Post

Treating an agent like an insider with its own identity and permissions makes sense to me. Once it can act on its own, who approved what matters as much as it does for a person.

The shipped piece is narrower than the framing. Purview's out-of-the-box Risky Agents policy is preview, and per Microsoft Learn it covers Copilot Studio, Foundry and P4AI SDK agents only. One catch: admin units aren't supported for agent alerts, so a scoped analyst sees none.