@@ -13,9 +13,9 @@ ai-usage: ai-generated #customer intent: As an identity administrator, I want to protect agents that act as users so that their access follows agent-specific risk, device, and network policies. --- -# Secure agents that act as users with Microsoft Entra Conditional Access+# Secure agents that act as users with Conditional Access -Use Conditional Access to protect an agent that accesses resources through its own agent user account. This access pattern supports agents that need a mailbox, access to chat, or the ability to participate in collaborative workflows as a team member.+Use Conditional Access to protect an agent that accesses resources through its own [agent user account](../../agent-id/agent-users.md), instead of (or in addition to) an agent identity.This access pattern supports agents that need a mailbox, access to chat, or the ability to participate in collaborative workflows as a team member.  In this access pattern, the access token's subject is the agent's user account. Conditional Access policies therefore target the agent's user account, not its agent identity. @@ -34,73 +34,101 @@ Before you start, review the licensing, role, agent-user, device, and network re  A policy that targets an agent identity doesn't apply to the agent's user account. If the agent also uses its own agent identity, create a separate policy for that access pattern. For more information, see [Secure autonomous agents with Conditional Access](policy-autonomous-agents.md). -## Block risky agent user accounts+## Creating policies for agent users -Create a policy that blocks agent user accounts when Microsoft Entra ID Protection detects medium or high agent risk. Agent risk is in Preview.+Conditional Access extends policy enforcement to these user-like autonomous agents. Administrators can: -1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a Conditional Access Administrator.-1. Browse to **Entra ID** > **Conditional Access** > **Policies**.-1. Select **New policy**.-1. Enter a name for the policy.-1. Under **Assignments**, select **Users, agents or workload identities**.-1. Under **What does this policy apply to?**, select **Agents**.-1. Under **Include**, select **All agent users (Preview)**.-1. Under **Target resources** > **Include**, select **All resources (formerly 'All cloud apps')**.-1. Under **Conditions** > **Agent risk (Preview)**, set **Configure** to **Yes**.-1. Select **Medium** and **High**.-1. Under **Access controls** > **Grant**, select **Block**, and then select **Select**.-1. Set **Enable policy** to **Report-only**.-1. Select **Create**.+- Target all agent users or select specific agent users+- Apply policies using custom security attributes+- Apply agent risk conditions to block risky agents+- Use the agent execution environments condition to scope policies to agents running on endpoints+- Enforce device compliance for agents running on managed endpoints (Windows 365 Cloud PCs)+- Enforce compliant network locations for agents with a Global Secure Access client++To create a Conditional Access policy for agents operating with their own identity, use the following settings:++- **Assignments**: In an agent access flow, the access token is issued to the agent identity (the token subject), so you assign the policy to agents or their agent identity blueprint.+- **Target resources**: Select the resources the agent needs to access.+- **Conditions**: Configure whether the agent is at risk. For more information, see [ID Protection for agents](../../id-protection/concept-risky-agents.md).+- **Access control**: Because this agent accesses resources with its own identity, there's no remediation and the only available option is blocking access.+++## Block risky agent user accounts++Create a policy that blocks agent user accounts when [Microsoft Entra ID Protection](../../id-protection/concept-risky-agents.md) detects medium or high agent risk. Agent risk is in Preview.++1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Conditional Access Administrator](../role-based-access-control/permissions-reference.md#conditional-access-administrator).+2. Browse to **Entra ID** > **Conditional Access** > **Policies**.+3. Select **New policy**.+4. Enter a name for the policy.+5. Under **Assignments**, select **Users, agents or workload identities**.+6. Under **What does this policy apply to?**, select **Agents**.+	1. Under **Include**, select **All agent users (Preview)**.+7. Under **Target resources** > **Include**, select **All resources (formerly 'All cloud apps')**.+8. Under **Conditions** > **Agent risk (Preview)**, set **Configure** to **Yes**.+	1. Select **Medium** and **High**.+9. Under **Access controls** > **Grant**, select **Block**, and then select **Select**.+10. Set **Enable policy** to **Report-only**.+11. Select **Create**.   [!INCLUDE [conditional-access-report-only-mode](../../includes/conditional-access-report-only-mode.md)]  ## Require a compliant device +Some agent users are computer-using agents. These agents operate a desktop environment to complete tasks, similar to how a human user interacts with applications.  Use this policy for an agent that runs on a managed endpoint, such as a Windows 365 Cloud PC for Agents. The **Agent execution environments (Preview)** condition limits the policy to agent user sessions that start from endpoints. Agents that don't run on a device are excluded from evaluation. -1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a Conditional Access Administrator.-1. Browse to **Entra ID** > **Conditional Access** > **Policies**.-1. Select **New policy**.-1. Enter a name for the policy.-1. Under **Assignments**, select **Users, agents or workload identities**.-1. Under **What does this policy apply to?**, select **Agents**.-1. Under **Include**, select **All agent users (Preview)**.-1. Under **Target resources** > **Include**, select **All resources (formerly 'All cloud apps')**.-1. Under **Conditions** > **Agent execution environments (Preview)**, set **Configure** to **Yes**.-1. Under **Include**, select **Agent user sessions initiated from endpoints**.-1. Under **Access controls** > **Grant**, select **Grant access**.-1. Select **Require device to be marked as compliant**, and then select **Select**.-1. Set **Enable policy** to **Report-only**.-1. Select **Create**.+Note that not all agents run on endpoints. Agents running directly in Microsoft infrastructure don't have an associated device. Policies scoped with this condition don't apply to those cloud-native agents, which prevents unintended blocking.++1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Conditional Access Administrator](../role-based-access-control/permissions-reference.md#conditional-access-administrator).+2. Browse to **Entra ID** > **Conditional Access** > **Policies**.+3. Select **New policy**.+4. Enter a name for the policy.+5. Under **Assignments**, select **Users, agents or workload identities**.+	1. Under **What does this policy apply to?**, select **Agents**.+		1. Under **Include**, select **All agent users (Preview)**.+6. Under **Target resources** > **Include**, select **All resources (formerly 'All cloud apps')**.+7. Under **Conditions** > **Agent execution environments (Preview)**, set **Configure** to **Yes**.+	1. Under **Include**, select **Agent user sessions initiated from endpoints**.+8. Under **Access controls** > **Grant**, select **Grant access**.+	1. Select **Require device to be marked as compliant**, and then select **Select**.+9. Set **Enable policy** to **Report-only**.+10. Select **Create**.  [!INCLUDE [conditional-access-report-only-mode](../../includes/conditional-access-report-only-mode.md)]  > [!NOTE]-> Device compliance requires Intune enrollment. The current published guidance supports this check on Windows 365 Cloud PCs for Agents.+> An agent can technically run on any machine. Device compliance requires Intune enrollment, which today is only supported on Windows 365 Cloud PCs for Agents. Without the **Agent execution environments** condition scoping this policy, agents running in cloud infrastructure are blocked with no path to compliance.  ## Require a compliant network -Use this policy for an agent that runs on an endpoint with the Global Secure Access client. The client provides the network location signal that Conditional Access evaluates.+Use this policy to require agents running on endpoints to connect through a compliant network using [Global Secure Access](/entra/global-secure-access/overview-what-is-global-secure-access). The client provides the network location signal that Conditional Access evaluates.  1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a Conditional Access Administrator. 1. Browse to **Entra ID** > **Conditional Access** > **Policies**. 1. Select **New policy**. 1. Enter a name for the policy. 1. Under **Assignments**, select **Users, agents or workload identities**.-1. Under **What does this policy apply to?**, select **Agents**.-1. Under **Include**, select **All agent users (Preview)**.-1. Under **Target resources** > **Include**, select **All resources (formerly 'All cloud apps')**.-1. Under **Conditions** > **Agent execution environments (Preview)**, set **Configure** to **Yes**.-1. Under **Include**, select **Agent user sessions initiated from endpoints**.-1. Under **Access controls** > **Grant**, select **Grant access**.-1. Select **Require compliant network**, and then select **Select**.-1. Set **Enable policy** to **Report-only**.-1. Select **Create**.+	1. Under **What does this policy apply to?**, select **Agents**.+	2. Under **Include**, select **All agent users (Preview)**.+2. Under **Target resources** > **Include**, select **All resources (formerly 'All cloud apps')**.+3. Under **Conditions** > **Agent execution environments (Preview)**, set **Configure** to **Yes**.+	1. Under **Include**, select **Agent user sessions initiated from endpoints**.+4. Under **Access controls** > **Grant**, select **Grant access**.+	1. Select **Require compliant network**, and then select **Select**.+5. Set **Enable policy** to **Report-only**.+6. Select **Create**.  [!INCLUDE [conditional-access-report-only-mode](../../includes/conditional-access-report-only-mode.md)] +> [!NOTE]+> Use the **Agent execution environments (Preview)** condition to scope this policy to endpoint-based sessions only. Without this condition, cloud-native agents without a Global Secure Access client are blocked with no path to compliance.++ ## Related content  - [Conditional Access for agents](agent-id.md) - [Target agent identities in Conditional Access policies](howto-target-agent-identities.md) - [Secure autonomous agents with Microsoft Entra Conditional Access](policy-autonomous-agents.md)+- [Security for AI with Microsoft Entra agent identity](../../agent-id/security-for-ai-overview.md)+- [Microsoft Entra ID Protection and agents](/entra/id-protection/concept-risky-agents)