Microsoft Entra Agent ID
GeneralAuthorization Agent Id
In brief
The authorization documentation now states that custom roles can be assigned to agents.
What Entra admins need to know
Administrators can consider custom roles when configuring agent authorization.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- Windows Update Deployment Administrator
- Yammer Administrator
Custom roles can be assigned to agents.
Microsoft Graph permissions for agent IDs
For OAuth2 permissions, agent IDs (specifically, agent identity blueprints and agent identity blueprint principals) can use the same Microsoft Graph permission model as other apps. Agents can request delegated permissions (acting on behalf of a user via consent) or application permissions (app-only privileges granted by an administrator).
@@ -117,6 +117,8 @@ The following is the list of [Microsoft Entra roles](../identity/role-based-acce - Windows Update Deployment Administrator - Yammer Administrator +Custom roles can be assigned to agents.+ ## Microsoft Graph permissions for agent IDs For OAuth2 permissions, agent IDs (specifically, agent identity blueprints and agent identity blueprint principals) can use the same Microsoft Graph permission model as other apps. Agents can request delegated permissions (acting on behalf of a user via consent) or application permissions (app-only privileges granted by an administrator).