Microsoft Adds Dynamic Permissions and Risk Controls for AI Agents

Microsoft Adds Dynamic Permissions and Risk Controls for AI Agents

By erp-today
Publication Date: 2026-10-20 23:29:00

Microsoft has extended Project Perception, its agentic security system, to cover AI agents working inside company systems. In an Oct. 19 post, Nadim Abdo, corporate vice president of Identity and Network Access, describes agents as insiders: capable tools with access to data, applications, and other agents that can make mistakes, be manipulated, or be compromised.

Abdo builds on a principle Satya Nadella, Microsoft’s chairman and CEO, recently described: controls over what a model can access and do must sit outside the model. The post quotes Nadella saying the most trustworthy agentic system is one designed so organizations can “trust the model least.” Project Perception shares signals, context, and a registry with Agent 365, which governs Work IQ agents.

How Microsoft Treats Agents as Insiders

Abdo organizes the response around four continuous jobs: know which agents exist, contain what each can do before it acts, protect the data and systems in its path, and adapt as risk…