AppSec · 2h ago
Microsoft announced dynamic permissions and risk controls for Project Perception, plus discovery covering 60 agent types, extending its system to agents running inside organizations. Project Perception also shares an agent registry and signals with Microsoft Agent 365.
Agents can start with no or minimal access, then receive permissions for a task that shrink or expire when it changes or ends. Continuous risk scoring can trigger read-only access, human approval, or a stop; Guardian Agents investigate risk changes and execute responses set in Playbooks. These controls can narrow an agent’s reach before broad access persists unnoticed.
Yet discovery and automated response do not assign ownership. A separate Splunk survey found 38% of 2,050 IT and engineering respondents lacked clearly defined accountability for AI monitoring. If employee-built workflows outlive their creators, dynamic permissions may limit their reach while responsibility for their credentials and actions remains unclear; Microsoft has not shown how reliably the announced controls work.
6 sources covering this story
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace
Rapid adoption of agentic AI comes with potential business benefits. But if done incorrectly it also carries risks around AI activity management and security
What Security Teams Can Do To Tame Wild Code
Employee-built AI apps and agents can expose sensitive data through excessive permissions, making runtime controls and oversight essential.
Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring
Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s risk rises.
Microsoft wants to limit AI agents’ permissions when they stray from the job - Help Net Security
Microsoft introduces Guardian Agents in Project Perception to monitor AI agents, detect risky behavior, restrict access, and contain threats.
Your Next Insider Threat Won’t be Human: Securing AI Agents from the Outside in
Today, we’re navigating a new frontier of access with regard to AI agents.
Agents are your newest insiders. Security must move at their speed. | Microsoft Security Blog
New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously.
Part of the PlainSec briefing for 2026-10-20