zin.",[532,605,606],{},"Met de volgende query bekijken we welke agents daadwerkelijk worden aangeroepen en welke tools ze daarbij gebruiken:",[608,609,611],"div",{"style":610},"background: var(--color-bg-grey); border-radius: 6px; padding: 1rem; margin: 0.25rem 0",[612,613,617],"pre",{"className":614,"code":615,"language":616,"meta":536,"style":536},"language-kusto shiki shiki-themes github-light github-dark","CloudAppEvents\n| where ActionType in (\"InvokeAgent\", \"InferenceCall\", \"ExecuteToolBySDK\", \"ExecuteToolByGateway\")\n| extend RawEventData_parsed = parse_json(RawEventData)\n| extend\n    Workload          = coalesce(tostring(RawEventData_parsed[\"Workload\"]), \"Unknown\"),\n    TargetAgentName   = coalesce(tostring(RawEventData_parsed[\"TargetAgentName\"]), \"Unknown\"),\n    AgentName         = coalesce(tostring(RawEventData_parsed[\"AgentName\"]), \"Unknown\"),\n    AgentBlueprintId  = coalesce(tostring(RawEventData_parsed[\"AgentBlueprintId\"]), \"Unknown\"),\n    PlatformAgentType = coalesce(\n        tostring(RawEventData_parsed[\"PlatformAgentType\"]),\n        tostring(RawEventData_parsed[\"CopilotEventData\"][\"PlatformAgentType\"]),\n        \"Unknown\"\n    )\n| project-away RawEventData_parsed\n| summarize count() by ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n","kusto",[618,619,620,628,669,687,695,726,749,772,795,806,820,837,843,849,860],"code",{"__ignoreMap":536},[564,621,624],{"class":622,"line":623},"line",1,[564,625,627],{"class":626},"sVt8B","CloudAppEvents\n",[564,629,630,633,637,640,643,646,650,653,656,658,661,663,666],{"class":622,"line":537},[564,631,632],{"class":626},"| ",[564,634,636],{"class":635},"szBVR","where",[564,638,639],{"class":626}," ActionType ",[564,641,642],{"class":635},"in",[564,644,645],{"class":626}," (",[564,647,649],{"class":648},"sZZnC","\"InvokeAgent\"",[564,651,652],{"class":626},", ",[564,654,655],{"class":648},"\"InferenceCall\"",[564,657,652],{"class":626},[564,659,660],{"class":648},"\"ExecuteToolBySDK\"",[564,662,652],{"class":626},[564,664,665],{"class":648},"\"ExecuteToolByGateway\"",[564,667,668],{"class":626},")\n",[564,670,672,674,677,680,684],{"class":622,"line":671},3,[564,673,632],{"class":626},[564,675,676],{"class":635},"extend",[564,678,679],{"class":626}," RawEventData_parsed = ",[564,681,683],{"class":682},"s7hpK","parse_json",[564,685,686],{"class":626},"(RawEventData)\n",[564,688,690,692],{"class":622,"line":689},4,[564,691,632],{"class":626},[564,693,694],{"class":635},"extend\n",[564,696,698,701,705,708,711,714,717,720,723],{"class":622,"line":697},5,[564,699,700],{"class":626},"    Workload          = ",[564,702,704],{"class":703},"sj4cs","coalesce",[564,706,707],{"class":626},"(",[564,709,710],{"class":703},"tostring",[564,712,713],{"class":626},"(RawEventData_parsed[",[564,715,716],{"class":648},"\"Workload\"",[564,718,719],{"class":626},"]), ",[564,721,722],{"class":648},"\"Unknown\"",[564,724,725],{"class":626},"),\n",[564,727,729,732,734,736,738,740,743,745,747],{"class":622,"line":728},6,[564,730,731],{"class":626},"    TargetAgentName   = ",[564,733,704],{"class":703},[564,735,707],{"class":626},[564,737,710],{"class":703},[564,739,713],{"class":626},[564,741,742],{"class":648},"\"TargetAgentName\"",[564,744,719],{"class":626},[564,746,722],{"class":648},[564,748,725],{"class":626},[564,750,752,755,757,759,761,763,766,768,770],{"class":622,"line":751},7,[564,753,754],{"class":626},"    AgentName         = ",[564,756,704],{"class":703},[564,758,707],{"class":626},[564,760,710],{"class":703},[564,762,713],{"class":626},[564,764,765],{"class":648},"\"AgentName\"",[564,767,719],{"class":626},[564,769,722],{"class":648},[564,771,725],{"class":626},[564,773,775,778,780,782,784,786,789,791,793],{"class":622,"line":774},8,[564,776,777],{"class":626},"    AgentBlueprintId  = ",[564,779,704],{"class":703},[564,781,707],{"class":626},[564,783,710],{"class":703},[564,785,713],{"class":626},[564,787,788],{"class":648},"\"AgentBlueprintId\"",[564,790,719],{"class":626},[564,792,722],{"class":648},[564,794,725],{"class":626},[564,796,798,801,803],{"class":622,"line":797},9,[564,799,800],{"class":626},"    PlatformAgentType = ",[564,802,704],{"class":703},[564,804,805],{"class":626},"(\n",[564,807,809,812,814,817],{"class":622,"line":808},10,[564,810,811],{"class":703},"        tostring",[564,813,713],{"class":626},[564,815,816],{"class":648},"\"PlatformAgentType\"",[564,818,819],{"class":626},"]),\n",[564,821,823,825,827,830,833,835],{"class":622,"line":822},11,[564,824,811],{"class":703},[564,826,713],{"class":626},[564,828,829],{"class":648},"\"CopilotEventData\"",[564,831,832],{"class":626},"][",[564,834,816],{"class":648},[564,836,819],{"class":626},[564,838,840],{"class":622,"line":839},12,[564,841,842],{"class":648},"        \"Unknown\"\n",[564,844,846],{"class":622,"line":845},13,[564,847,848],{"class":626},"    )\n",[564,850,852,854,857],{"class":622,"line":851},14,[564,853,632],{"class":626},[564,855,856],{"class":635},"project-away",[564,858,859],{"class":626}," RawEventData_parsed\n",[564,861,863,865,868,871,874],{"class":622,"line":862},15,[564,864,632],{"class":626},[564,866,867],{"class":635},"summarize",[564,869,870],{"class":703}," count()",[564,872,873],{"class":635}," by",[564,875,876],{"class":626}," ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n",[532,878,879],{},"Daarbij hoort een kanttekening: de query laat slechts een deel van het beeld zien, voornamelijk Microsoft-eigen agents en agents die op Microsoft-platforms zijn gebouwd. Wat er daarnaast actief is, verschijnt hier niet.",[532,881,882],{},"Voor de lokale agents op de clients volstaat Defender for Endpoint Plan 2:",[608,884,885],{"style":610},[612,886,888],{"className":614,"code":887,"language":616,"meta":536,"style":536},"AgentsInfo\n| where Platform == \"LocalAgents\"\n| summarize arg_max(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) by AgentId\n| where LifecycleStatus !in~ (\"Deleted\", \"Uninstalled\")\n| extend AgentMetadata = RawAgentInfo.localAgentMetadata\n| extend Vendor = tostring(AgentMetadata.vendor),\n         Device = tostring(AgentMetadata.deviceName)\n| summarize DeviceCount = dcount(Device) by Agent = Name, Vendor\n| sort by DeviceCount desc\n",[618,889,890,895,907,925,949,958,972,982,1002],{"__ignoreMap":536},[564,891,892],{"class":622,"line":623},[564,893,894],{"class":626},"AgentsInfo\n",[564,896,897,899,901,904],{"class":622,"line":537},[564,898,632],{"class":626},[564,900,636],{"class":635},[564,902,903],{"class":626}," Platform == ",[564,905,906],{"class":648},"\"LocalAgents\"\n",[564,908,909,911,913,916,919,922],{"class":622,"line":671},[564,910,632],{"class":626},[564,912,867],{"class":635},[564,914,915],{"class":703}," arg_max",[564,917,918],{"class":626},"(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) ",[564,920,921],{"class":635},"by",[564,923,924],{"class":626}," AgentId\n",[564,926,927,929,931,934,937,939,942,944,947],{"class":622,"line":689},[564,928,632],{"class":626},[564,930,636],{"class":635},[564,932,933],{"class":626}," LifecycleStatus ",[564,935,936],{"class":635},"!in~",[564,938,645],{"class":626},[564,940,941],{"class":648},"\"Deleted\"",[564,943,652],{"class":626},[564,945,946],{"class":648},"\"Uninstalled\"",[564,948,668],{"class":626},[564,950,951,953,955],{"class":622,"line":697},[564,952,632],{"class":626},[564,954,676],{"class":635},[564,956,957],{"class":626}," AgentMetadata = RawAgentInfo.localAgentMetadata\n",[564,959,960,962,964,967,969],{"class":622,"line":728},[564,961,632],{"class":626},[564,963,676],{"class":635},[564,965,966],{"class":626}," Vendor = ",[564,968,710],{"class":703},[564,970,971],{"class":626},"(AgentMetadata.vendor),\n",[564,973,974,977,979],{"class":622,"line":751},[564,975,976],{"class":626},"         Device = ",[564,978,710],{"class":703},[564,980,981],{"class":626},"(AgentMetadata.deviceName)\n",[564,983,984,986,988,991,994,997,999],{"class":622,"line":774},[564,985,632],{"class":626},[564,987,867],{"class":635},[564,989,990],{"class":626}," DeviceCount = ",[564,992,993],{"class":703},"dcount",[564,995,996],{"class":626},"(Device) ",[564,998,921],{"class":635},[564,1000,1001],{"class":626}," Agent = Name, Vendor\n",[564,1003,1004,1006,1009,1011,1014],{"class":622,"line":797},[564,1005,632],{"class":626},[564,1007,1008],{"class":635},"sort",[564,1010,873],{"class":635},[564,1012,1013],{"class":626}," DeviceCount ",[564,1015,1016],{"class":635},"desc\n",[532,1018,1019],{},"Een agent die namens een gebruiker handelt, erft diens rechten. Als die gebruiker toegang heeft tot een veel te ruim vrijgegeven SharePoint-bibliotheek, heeft de agent dat ook. Het verschil is dat de agent sneller en grondiger te werk gaat dan welk mens ook.",[532,1021,1022],{},"Een autonome agent met een eigen identiteit werkt met eigen rechten. Die heeft iemand nodig die verantwoordelijk is, een helder rechtenprofiel en een vervaldatum, net als elk ander account dat toegang heeft tot bedrijfsgegevens.",[532,1024,1025],{},"De registry laat zien wat er is. Of het er mag zijn, moet iemand beoordelen, en die beoordeling is nooit klaar.",[577,1027,1029],{"id":1028},"agents-hebben-identiteiten-nodig-geen-uitzonderingen","Agents hebben identiteiten nodig, geen uitzonderingen",[532,1031,583],{},[532,1033,1034],{},"Agents die met Entra Agent ID worden gebouwd, krijgen een eigen, beheerde identiteit. Via Agent Blueprints leg je vast hoe een agent is ingericht en welke rechten hij krijgt, nog voordat hij überhaupt bestaat. En met Entra ID Governance lopen toegangsreviews en levenscyclusbeheer ook voor agents: aanmaken, vrijgeven, eigenaren toewijzen, periodiek toetsen en laten verlopen.",[532,1036,1037],{},"Conditional Access is toe te passen op agent-identiteiten en Blueprints, maar niet één op één zoals bij mensen. Policies voor \"alle gebruikers\" vangen agent-accounts niet af, en wie via een API-key verbinding maakt, loopt volledig buiten Entra om. Die lacunes moet je kennen voordat je op de policy vertrouwt.",[532,1039,1040],{},"Klinkt vanzelfsprekend. In de praktijk is het dat helaas niet. We zien in veel tenants al hoe moeizaam dat gaat bij klassieke app-registraties en Service Principals: verlaten secrets, rechten uit een of andere testfase, eigenaren die allang elders werken. Agents maken dat niet beter, omdat ze in grotere aantallen en door veel meer mensen worden gebouwd.",[532,1042,1043],{},"Wie zijn Service Principals vandaag niet onder controle heeft, heeft zijn agents morgen ook niet onder controle.",[577,1045,1047],{"id":1046},"governance-is-een-doorlopende-taak","Governance is een doorlopende taak",[532,1049,583],{},[532,1051,1052],{},"Elke week komen er nieuwe agents bij. Eigenaren wisselen van rol of van werkgever. Rechten groeien mee, Conditional Access-regels krijgen uitzonderingen, Sensitivity Labels worden niet bijgehouden. Niets hiervan is een project met een go-live-datum, het is gewoon beheer.",[532,1054,1055,1056,1058],{},"En precies zo pakken we het aan. Met ",[588,1057,41],{"href":42}," beheren we Entra ID voor onze klanten volledig als code. Dat klinkt als een technisch detail, maar het is de eigenlijke reden dat het beheer betrouwbaar verloopt.",[532,1060,1061],{},"Veel organisaties hebben een nette change-procedure volgens ITIL. In het ticket staat wat er gewijzigd moet worden, waarna iemand in de portal klikt. Maar wie controleert of precies dát is aangepast en niets anders?",[532,1063,1064],{},"Wij toetsen niet de beschrijving, maar de wijziging zelf. De regels liggen als code vast. Vooraf staat zwart op wit wat er verandert. Een tweede persoon keurt precies dat goed, en alleen dat wordt uitgerold, met naam en datum. Gaat er toch iets mis, dan is de laatste werkende staat in minuten hersteld, niet na een nachtdienst.",[532,1066,1067],{},"Ook uitzonderingen lopen via dit pad. Heeft een klant een afwijking van de standaard nodig, dan staat die in het repository en niet in een Excel-bestand of in het hoofd van een beheerder. Ze is zichtbaar, versioned en wordt getoetst als elke andere wijziging. Zo verwatert de baseline niet geleidelijk over de maanden, en bij de volgende audit ligt het bewijs van hoe de tenant is geconfigureerd en wie wanneer wat heeft gewijzigd, al klaar.",[532,1069,1070],{},"En we houden onszelf aan wat we voor agents eisen. Onze eigen automatisering is immers ook een niet-menselijke identiteit. Die meldt zich via gefedereerde identiteiten aan op de klanttenant, volledig zonder opgeslagen secret. De rechten zijn gesplitst: één identiteit mag alleen lezen en plannen, een andere mag schrijven. Geen wachtwoord dat kan weglekken, geen certificaat dat op een dag stilletjes verloopt.",[532,1072,1073],{},"Bij de agents zelf zijn we volop bezig. Conditional Access, Access Reviews en Entitlement Management draaien bij ons al als code. Waar we nu aan bouwen, zijn agent-templates in het repository, met identiteit, rechten, Conditional Access, eigenaren en een vervaldatum, en geautomatiseerde controles op verlaten agent-identiteiten, bijvoorbeeld met Maester-checks uit de community. Bij honderden agents is dat het verschil tussen overzicht en hopen.",[532,1075,1076,1077,1080,1081,1084],{},"Hoe ",[588,1078,1079],{"href":303},"Purview"," de gegevens beschermt die agents lezen en doorgeven, en hoe ons ",[588,1082,1083],{"href":276},"CSOC"," hun activiteit bewaakt, beschrijven we in een apart artikel over AI-governance.",[577,1086,1088],{"id":1087},"en-de-agents-in-azure","En de agents in Azure?",[532,1090,583],{},[532,1092,1093,1094,1097,1098,1102],{},"Agent 365 ziet ook agents die in Microsoft Foundry draaien. Maar iemand moet het platform daaronder bouwen en beheren: modellen, netwerk, datakoppelingen, evaluatie. Daarvoor hebben we de ",[588,1095,1096],{"href":198},"AI Foundation"," gebouwd, volledig als code, zodat elk nieuw AI-project met dezelfde vangrails start als het vorige. Meer daarover staat in ons artikel over de drie foundations: ",[588,1099,1101],{"href":1100},"/nl/posts/2026-07-06-the-holy-trinity","The Holy Trinity",".",[532,1104,1105],{},"Het belangrijkste punt is de verbinding naar beneden. Elke agent uit de AI Foundation krijgt een eigen identiteit in hetzelfde Entra als de rest van de omgeving, met precies de rechten die hij nodig heeft. Handelt hij namens een gebruiker, dan ziet hij alleen wat die gebruiker mag zien. En hij laat een spoor achter dat te controleren is. Geen aparte route met eigen accounts en eigen uitzonderingen, alleen maar omdat de agent in Azure draait in plaats van in Microsoft 365.",[577,1107,1109],{"id":1108},"drie-vragen-voor-morgenochtend","Drie vragen voor morgenochtend",[532,1111,583],{},[532,1113,1114],{},"Wie wil weten waar hij staat, kan beginnen met drie vragen:",[1116,1117,1119,1120,1119,1124,1119,1127],"ol",{"style":1118},"margin: 0.25rem 0","\n  ",[1121,1122,1123],"li",{},"Welke agents hebben geen actieve eigenaar of sponsor meer?",[1121,1125,1126],{},"Welke Service Principals hebben secrets die ouder zijn dan twaalf maanden?",[1121,1128,1129],{},"Welke agents verbinden via een API-key in plaats van via Entra?",[532,1131,1132],{},"Wie op alle drie snel een antwoord heeft, is verder dan de meesten.",[577,1134,1136],{"id":1135},"waar-we-beginnen","Waar we beginnen",[532,1138,583],{},[532,1140,1141],{},"Bij de huidige situatie, want de agents zijn er toch al. In onze tweedaagse Agent 365 Workshop maken we zichtbaar welke agents er in jullie tenant actief zijn en waar ze vandaan komen. Daarna hebben jullie een inventaris, een risicobeeld en een governance-plan met duidelijke verantwoordelijkheden.",[577,1143,1145],{"id":1144},"conclusie","Conclusie",[532,1147,583],{},[532,1149,1150],{},"E7 pakt een reëel probleem aan. Maar zien wat er draait, betekent nog niet dat je het onder controle hebt. Daarvoor moet iemand elke dag kijken, identiteiten bijhouden, rechten terugsnoeien en opmerken wanneer een agent zich ineens anders gedraagt dan gisteren.",[532,1152,1153],{},"De licentie is het begin. Het beheer bepaalt de uitkomst.",[532,1155,1156],{},"Hebben jullie E7 al in gebruik of merken jullie dat agents zich bij jullie vermenigvuldigen? En vragen jullie je af wie dat eigenlijk in de gaten houdt? Neem contact met ons op. We kijken samen wat er bij jullie speelt en wat er mag blijven. De eerste stap wordt door Microsoft ondersteund via subsidieprogramma's. Of dat voor jullie van toepassing is, klaren we samen uit.",[557,1158,1159],{},"html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .s7hpK, html code.shiki .s7hpK{--shiki-default:#B31D28;--shiki-default-font-style:italic;--shiki-dark:#FDAEB7;--shiki-dark-font-style:italic}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":536,"searchDepth":537,"depth":537,"links":1161},[1162,1163,1164,1165,1166,1167,1168,1169],{"id":579,"depth":537,"text":580},{"id":597,"depth":537,"text":598},{"id":1028,"depth":537,"text":1029},{"id":1046,"depth":537,"text":1047},{"id":1087,"depth":537,"text":1088},{"id":1108,"depth":537,"text":1109},{"id":1135,"depth":537,"text":1136},{"id":1144,"depth":537,"text":1145},"post",{"lang":1172,"seoTitle":1173,"titleClass":1174,"date":1175,"categories":1176,"blogtitlepic":1177,"socialimg":1178,"customExcerpt":1179,"keywords":1180,"contactInContent":1181,"asideNav":1244,"maxContent":490,"published":325,"scripts":1262},"nl","Wie heeft deze agents gebouwd? E7, Agent 365 en de vraag naar verantwoordelijkheid","h2-font-size","2026-10-20",[235],"head-building-ai-agents.jpg","https://res.cloudinary.com/c4a8/image/upload/blog/heads/head-building-ai-agents.jpg","E7 bundelt E5, Copilot, de Entra Suite en Agent 365. Maar een licentie ruimt geen tenant op. Wie verantwoordelijk is voor een agent en wat die mag benaderen, bepaalt de operatie.","Microsoft 365 E7, Agent 365, Entra Agent ID, Agent Governance, Agent Blueprints, Entra ID Governance, Conditional Access Agents, Shadow AI, Service Principals opruimen, Defender for Endpoint Local Agents, Advanced Hunting KQL Agents, Managed Entra, Entra ID as Code, Microsoft Foundry Agents, Agent 365 Workshop",{"quote":325,"infos":1182},{"bgColor":1183,"color":1184,"boxBgColor":497,"boxColor":1184,"headline":1185,"subline":1186,"level":577,"textStyling":1187,"flush":1188,"person":1189,"form":1204},"var(--color-gk-dark-blue)","var(--color-gk-white)","Neem nu contact op","Hebben jullie E7 in gebruik of merken jullie dat agents zich in jullie tenant vermenigvuldigen, en vragen jullie je af wie dat in de gaten houdt? Neem contact met ons op. We kijken samen wat er bij jullie speelt en wat er mag blijven.","text-light","justify-content-end",{"image":1190,"cloudinary":325,"alt":1191,"name":1191,"quotee":1191,"quoteeTitle":1192,"quote":1193,"detailsHeader":1194,"details":1195},"/people/people-alexander-schlindwein.png","Alexander Schlindwein","Workplace Lead","In bijna elke tenant die we overnemen, vinden we Service Principals waarvoor niemand meer verantwoordelijk is. Bij agents zien we hetzelfde nu ontstaan, alleen bouwt inmiddels elke afdeling ze zelf. Daarom behandelen we ze vanaf het begin als elke andere identiteit: met een eigenaar, duidelijke rechten en een vervaldatum, als code en volledig traceerbaar.","We horen graag\u003Cbr />van jullie!",[1196,1200],{"text":498,"href":1197,"details":1198,"icon":1199},"tel:+49 69 4005520","Nu bellen","site/phone",{"text":1201,"href":1202,"icon":1203},"sales@glueckkanja.com","mailto:sales@glueckkanja.com","site/mail",{"ctaText":1205,"cta":1206,"method":1170,"action":1208,"fields":1209},"Verzenden",{"skin":1207},"primary on-surface","/send",[1210,1214,1219,1222,1226,1231,1236,1239,1242],{"type":1211,"id":1212,"value":1213},"hidden","_next","successful",{"label":1215,"type":1216,"id":1217,"required":325,"requiredMsg":1218},"Naam*","text","name","Voer een naam in.",{"label":1220,"type":1216,"id":403,"required":325,"requiredMsg":1221},"Bedrijf*","Voer een bedrijfsnaam in.",{"label":1223,"type":1224,"id":1224,"required":325,"requiredMsg":1225},"E-mailadres*","email","Voer een e-mailadres in.",{"label":1227,"type":1228,"id":1229,"required":490,"requiredMsg":1230},"Jullie bericht aan ons","textarea","message","Voer een bericht in.",{"label":1232,"type":1233,"id":1234,"required":325,"requiredMsg":1235},"Jullie gegevens worden opgeslagen om jullie verzoek te verwerken en te beantwoorden. Meer informatie over gegevensbescherming vinden jullie in onze \u003Ca href=\"/nl/privacy\">privacyverklaring\u003C/a>.","checkbox","dataprotection","Bevestig dit alstublieft",{"type":1211,"id":1237,"value":1238},"_subject","Form: Agent 365 Governance | NL",{"type":1211,"id":1240,"value":1241},"inbox_key","default",{"type":1211,"id":1243},"_gotcha",{"menuItems":1245},[1246,1248,1250,1252,1254,1256,1258,1260],{"href":1247,"text":580},"#wat-een-licentie-niet-kan",{"href":1249,"text":598},"#wat-de-registry-laat-zien-en-wat-niet",{"href":1251,"text":1029},"#agents-hebben-identiteiten-nodig-geen-uitzonderingen",{"href":1253,"text":1047},"#governance-is-een-doorlopende-taak",{"href":1255,"text":1088},"#en-de-agents-in-azure",{"href":1257,"text":1109},"#drie-vragen-voor-morgenochtend",{"href":1259,"text":1136},"#waar-we-beginnen",{"href":1261,"text":1145},"#conclusie",{"form":325},"/posts/2026-10-20-who-built-these-agents",{"title":552,"description":536},"posts/2026-10-20-who-built-these-agents",[235,1267,1268,1269,1270],"Microsoft Entra ID","Agent 365","AI","Identity Governance","utGJxxKStzZ8fCikpWA5NElcjMcgfOm1QP99USGV_Us",[],{"id":1274,"extension":1275,"meta":1276,"stem":8,"__hash__":1282},"authors_data/authors.json","json",{"Andreas Hötzinger":1277},{"display_name":541,"avatar":1278,"permalink":1279,"linkedin":1280,"imageOffsetTop":1281},"people/at-andreas-hoetzinger.png","/authors/andreas-hoetzinger","andreashoetzinger","75%","ByqFp0GQyhHZsbtcA_HFJk8O1buC5lC502rPVTWDQDs",1792437806487]