Feed / Entra
mediumEntradeprecationm365_message_center · Oct 13, 2026
Microsoft Entra: Changes to AgentIdentity.CreateAsManager permission for agent identities
Microsoft Entra is deprecating the automatic granting of AgentIdentity.CreateAsManager permission, requiring administrator approval to enforce tighter restrictions on agent identity creation.
“Services: Microsoft Entra. <p><b>[What and why]</b></p><p>Microsoft Entra Agent ID is enforcing tighter restrictions for autonomous creation of an agent’s own identities. Currently, all agents are granted <code>AgentIdentity.CreateAsManager</code> upon creation without administrator approval. Starting <b>November 4</…”
View original article →Identity
mfaconditional_access
Security
identity_security
Audience
adminsecurity_engineer
Environment
cloud
Classification confidence: 95%
Loading correlations…