[{"data":1,"prerenderedAt":1284},["ShallowReactive",2],{"sc:header-data-sv":3,"sc:footer-data-sv":495,"author-sv-andreas-hoetzinger-149c66be22f8ea":525,"content-sv-andreas-hoetzinger":549,"content-events-sv-andreas-hoetzinger":1273,"authors_data:Andreas Hötzinger":1274},{"lang":4,"home":5,"navigation":17,"meta":485,"contact":491},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"sv":13},{"title":14,"url":15,"alt":16},"Hem","/sv","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"sv":21},{"title":22,"description":23},"Workplace","Microsoft 365-driven för smarta, säkra och flexibla arbetsmiljöer som förenar den senaste tekniken och identitetslösningar.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"sv":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"sv":34},{"title":35,"url":36},"Managed Intune","/sv/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"sv":40},{"title":41,"url":42},"Managed Entra","/sv/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"sv":46},{"title":47,"url":48},"Managed Workplace","/sv/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"sv":52},{"title":53,"url":54},"Consulting Services","/sv/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"sv":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"sv":64},{"title":65,"url":66},"Microsoft Entra Suite","/sv/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"sv":70},{"title":71,"url":72},"Microsoft Intune","/sv/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"sv":76},{"title":77,"url":78},"Microsoft Windows","/sv/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"sv":82},{"title":83,"url":84},"Windows 365 Cloud PC","/sv/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"sv":88},{"title":89,"url":90},"Cloud Workplace Foundation","/sv/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"sv":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"sv":100},{"title":101,"url":102},"Microsoft 365 Copilot","/sv/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"sv":106},{"title":107,"url":108},"Teams","/sv/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"sv":112},{"title":113,"url":114},"SharePoint & Power Platform","/sv/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"sv":118},{"title":119,"url":120},"Exchange Online","/sv/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"sv":124},{"title":125,"url":126},"Information Protection & Compliance","/sv/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"sv":130},{"title":131,"description":132},"Azure","Driv tillväxt med Azure: Sänk molnkostnaderna, öka effektiviteten och driv innovation genom IaaS och PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"sv":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"sv":142},{"title":143,"url":144},"Azure Managed Services","/sv/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"sv":148},{"title":149,"url":150},"Azure Consulting","/sv/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"sv":154},{"title":155},"Scenarier",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"sv":160},{"title":161,"url":162},"Planera ditt moln","/sv/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"sv":166},{"title":167,"url":168},"Migrera till molnet","/sv/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"sv":172},{"title":173,"url":174},"Förnya din verksamhet","/sv/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"sv":178},{"title":179,"url":180},"Ompröva din VMware-strategi","/sv/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"sv":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"sv":190},{"title":191,"url":192},"Azure Foundation","/sv/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"sv":196},{"title":197,"url":198},"Azure AI Foundation","/sv/azure/azure-ai-foundation",{"name":86,"languages":200},{"sv":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"sv":205},{"title":206,"url":207},"Azure Data Foundation","/sv/azure/azure-data-foundation",{"name":188,"languages":209},{"sv":210},{"title":211,"url":212},"Azure Container Foundation","/sv/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"sv":216},{"title":217,"url":218},"Managed Dark Tenant","/sv/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"sv":222},{"title":223,"url":224},"Cloud Adoption Framework","/sv/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"sv":228},{"title":229,"url":230},"Cloud Competence Center","/sv/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"sv":234},{"title":235,"description":236,"emergency":237},"Säkerhet","Vaksamhet i molnet med en prisbelönt managed service dygnet runt, incident response och toppmodernt skydd för din infrastruktur.",{"text":238,"href":239,"skin":240,"icon":241},"Attackerad?","/sv/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"sv":249},{"title":250,"url":251},"Managed Red Tenant","/sv/security/managed-red-tenant",{"name":214,"languages":253},{"sv":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"sv":259},{"title":260,"url":261},"Sentinel Data Lake","/sv/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"sv":265},{"title":266,"url":267},"Security Consulting","/sv/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"sv":274},{"title":275,"url":276},"Cloud Security Operations Center","/sv/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"sv":280},{"title":281,"url":282},"Global Secure Access","/sv/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"sv":286},{"title":287,"url":288},"MyWorkID","/sv/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"sv":295},{"title":296,"url":297},"Preventive Services","/sv/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"sv":301},{"title":302,"url":303},"Data Security Service","/sv/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"sv":307},{"title":308,"url":309},"Security Copilot Agents","/sv/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"sv":313},{"title":314,"url":315},"Implementera NIS2","/sv/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"sv":319},{"title":320,"description":321},"Produkter","Innovativa kompletterande produkter för en helt säker, 100% cloud-native Microsoft-miljö som förbättrar samarbete, nätverksautentisering och programvaruhantering.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"sv":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Molnbaserad programvarudistribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"sv":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certifikatdistribution från molnet",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"sv":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Arbeta lokalt med dina Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"sv":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrera dina data från en server till en annan",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"sv":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider för Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"sv":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Autentisering för ditt nätverk",{"name":380,"img":381,"target":330,"languages":382},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"sv":383},{"title":384,"url":385,"subtitle":386},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-övervakning i realtid",{"name":388,"img":389,"target":330,"languages":390},"sendman","products/sendman/Sendman-nav-logo.svg",{"sv":391},{"title":392,"url":393,"subtitle":394},"Sendman","https://www.sendman.com","SMTP-reläet för Microsoft 365",{"name":396,"languages":397},"casestudies",{"sv":398},{"title":399,"url":400,"description":401},"Kundcase","/sv/casestudies","Pionjär i molnet: Din främsta Microsoft-partner för heltäckande molnlösningar med ett Blueprint-baserat tillvägagångssätt och expertis inom Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"sv":405},{"title":406,"description":401},"Företag",[408,444,468],{"name":409,"languages":410,"children":413},"company-about-us",{"sv":411},{"title":412},"Om oss",[414,420,426,432,438],{"name":415,"languages":416},"company-facts-figures",{"sv":417},{"title":418,"url":419},"Fakta och siffror","/sv/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"sv":423},{"title":424,"url":425},"Kontakt och platser","/sv/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"sv":429},{"title":430,"url":431},"glueckkanja Schweiz","/sv/company/switzerland",{"name":433,"languages":434},"austria",{"sv":435},{"title":436,"url":437},"glueckkanja Österrike","/sv/company/austria",{"name":439,"languages":440},"spain",{"sv":441},{"title":442,"url":443},"glueckkanja Spanien","/sv/company/spain",{"name":445,"languages":446,"children":449},"company-career",{"sv":447},{"title":448},"Karriär",[450,456,462],{"name":451,"languages":452},"company-career-overview",{"sv":453},{"title":454,"url":455},"Karriäröversikt","/sv/career",{"name":457,"languages":458},"company-young-professionals",{"sv":459},{"title":460,"url":461},"Young Professionals","/sv/young-professionals",{"name":463,"languages":464},"company-jobs",{"sv":465},{"title":466,"url":467},"Lediga jobb","/sv/job-offers",{"name":469,"languages":470,"children":473},"company-latest",{"sv":471},{"title":472},"Aktuellt",[474,480],{"name":475,"languages":476},"company-blog",{"sv":477},{"title":478,"url":479},"Blogg","/sv/blog",{"name":475,"languages":481},{"sv":482},{"title":483,"url":484},"Event","/sv/events",[486],{"name":487,"languages":488},"career-meta",{"sv":489},{"title":448,"url":455,"active":490},false,{"languages":492},{"sv":493},{"title":494,"url":425,"active":490},"Kontakt",{"data":496},{"bgColor":497,"number":498,"mail":499,"brandLogos":500,"logos":501,"links":505,"linksSv":515},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[502],{"img":10,"alt":16,"url":503,"class":504},"index.html","max-w-19rem",[506,509,512],{"title":507,"url":508},"Datenschutz","/de/privacy",{"title":510,"url":511},"Impressum","/de/imprint",{"title":513,"url":514},"No Cookies","/de/cookies",[516,519,522],{"title":517,"url":518},"Integritetspolicy","/sv/privacy",{"title":520,"url":521},"Juridisk information","/sv/imprint",{"title":523,"url":524},"Inga cookies","/sv/cookies",{"id":526,"title":527,"body":528,"description":534,"extension":539,"meta":540,"name":541,"navigation":325,"otherLanguages":542,"path":545,"seo":546,"stem":547,"__hash__":548},"authors/andreas-hoetzinger.md","Andreas Hoetzinger",{"type":529,"value":530,"toc":535},"minimal",[531],[532,533,534],"p",{},"Als Head of Partner Alliances verantwortet Andreas Hötzinger die Partnerschaft von glueckkanja mit Microsoft und das Partnernetzwerk darum herum. Er bringt Microsoft-Programme, Förderangebote und Kundenprojekte zusammen, damit aus Lizenzen und Partnerstatus konkrete Vorhaben werden.",{"title":536,"searchDepth":537,"depth":537,"links":538},"",2,[],"md",{},"Andreas Hötzinger",{"en":543,"es":544},"As Head of Partner Alliances, Andreas Hötzinger is responsible for glueckkanja's partnership with Microsoft and for the partner network around it. He brings Microsoft programs, funding offers and customer projects together so that licenses and partner status turn into concrete projects.","Como Head of Partner Alliances, Andreas Hötzinger es responsable de la colaboración de glueckkanja con Microsoft y de la red de partners que la rodea. Conecta los programas de Microsoft, las ofertas de financiación y los proyectos de clientes para que licencias y estatus de partner se conviertan en proyectos concretos.","/andreas-hoetzinger",{"title":527,"description":534},"andreas-hoetzinger","Hm1EMUQv3yhNUPB9iGHy-G0nPLSrHscxQ-3P4JhWDgQ",[550],{"id":551,"title":552,"author":553,"body":554,"cta":500,"description":536,"eventid":500,"extension":539,"hideInRecent":490,"layout":1170,"meta":1171,"moment":1175,"navigation":325,"path":1264,"seo":1265,"stem":1266,"tags":1267,"webcast":490,"__hash__":1272},"content_sv/posts/2026-10-20-who-built-these-agents.md","Vem har byggt de här agenterna?",[541],{"type":529,"value":555,"toc":1160},[556,560,576,581,584,592,595,599,601,604,607,877,880,883,1017,1020,1023,1026,1030,1032,1035,1038,1041,1044,1048,1050,1053,1059,1062,1065,1068,1071,1074,1085,1089,1091,1103,1106,1110,1112,1115,1130,1133,1137,1139,1142,1146,1148,1151,1154,1157],[557,558,559],"style",{},"\n/* Die Kusto-Grammatik markiert parse_json als veraltet (rot, kursiv). Die Funktion ist aktuell, also neutral darstellen. */\nhtml .richtext pre.shiki code .s7hpK{--shiki-default:#24292e;--shiki-default-font-style:normal;--shiki-dark:#e1e4e8;--shiki-dark-font-style:normal}\n",[532,561,562,563,567,568,571,572,575],{},"I en kundtenant med ",[564,565,566],"span",{},"3 000"," användare hittade vi ",[564,569,570],{},"280"," agenter i det första inventeringen. ",[564,573,574],{},"170"," av dem hade ingen ansvarig kvar som fortfarande jobbade på företaget. Det var ingen med onda avsikter som hade byggt dem, utan verksamhetsavdelningar som snabbt ville lösa ett problem. Exakt så uppstod Service Principals för tio år sedan, de som ingen har städat upp än i dag. Agenter upprepar samma mönster, bara snabbare och i större antal.",[577,578,580],"h2",{"id":579},"vad-en-licens-inte-kan-göra","Vad en licens inte kan göra",[532,582,583],{},"{: .h3-font-size}",[532,585,586,587,591],{},"E7 samlar E5, Copilot, ",[588,589,590],"a",{"href":66},"Entra Suite"," och Agent 365 i ett paket. Vad som ingår är vid det här laget välbeskrivet. Men en licens städar inte upp en tenant. Den ger oss verktygen för att se, identifiera och kontrollera agenter. Däremot avgör den inte om en agent bör finnas, vem som ansvarar för den eller vad den får komma åt.",[532,593,594],{},"Till det kommer tempot. Agenter skapas i dag där Excel-makron en gång skapades: ute i verksamheten, snabbt och utan ett ticket. Det är avsikten, och vi tycker att det är rätt. Det innebär dock att antalet icke-mänskliga konton i katalogen växer snabbare än någon annan grupp.",[577,596,598],{"id":597},"vad-registret-visar-och-vad-det-inte-visar","Vad registret visar och vad det inte visar",[532,600,583],{},[532,602,603],{},"Agent 365 samlar agenter från Microsoft 365, Copilot Studio, Power Platform och Foundry på ett och samma ställe. Defender for Endpoint hittar dessutom lokalt installerade AI-agenter på klienterna, inklusive konfigurerade MCP-servrar. Båda källorna hamnar i Advanced Hunting och kan utvärderas tillsammans med KQL. Shadow AI i ordets bokstavliga bemärkelse.",[532,605,606],{},"Med den här frågan tittar vi på vilka agenter som faktiskt anropas och vilka verktyg de använder:",[608,609,611],"div",{"style":610},"background: var(--color-bg-grey); border-radius: 6px; padding: 1rem; margin: 0.25rem 0",[612,613,617],"pre",{"className":614,"code":615,"language":616,"meta":536,"style":536},"language-kusto shiki shiki-themes github-light github-dark","CloudAppEvents\n| where ActionType in (\"InvokeAgent\", \"InferenceCall\", \"ExecuteToolBySDK\", \"ExecuteToolByGateway\")\n| extend RawEventData_parsed = parse_json(RawEventData)\n| extend\n    Workload          = coalesce(tostring(RawEventData_parsed[\"Workload\"]), \"Unknown\"),\n    TargetAgentName   = coalesce(tostring(RawEventData_parsed[\"TargetAgentName\"]), \"Unknown\"),\n    AgentName         = coalesce(tostring(RawEventData_parsed[\"AgentName\"]), \"Unknown\"),\n    AgentBlueprintId  = coalesce(tostring(RawEventData_parsed[\"AgentBlueprintId\"]), \"Unknown\"),\n    PlatformAgentType = coalesce(\n        tostring(RawEventData_parsed[\"PlatformAgentType\"]),\n        tostring(RawEventData_parsed[\"CopilotEventData\"][\"PlatformAgentType\"]),\n        \"Unknown\"\n    )\n| project-away RawEventData_parsed\n| summarize count() by ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n","kusto",[618,619,620,628,669,687,695,726,749,772,795,806,820,837,843,849,860],"code",{"__ignoreMap":536},[564,621,624],{"class":622,"line":623},"line",1,[564,625,627],{"class":626},"sVt8B","CloudAppEvents\n",[564,629,630,633,637,640,643,646,650,653,656,658,661,663,666],{"class":622,"line":537},[564,631,632],{"class":626},"| ",[564,634,636],{"class":635},"szBVR","where",[564,638,639],{"class":626}," ActionType ",[564,641,642],{"class":635},"in",[564,644,645],{"class":626}," (",[564,647,649],{"class":648},"sZZnC","\"InvokeAgent\"",[564,651,652],{"class":626},", ",[564,654,655],{"class":648},"\"InferenceCall\"",[564,657,652],{"class":626},[564,659,660],{"class":648},"\"ExecuteToolBySDK\"",[564,662,652],{"class":626},[564,664,665],{"class":648},"\"ExecuteToolByGateway\"",[564,667,668],{"class":626},")\n",[564,670,672,674,677,680,684],{"class":622,"line":671},3,[564,673,632],{"class":626},[564,675,676],{"class":635},"extend",[564,678,679],{"class":626}," RawEventData_parsed = ",[564,681,683],{"class":682},"s7hpK","parse_json",[564,685,686],{"class":626},"(RawEventData)\n",[564,688,690,692],{"class":622,"line":689},4,[564,691,632],{"class":626},[564,693,694],{"class":635},"extend\n",[564,696,698,701,705,708,711,714,717,720,723],{"class":622,"line":697},5,[564,699,700],{"class":626},"    Workload          = ",[564,702,704],{"class":703},"sj4cs","coalesce",[564,706,707],{"class":626},"(",[564,709,710],{"class":703},"tostring",[564,712,713],{"class":626},"(RawEventData_parsed[",[564,715,716],{"class":648},"\"Workload\"",[564,718,719],{"class":626},"]), ",[564,721,722],{"class":648},"\"Unknown\"",[564,724,725],{"class":626},"),\n",[564,727,729,732,734,736,738,740,743,745,747],{"class":622,"line":728},6,[564,730,731],{"class":626},"    TargetAgentName   = ",[564,733,704],{"class":703},[564,735,707],{"class":626},[564,737,710],{"class":703},[564,739,713],{"class":626},[564,741,742],{"class":648},"\"TargetAgentName\"",[564,744,719],{"class":626},[564,746,722],{"class":648},[564,748,725],{"class":626},[564,750,752,755,757,759,761,763,766,768,770],{"class":622,"line":751},7,[564,753,754],{"class":626},"    AgentName         = ",[564,756,704],{"class":703},[564,758,707],{"class":626},[564,760,710],{"class":703},[564,762,713],{"class":626},[564,764,765],{"class":648},"\"AgentName\"",[564,767,719],{"class":626},[564,769,722],{"class":648},[564,771,725],{"class":626},[564,773,775,778,780,782,784,786,789,791,793],{"class":622,"line":774},8,[564,776,777],{"class":626},"    AgentBlueprintId  = ",[564,779,704],{"class":703},[564,781,707],{"class":626},[564,783,710],{"class":703},[564,785,713],{"class":626},[564,787,788],{"class":648},"\"AgentBlueprintId\"",[564,790,719],{"class":626},[564,792,722],{"class":648},[564,794,725],{"class":626},[564,796,798,801,803],{"class":622,"line":797},9,[564,799,800],{"class":626},"    PlatformAgentType = ",[564,802,704],{"class":703},[564,804,805],{"class":626},"(\n",[564,807,809,812,814,817],{"class":622,"line":808},10,[564,810,811],{"class":703},"        tostring",[564,813,713],{"class":626},[564,815,816],{"class":648},"\"PlatformAgentType\"",[564,818,819],{"class":626},"]),\n",[564,821,823,825,827,830,833,835],{"class":622,"line":822},11,[564,824,811],{"class":703},[564,826,713],{"class":626},[564,828,829],{"class":648},"\"CopilotEventData\"",[564,831,832],{"class":626},"][",[564,834,816],{"class":648},[564,836,819],{"class":626},[564,838,840],{"class":622,"line":839},12,[564,841,842],{"class":648},"        \"Unknown\"\n",[564,844,846],{"class":622,"line":845},13,[564,847,848],{"class":626},"    )\n",[564,850,852,854,857],{"class":622,"line":851},14,[564,853,632],{"class":626},[564,855,856],{"class":635},"project-away",[564,858,859],{"class":626}," RawEventData_parsed\n",[564,861,863,865,868,871,874],{"class":622,"line":862},15,[564,864,632],{"class":626},[564,866,867],{"class":635},"summarize",[564,869,870],{"class":703}," count()",[564,872,873],{"class":635}," by",[564,875,876],{"class":626}," ActionType, Workload, TargetAgentName, PlatformAgentType, AgentName, AgentBlueprintId\n",[532,878,879],{},"En viktig reservation: frågan visar bara en del av bilden, framför allt Microsofts egna agenter och sådana som byggts på Microsofts plattformar. Vad som körs vid sidan av syns inte här.",[532,881,882],{},"För lokala agenter på klienterna räcker Defender for Endpoint Plan 2:",[608,884,885],{"style":610},[612,886,888],{"className":614,"code":887,"language":616,"meta":536,"style":536},"AgentsInfo\n| where Platform == \"LocalAgents\"\n| summarize arg_max(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) by AgentId\n| where LifecycleStatus !in~ (\"Deleted\", \"Uninstalled\")\n| extend AgentMetadata = RawAgentInfo.localAgentMetadata\n| extend Vendor = tostring(AgentMetadata.vendor),\n         Device = tostring(AgentMetadata.deviceName)\n| summarize DeviceCount = dcount(Device) by Agent = Name, Vendor\n| sort by DeviceCount desc\n",[618,889,890,895,907,925,949,958,972,982,1002],{"__ignoreMap":536},[564,891,892],{"class":622,"line":623},[564,893,894],{"class":626},"AgentsInfo\n",[564,896,897,899,901,904],{"class":622,"line":537},[564,898,632],{"class":626},[564,900,636],{"class":635},[564,902,903],{"class":626}," Platform == ",[564,905,906],{"class":648},"\"LocalAgents\"\n",[564,908,909,911,913,916,919,922],{"class":622,"line":671},[564,910,632],{"class":626},[564,912,867],{"class":635},[564,914,915],{"class":703}," arg_max",[564,917,918],{"class":626},"(Timestamp, Name, Version, LifecycleStatus, RawAgentInfo) ",[564,920,921],{"class":635},"by",[564,923,924],{"class":626}," AgentId\n",[564,926,927,929,931,934,937,939,942,944,947],{"class":622,"line":689},[564,928,632],{"class":626},[564,930,636],{"class":635},[564,932,933],{"class":626}," LifecycleStatus ",[564,935,936],{"class":635},"!in~",[564,938,645],{"class":626},[564,940,941],{"class":648},"\"Deleted\"",[564,943,652],{"class":626},[564,945,946],{"class":648},"\"Uninstalled\"",[564,948,668],{"class":626},[564,950,951,953,955],{"class":622,"line":697},[564,952,632],{"class":626},[564,954,676],{"class":635},[564,956,957],{"class":626}," AgentMetadata = RawAgentInfo.localAgentMetadata\n",[564,959,960,962,964,967,969],{"class":622,"line":728},[564,961,632],{"class":626},[564,963,676],{"class":635},[564,965,966],{"class":626}," Vendor = ",[564,968,710],{"class":703},[564,970,971],{"class":626},"(AgentMetadata.vendor),\n",[564,973,974,977,979],{"class":622,"line":751},[564,975,976],{"class":626},"         Device = ",[564,978,710],{"class":703},[564,980,981],{"class":626},"(AgentMetadata.deviceName)\n",[564,983,984,986,988,991,994,997,999],{"class":622,"line":774},[564,985,632],{"class":626},[564,987,867],{"class":635},[564,989,990],{"class":626}," DeviceCount = ",[564,992,993],{"class":703},"dcount",[564,995,996],{"class":626},"(Device) ",[564,998,921],{"class":635},[564,1000,1001],{"class":626}," Agent = Name, Vendor\n",[564,1003,1004,1006,1009,1011,1014],{"class":622,"line":797},[564,1005,632],{"class":626},[564,1007,1008],{"class":635},"sort",[564,1010,873],{"class":635},[564,1012,1013],{"class":626}," DeviceCount ",[564,1015,1016],{"class":635},"desc\n",[532,1018,1019],{},"En agent som agerar på en användares uppdrag ärver den användarens rättigheter. Har den användaren åtkomst till ett SharePoint-bibliotek med alltför vida behörigheter, har agenten det också. Den är bara snabbare och mer grundlig än någon människa.",[532,1021,1022],{},"En autonom agent med egen identitet arbetar med egna behörigheter. Den behöver någon som är ansvarig, en väldefinierad behörighetsprofil och ett utgångsdatum, precis som vilket annat konto som helst med åtkomst till företagsdata.",[532,1024,1025],{},"Registret visar vad som finns. Om det bör finnas måste någon bedöma, och den bedömningen blir aldrig klar.",[577,1027,1029],{"id":1028},"agenter-behöver-identiteter-inga-undantag","Agenter behöver identiteter, inga undantag",[532,1031,583],{},[532,1033,1034],{},"Agenter som byggs med Entra Agent ID får en egen, hanterad identitet. Med Agent Blueprints kan man fastställa hur en agent är uppbyggd och vilka rättigheter den får, redan innan den existerar. Och med Entra ID Governance körs åtkomstgranskningar och livscykelhantering även för agenter: skapa, godkänna, tilldela ansvariga, granska regelbundet, låta utgå.",[532,1036,1037],{},"Conditional Access kan tillämpas på agentidentiteter och Blueprints, men inte rakt av som för människor. Policyer för \"alla användare\" fångar inte agentkonton, och den som ansluter via API-nyckel passerar Entra helt och hållet. De luckorna måste man känna till innan man förlitar sig på en policy.",[532,1039,1040],{},"Det låter självklart. I praktiken är det det tyvärr inte. Vi ser redan i dag i många tenants hur svårt det faller med klassiska appregistreringar och Service Principals. Övergivna secrets, behörigheter från någon testfas, ansvariga som sedan länge jobbar någon annanstans. Agenter gör inte det bättre, eftersom de byggs i större antal och av betydligt fler personer.",[532,1042,1043],{},"Den som inte har kontroll på sina Service Principals i dag kommer inte att ha kontroll på sina agenter i morgon.",[577,1045,1047],{"id":1046},"governance-är-ett-löpande-arbete","Governance är ett löpande arbete",[532,1049,583],{},[532,1051,1052],{},"Varje vecka tillkommer nya agenter. Ansvariga byter roll eller arbetsgivare. Behörigheter växer, Conditional Access-regler får undantag, Sensitivity Labels sköts av ingen. Inget av det här är ett projekt med en go-live, det är drift.",[532,1054,1055,1056,1058],{},"Och det är precis så vi angriper det. Med ",[588,1057,41],{"href":42}," driftar vi Entra ID åt våra kunder helt som kod. Det låter som ett tekniskt detalj, men det är den egentliga anledningen till att driften fungerar tillförlitligt.",[532,1060,1061],{},"Många organisationer har en välskött ändringsprocess enligt ITIL. I ticketen står vad som ska ändras, sedan klickas det i portalen. Men vem kontrollerar att exakt det justerades och ingenting annat?",[532,1063,1064],{},"Hos oss granskas inte beskrivningen utan själva ändringen. Reglerna finns som kod. Innan något händer är det svart på vitt vad som förändras. En andra person godkänner exakt det, och bara det rullas ut, med namn och datum. Går något ändå fel återställs det senast fungerande tillståndet på minuter, inte under ett nattskift.",[532,1066,1067],{},"Undantag går också den vägen. Behöver en kund en avvikelse från standarden finns den i repositoriet, inte i en Excel-lista eller i en admins huvud. Den är synlig, versionerad och granskas som vilken annan ändring som helst. Baslinjens urholkas därmed inte tyst över månader, och inför nästa revision ligger underlaget för hur tenanten är konfigurerad och vem som ändrat vad och när, redan färdigt.",[532,1069,1070],{},"Vi håller oss dessutom till samma krav som vi ställer på agenter. Vår egen automatisering är ju också en icke-mänsklig identitet. Den autentiserar sig mot kundtenanten via federerade identiteter, helt utan lagrade secrets. Rättigheterna är separerade: en identitet får bara läsa och planera, en annan får skriva. Inget lösenord som kan läcka, inget certifikat som tyst löper ut.",[532,1072,1073],{},"När det gäller agenterna själva är vi mitt i arbetet. Conditional Access, Access Reviews och Entitlement Management kör vi redan i dag som kod. Det vi bygger just nu är agentmallar i repositoriet, med identitet, behörigheter, Conditional Access, ansvariga och utgångsdatum, samt automatiska kontroller på övergivna agentidentiteter, till exempel med Maester-kontroller från communityn. Med hundratals agenter är det skillnaden mellan översikt och hopp.",[532,1075,1076,1077,1080,1081,1084],{},"Hur ",[588,1078,1079],{"href":303},"Purview"," skyddar de data som agenter läser och vidarebefordrar, och hur vårt ",[588,1082,1083],{"href":276},"CSOC"," övervakar deras aktivitet, beskriver vi i en separat artikel om AI-governance.",[577,1086,1088],{"id":1087},"och-agenterna-i-azure","Och agenterna i Azure?",[532,1090,583],{},[532,1092,1093,1094,1097,1098,1102],{},"Agent 365 ser även agenter som kör i Microsoft Foundry. Men någon måste bygga och drifta plattformen under dem: modeller, nätverk, dataanslutning, utvärdering. För det har vi byggt ",[588,1095,1096],{"href":198},"AI Foundation",", helt som kod, så att varje nytt AI-projekt startar med samma ramverk som det förra. Mer om det finns i vår artikel om de tre foundations: ",[588,1099,1101],{"href":1100},"/sv/posts/2026-07-06-the-holy-trinity","The Holy Trinity",".",[532,1104,1105],{},"Den viktigaste punkten är kopplingen nedåt. Varje agent från AI Foundation får en egen identitet i samma Entra som resten av miljön, med exakt de rättigheter den behöver. Agerar den på en användares uppdrag ser den bara vad den användaren får se. Och den lämnar ett spår som går att granska. Ingen sidoväg med egna konton och egna undantag, bara för att agenten kör i Azure i stället för i Microsoft 365.",[577,1107,1109],{"id":1108},"tre-frågor-inför-morgondagen","Tre frågor inför morgondagen",[532,1111,583],{},[532,1113,1114],{},"Den som vill veta var de står kan börja med tre frågor:",[1116,1117,1119,1120,1119,1124,1119,1127],"ol",{"style":1118},"margin: 0.25rem 0","\n  ",[1121,1122,1123],"li",{},"Vilka agenter saknar en aktiv ägare eller sponsor?",[1121,1125,1126],{},"Vilka Service Principals har secrets som är äldre än tolv månader?",[1121,1128,1129],{},"Vilka agenter ansluter via API-nyckel i stället för via Entra?",[532,1131,1132],{},"Den som snabbt kan svara på alla tre är längre fram än de flesta.",[577,1134,1136],{"id":1135},"var-vi-börjar","Var vi börjar",[532,1138,583],{},[532,1140,1141],{},"Med nuläget, för agenterna finns redan där. I vår tvådagars Agent 365 Workshop synliggör vi vilka agenter som körs i er tenant och var de kommer ifrån. Efteråt har ni ett inventarium, en riskbild och en governance-plan med tydliga ansvarsförhållanden.",[577,1143,1145],{"id":1144},"slutsats","Slutsats",[532,1147,583],{},[532,1149,1150],{},"E7 tar sig an ett verkligt problem. Att se vad som kör är dock inte samma sak som att ha kontroll. Det kräver att någon tittar varje dag, underhåller identiteter, skär tillbaka behörigheter och märker när en agent plötsligt beter sig annorlunda än dagen innan.",[532,1152,1153],{},"Licensen är början. Driften avgör.",[532,1155,1156],{},"Ni använder redan E7 eller märker att agenterna börjar bli fler hos er, och undrar vem som egentligen håller koll? Hör av er. Vi tittar tillsammans på vad som kör hos er och vad som får vara kvar. Starten kan stödjas via Microsofts bidragsprogram. Om det passar er situation reder vi ut gemensamt.",[557,1158,1159],{},"html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .s7hpK, html code.shiki .s7hpK{--shiki-default:#B31D28;--shiki-default-font-style:italic;--shiki-dark:#FDAEB7;--shiki-dark-font-style:italic}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":536,"searchDepth":537,"depth":537,"links":1161},[1162,1163,1164,1165,1166,1167,1168,1169],{"id":579,"depth":537,"text":580},{"id":597,"depth":537,"text":598},{"id":1028,"depth":537,"text":1029},{"id":1046,"depth":537,"text":1047},{"id":1087,"depth":537,"text":1088},{"id":1108,"depth":537,"text":1109},{"id":1135,"depth":537,"text":1136},{"id":1144,"depth":537,"text":1145},"post",{"lang":1172,"seoTitle":1173,"titleClass":1174,"date":1175,"categories":1176,"blogtitlepic":1178,"socialimg":1179,"customExcerpt":1180,"keywords":1181,"contactInContent":1182,"asideNav":1245,"maxContent":490,"published":325,"scripts":1263},"sv","Vem har byggt de här agenterna? E7, Agent 365 och frågan om ansvar","h2-font-size","2026-10-20",[1177],"Security","head-building-ai-agents.jpg","https://res.cloudinary.com/c4a8/image/upload/blog/heads/head-building-ai-agents.jpg","E7 samlar E5, Copilot, Entra Suite och Agent 365 i ett paket. Men en licens städar inte upp en tenant. Vem som ansvarar för en agent och vad den får komma åt avgörs i driften.","Microsoft 365 E7, Agent 365, Entra Agent ID, Agent Governance, Agent Blueprints, Entra ID Governance, Conditional Access Agents, Shadow AI, Service Principals aufräumen, Defender for Endpoint Local Agents, Advanced Hunting KQL Agents, Managed Entra, Entra ID as Code, Microsoft Foundry Agents, Agent 365 Workshop",{"quote":325,"infos":1183},{"bgColor":1184,"color":1185,"boxBgColor":497,"boxColor":1185,"headline":1186,"subline":1187,"level":577,"textStyling":1188,"flush":1189,"person":1190,"form":1205},"var(--color-gk-dark-blue)","var(--color-gk-white)","Hör av er","Ni använder redan E7 eller märker att agenterna börjar bli fler i er tenant och undrar vem som egentligen håller koll? Hör av er, så tittar vi tillsammans på vad som kör hos er och vad som får vara kvar.","text-light","justify-content-end",{"image":1191,"cloudinary":325,"alt":1192,"name":1192,"quotee":1192,"quoteeTitle":1193,"quote":1194,"detailsHeader":1195,"details":1196},"/people/people-alexander-schlindwein.png","Alexander Schlindwein","Workplace Lead","I nästan varje tenant vi tar över hittar vi Service Principals som ingen längre äger. Med agenter ser vi samma mönster ta form just nu, med skillnaden att i dag är det varje avdelning som bygger dem. Därför behandlar vi dem från start som vilken annan identitet som helst: med en ansvarig, tydliga rättigheter och ett utgångsdatum, som kod och spårbart.","Vi ser fram emot\u003Cbr />att höra från er!",[1197,1201],{"text":498,"href":1198,"details":1199,"icon":1200},"tel:+49 69 4005520","Ring oss","site/phone",{"text":1202,"href":1203,"icon":1204},"sales@glueckkanja.com","mailto:sales@glueckkanja.com","site/mail",{"ctaText":1206,"cta":1207,"method":1170,"action":1209,"fields":1210},"Skicka",{"skin":1208},"primary on-surface","/send",[1211,1215,1220,1223,1227,1232,1237,1240,1243],{"type":1212,"id":1213,"value":1214},"hidden","_next","successful",{"label":1216,"type":1217,"id":1218,"required":325,"requiredMsg":1219},"Namn*","text","name","Ange ditt namn.",{"label":1221,"type":1217,"id":403,"required":325,"requiredMsg":1222},"Företag*","Ange ditt företag.",{"label":1224,"type":1225,"id":1225,"required":325,"requiredMsg":1226},"E-postadress*","email","Ange din e-postadress.",{"label":1228,"type":1229,"id":1230,"required":490,"requiredMsg":1231},"Ditt meddelande till oss","textarea","message","Ange ett meddelande.",{"label":1233,"type":1234,"id":1235,"required":325,"requiredMsg":1236},"Era uppgifter lagras hos oss för att hantera och besvara er förfrågan. Mer information om dataskydd finns i vår \u003Ca href=\"/sv/privacy\">integritetspolicy\u003C/a>.","checkbox","dataprotection","Vänligen bekräfta",{"type":1212,"id":1238,"value":1239},"_subject","Form: Agent 365 Governance | SV",{"type":1212,"id":1241,"value":1242},"inbox_key","default",{"type":1212,"id":1244},"_gotcha",{"menuItems":1246},[1247,1249,1251,1253,1255,1257,1259,1261],{"href":1248,"text":580},"#vad-en-licens-inte-kan-göra",{"href":1250,"text":598},"#vad-registret-visar-och-vad-det-inte-visar",{"href":1252,"text":1029},"#agenter-behöver-identiteter-inga-undantag",{"href":1254,"text":1047},"#governance-är-ett-löpande-arbete",{"href":1256,"text":1088},"#och-agenterna-i-azure",{"href":1258,"text":1109},"#tre-frågor-inför-morgondagen",{"href":1260,"text":1136},"#var-vi-börjar",{"href":1262,"text":1145},"#slutsats",{"form":325},"/posts/2026-10-20-who-built-these-agents",{"title":552,"description":536},"posts/2026-10-20-who-built-these-agents",[1177,1268,1269,1270,1271],"Microsoft Entra ID","Agent 365","AI","Identity Governance","XEsrdI2Sn5v1ThLt4Vm6qKh2aTAo1Wk96y-K2jTLveg",[],{"id":1275,"extension":1276,"meta":1277,"stem":8,"__hash__":1283},"authors_data/authors.json","json",{"Andreas Hötzinger":1278},{"display_name":541,"avatar":1279,"permalink":1280,"linkedin":1281,"imageOffsetTop":1282},"people/at-andreas-hoetzinger.png","/authors/andreas-hoetzinger","andreashoetzinger","75%","ByqFp0GQyhHZsbtcA_HFJk8O1buC5lC502rPVTWDQDs",1792437806250]