Zero Trust security for AI agents
About this episode
The episode discusses applying Zero Trust security principles to AI agents in various environments.
Apply Zero Trust controls to every AI agent in your environment across identity, tool usage, and data access. Extend Conditional Access in Microsoft Entra to evaluate every agent authorization request in real time against the same risk signals as human users. Assign each agent its own managed identity with Entra Agent ID and scope permissions with Access Packages. Govern your MCP catalog as a software supply chain — unapproved tools don't run, and approved servers lock behind Azure API Management. Log every agent tool call, API access, and data lookup into Microsoft Sentinel for continuous anomaly detection. Purview Insider Risk Management auto-assigns risk levels so you can investigate fast or revoke access entirely. DLP and sensitivity labels in Microsoft Purview restrict what agents can reach and auto-inherit to everything they generate, and Data Access Governance maps exactly what each agent can access before a prompt fires. Jeremy Chapman, Microsoft 365 Director, shares how to put these controls into practice across every managed, self-hosted, and shadow agent in your estate. ► QUICK LINKS: 00:00 - How AI changes Zero Trust 01:20 - Zero Trust principles 02:27 - How to apply…
More episodes of Microsoft Mechanics Podcast
- Build your first Power App from data in seconds
- Microsoft Entra Suite hands-on tour of identity and network access protections
- New agentic platform in Dynamics 365 for Sales and Service
- Tokenomics | The new AI currency & your options explained
- Deploy Windows updates to counter AI-discovered threats
- Secure containers from code to runtime | Microsoft Defender
Explore listener stats, chart rankings, contacts and more on the Microsoft Mechanics Podcast podcast page.