KDCube
← AI Industry News

Agents Get Employee Badges — and a Census Taker

Microsoft is giving Copilot Studio agents their own governed Microsoft 365 identities — scoped credentials, a mailbox, and Teams presence — echoing Google's cryptographically attested Gemini Enterprise agents. Meanwhile Dataiku's Agent Management hit GA to discover and risk-rank every agent an enterprise runs across cl...

Highlights

  • Microsoft is giving Copilot Studio agents their own governed Microsoft 365 identities — real credentials, scoped permissions, a mailbox, and Teams presence — so an agent can be @mentioned and attributed like a coworker, not run on a maker's borrowed token (Microsoft)
  • Dataiku shipped Agent Management to GA: a platform-agnostic layer that discovers every agent an enterprise runs across Bedrock, Vertex, Copilot Studio, Agentforce, Snowflake Cortex and more, then flags the unmonitored and high-risk ones (Dataiku)
  • The two biggest clouds are converging on the same model — Google's Gemini Enterprise agents already get cryptographically attested identities, their own Gmail/Calendar/Drive, and an Agent Gateway "AI network firewall" (VentureBeat)
  • Net effect for operators: agent identity is becoming the governance primitive, and "how many agents do we even have?" is now a product category (Dataiku)

Key Signals

  1. Copilot Studio agents become first-class M365 identities - Microsoft, Oct 15
    Microsoft announced agent accounts: agents operate "with their own credentials, similar to how any person would," using scoped permissions instead of a user's or maker's token — improving attribution and audit. It pairs this with business process memory (preferences and process context carry across cycles, shared across a team) and triggers that let agents run always-on from emails or schedules without a prompt. Rolling out now via the Frontier program; agent accounts are slated for general availability in November 2026 (Microsoft).
  2. Dataiku Agent Management hunts the agents nobody is watching - Oct 16, GA
    The standalone product "sits above the stack" to answer what no single platform can: which agents are unmonitored, where risk concentrates, and which ones earn their cost. It connects to AWS Bedrock, Databricks Agents, Google Vertex, Copilot Studio, Azure Foundry, Salesforce Agentforce, Snowflake Cortex and Dataiku, with OpenTelemetry for custom environments (Dataiku, BigDATAwire).
  3. Google's Gemini Enterprise set the template two weeks ago - Oct 8
    Google's "Gemini agent" ships with cryptographically attested Agent Identity governed like an employee, OAuth-propagated least-privilege permissions, per-agent audit trails, an isolated Agent Sandbox, and an Agent Gateway for centralized policy enforcement — and the agents get their own Gmail, Calendar, and Drive (VentureBeat, Infosecurity).

Why It Matters / What To Watch

  1. Agent identity is moving from a hack to a governed primitive — plan for it.
    • The pattern across Microsoft and Google is the same: stop running agents on human credentials, give each one a scoped, attributable identity. Inventory where your agents currently borrow a person's token and plan migration before these GA (Microsoft, Infosecurity).
    • Watch the November GA for Copilot Studio agent accounts and how admins govern an agent's mailbox, Teams presence, and policy scope as a "first-class entity" (Microsoft).
  2. If you can't enumerate your agents, you can't govern them.
    • Dataiku's pitch is a direct read on the market's pain: agent creation is outrunning observability. Treat cross-platform discovery and risk ranking as a prerequisite to scaling, not an afterthought (Dataiku).
    • The OpenTelemetry hook matters for teams on homegrown runtimes — standard traces are becoming the lingua franca for agent oversight across vendors (Dataiku).
  3. Always-on triggers raise the blast radius.
    • Copilot Studio's triggers let agents act unprompted on external signals. Pair any unattended agent with strict scope, spend limits, and audit before enabling it in production (Microsoft).

Quick Links