M365.FM - Modern work, security, and productivity with Microsoft 365

Architecture Over Chat: Building the Agent Fabric

1 h 18 min · 28. juni 2026
episode Architecture Over Chat: Building the Agent Fabric cover

Beskrivelse

Most organizations believe they are building AI agents. In reality, they are building chatbots trapped inside applications. These systems can answer questions and generate content, but they forget everything when a session ends. They cannot coordinate across systems, maintain long-term context, or operate as true workforce participants. In this episode, we explore one of the biggest architectural shifts happening in enterprise AI today: the move from isolated conversational experiences to persistent agent fabrics. Instead of treating AI as a chatbot inside Teams, Slack, or a web application, organizations must begin thinking about agents as long-running, governed, identity-driven participants that can operate across devices, applications, and business processes. The discussion examines why the problem isn't the intelligence of modern models. The real limitation is the infrastructure surrounding them. Memory, identity, governance, orchestration, observability, interoperability, and security have become the critical building blocks for the next generation of enterprise AI systems. THE CHATBOX ILLUSION Most AI deployments today are still built around conversations. While chat interfaces are familiar and easy to adopt, they create significant limitations when organizations attempt to scale AI beyond simple question-and-answer scenarios. Key topics include: * Why chat is the wrong abstraction for enterprise agents * The limitations of stateless architectures * Why agents need persistent memory * The difference between assistants and workforce participants BREAKING DOWN THE SILO PROBLEM Organizations are creating AI capabilities inside CRM systems, project management tools, customer service platforms, and productivity applications. Unfortunately, these agents often operate independently and cannot collaborate effectively. The episode explores how siloed architectures create operational bottlenecks, force human intervention, and prevent AI systems from solving end-to-end business problems. Instead of creating isolated intelligence, enterprises must build connected agent ecosystems capable of sharing context and coordinating work.  SESSION PERSISTENCE AS A FOUNDATIONAL REQUIREMENT One of the most important concepts discussed is persistent sessions. Without persistence, agents repeatedly lose context, restart tasks, and require users to reintroduce information. Persistent session architectures enable agents to continue work across devices, applications, and time periods while maintaining complete continuity. Topics include: * Session management * State recovery * Cross-device continuity * Long-running workflows * Persistent audit trails MULTI-DEVICE AGENTS AND THE FUTURE OF WORK Modern workers move continuously between desktops, laptops, tablets, and mobile devices. AI agents must follow them. This episode explores how future architectures separate the agent from the interface, allowing a single persistent intelligence layer to support multiple experiences simultaneously. The discussion highlights why thin clients combined with centralized agent runtimes represent a major shift in enterprise AI design.  THE GITHUB COPILOT SDK BLUEPRINT A significant portion of the conversation focuses on the GitHub Copilot SDK and why it provides a blueprint for future enterprise agent architectures. Rather than building separate intelligence layers for every application, organizations can create a single reasoning engine that powers multiple experiences across development environments, web applications, command-line interfaces, and productivity platforms. The episode examines: * Agent runtimes * Tool orchestration * Portable reasoning engines * Session management * Standardized integrations WHY IDENTITY CHANGES EVERYTHING Agents are rapidly becoming more than software tools. They are evolving into digital workforce participants. To operate safely, agents require their own identities, permissions, governance models, and audit capabilities. The discussion explores how Entra Agent IDs and emerging governance frameworks create the foundation for secure enterprise-scale deployments. Areas covered include: * Agent identities * Conditional access * Role-based permissions * Auditability * Lifecycle management ORCHESTRATION AND SPECIALIZED AGENTS A single agent cannot effectively perform every task within an organization. The future belongs to orchestrated systems composed of specialized agents working together toward common objectives. The episode explores coordinator agents, domain specialists, task delegation, agent handoffs, and workflow orchestration patterns that enable scalable automation across complex business environments.  MEMORY, SECURITY, AND GOVERNANCE Persistent memory creates extraordinary opportunities, but it also introduces new security challenges. The discussion examines memory poisoning, prompt injection, data leakage, retention policies, privacy concerns, and governance requirements that emerge when agents begin accumulating knowledge over long periods. Topics include: * Memory governance * Data protection * Agent auditing * Compliance requirements * Risk management AGENT 365 AND THE CONTROL PLANE VISION As organizations deploy hundreds or even thousands of agents, centralized governance becomes essential. This episode explores the concept behind Microsoft Agent 365 and the broader vision of agent control planes that provide visibility, policy enforcement, observability, interoperability, and security across entire agent ecosystems. The discussion highlights why governance must evolve alongside AI adoption and why successful organizations will treat agents as first-class citizens within their technology environments.  THE ROAD TO AGENTIC ENTERPRISES The future of enterprise AI is not about smarter chatbots. It is about persistent, governed, interoperable agents capable of operating continuously across systems, devices, and workflows. Organizations that continue building isolated AI experiences will struggle with scale, governance, and operational complexity. Those that invest in agent fabrics, identity-driven architectures, orchestration frameworks, and persistent infrastructure will unlock entirely new levels of automation and business value. This episode provides a comprehensive roadmap for understanding that transition and explains why the next era of enterprise AI will be defined not by models alone, but by the systems that connect them together. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Kommentarer

0

Vær den første til å kommentere

Registrer deg nå og bli medlem av M365.FM - Modern work, security, and productivity with Microsoft 365 sitt community!

Prøv gratis

Prøv gratis i 14 dager

99 kr / Måned etter prøveperioden. · Avslutt når som helst.

  • Eksklusive podkaster
  • 20 timer lydbøker i måneden
  • Gratis podkaster

Alle episoder

679 Episoder

episode Architecture Over Chat: Building the Agent Fabric cover

Architecture Over Chat: Building the Agent Fabric

Most organizations believe they are building AI agents. In reality, they are building chatbots trapped inside applications. These systems can answer questions and generate content, but they forget everything when a session ends. They cannot coordinate across systems, maintain long-term context, or operate as true workforce participants. In this episode, we explore one of the biggest architectural shifts happening in enterprise AI today: the move from isolated conversational experiences to persistent agent fabrics. Instead of treating AI as a chatbot inside Teams, Slack, or a web application, organizations must begin thinking about agents as long-running, governed, identity-driven participants that can operate across devices, applications, and business processes. The discussion examines why the problem isn't the intelligence of modern models. The real limitation is the infrastructure surrounding them. Memory, identity, governance, orchestration, observability, interoperability, and security have become the critical building blocks for the next generation of enterprise AI systems. THE CHATBOX ILLUSION Most AI deployments today are still built around conversations. While chat interfaces are familiar and easy to adopt, they create significant limitations when organizations attempt to scale AI beyond simple question-and-answer scenarios. Key topics include: * Why chat is the wrong abstraction for enterprise agents * The limitations of stateless architectures * Why agents need persistent memory * The difference between assistants and workforce participants BREAKING DOWN THE SILO PROBLEM Organizations are creating AI capabilities inside CRM systems, project management tools, customer service platforms, and productivity applications. Unfortunately, these agents often operate independently and cannot collaborate effectively. The episode explores how siloed architectures create operational bottlenecks, force human intervention, and prevent AI systems from solving end-to-end business problems. Instead of creating isolated intelligence, enterprises must build connected agent ecosystems capable of sharing context and coordinating work.  SESSION PERSISTENCE AS A FOUNDATIONAL REQUIREMENT One of the most important concepts discussed is persistent sessions. Without persistence, agents repeatedly lose context, restart tasks, and require users to reintroduce information. Persistent session architectures enable agents to continue work across devices, applications, and time periods while maintaining complete continuity. Topics include: * Session management * State recovery * Cross-device continuity * Long-running workflows * Persistent audit trails MULTI-DEVICE AGENTS AND THE FUTURE OF WORK Modern workers move continuously between desktops, laptops, tablets, and mobile devices. AI agents must follow them. This episode explores how future architectures separate the agent from the interface, allowing a single persistent intelligence layer to support multiple experiences simultaneously. The discussion highlights why thin clients combined with centralized agent runtimes represent a major shift in enterprise AI design.  THE GITHUB COPILOT SDK BLUEPRINT A significant portion of the conversation focuses on the GitHub Copilot SDK and why it provides a blueprint for future enterprise agent architectures. Rather than building separate intelligence layers for every application, organizations can create a single reasoning engine that powers multiple experiences across development environments, web applications, command-line interfaces, and productivity platforms. The episode examines: * Agent runtimes * Tool orchestration * Portable reasoning engines * Session management * Standardized integrations WHY IDENTITY CHANGES EVERYTHING Agents are rapidly becoming more than software tools. They are evolving into digital workforce participants. To operate safely, agents require their own identities, permissions, governance models, and audit capabilities. The discussion explores how Entra Agent IDs and emerging governance frameworks create the foundation for secure enterprise-scale deployments. Areas covered include: * Agent identities * Conditional access * Role-based permissions * Auditability * Lifecycle management ORCHESTRATION AND SPECIALIZED AGENTS A single agent cannot effectively perform every task within an organization. The future belongs to orchestrated systems composed of specialized agents working together toward common objectives. The episode explores coordinator agents, domain specialists, task delegation, agent handoffs, and workflow orchestration patterns that enable scalable automation across complex business environments.  MEMORY, SECURITY, AND GOVERNANCE Persistent memory creates extraordinary opportunities, but it also introduces new security challenges. The discussion examines memory poisoning, prompt injection, data leakage, retention policies, privacy concerns, and governance requirements that emerge when agents begin accumulating knowledge over long periods. Topics include: * Memory governance * Data protection * Agent auditing * Compliance requirements * Risk management AGENT 365 AND THE CONTROL PLANE VISION As organizations deploy hundreds or even thousands of agents, centralized governance becomes essential. This episode explores the concept behind Microsoft Agent 365 and the broader vision of agent control planes that provide visibility, policy enforcement, observability, interoperability, and security across entire agent ecosystems. The discussion highlights why governance must evolve alongside AI adoption and why successful organizations will treat agents as first-class citizens within their technology environments.  THE ROAD TO AGENTIC ENTERPRISES The future of enterprise AI is not about smarter chatbots. It is about persistent, governed, interoperable agents capable of operating continuously across systems, devices, and workflows. Organizations that continue building isolated AI experiences will struggle with scale, governance, and operational complexity. Those that invest in agent fabrics, identity-driven architectures, orchestration frameworks, and persistent infrastructure will unlock entirely new levels of automation and business value. This episode provides a comprehensive roadmap for understanding that transition and explains why the next era of enterprise AI will be defined not by models alone, but by the systems that connect them together. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

28. juni 20261 h 18 min
episode The End of Data Entry: Why Your Business Logic is Moving to Agents cover

The End of Data Entry: Why Your Business Logic is Moving to Agents

For decades, enterprise software was built around a simple idea: store information in a central system and make it available when people need it. CRM systems stored customer data. ERP platforms stored transactions. Finance systems stored invoices. Organizations invested billions of dollars building systems of record designed to become the single source of truth. But something fundamental has changed. Enterprise software is no longer just storing information. Modern business platforms are beginning to observe events, reason about context, make decisions, and orchestrate actions across multiple systems. The future is no longer about systems of record. It is about systems of action powered by AI agents. In this episode, we explore why manual data entry is becoming obsolete, how agentic workflows are reshaping enterprise operations, and why organizations that adopt AI agents today will gain a significant competitive advantage over those that continue relying on humans as integration layers between disconnected systems. THE SYSTEM OF RECORD ERA IS COMING TO AN END For years, organizations believed that creating a centralized repository of business information would solve operational inefficiencies. The reality turned out very differently. Data may live inside business systems, but work often happens elsewhere. Employees spend countless hours moving information between emails, spreadsheets, CRMs, ERPs, ticketing systems, and procurement platforms. Sales representatives manually enter lead information. Finance teams reconcile invoices across multiple systems. Procurement managers spend their days reading supplier emails and updating purchase orders. Customer service teams route tickets manually based on limited information. These activities are not strategic work. They are operational workarounds. The episode explores how organizations unknowingly created an "integration tax" where highly skilled employees spend significant portions of their day acting as translators between systems that should already be communicating with each other.  FROM SYSTEM OF RECORD TO SYSTEM OF ACTION The next evolution of enterprise software is already underway. Instead of simply storing information, modern platforms can now participate in business processes. This shift introduces a new operating model where software observes events, reasons using enterprise data, and executes actions automatically within predefined governance boundaries. Topics discussed include: * Event-driven business processes * Autonomous decision support * Workflow orchestration * Operational automation * AI-powered execution The result is a dramatic reduction in operational friction and a significant increase in business velocity. UNDERSTANDING THE AGENTIC SHIFT Agentic AI represents a fundamental departure from traditional automation. Rather than following static workflows and rigid rules, agents continuously evaluate situations, gather context, apply business logic, and determine appropriate actions. Every agent follows a common pattern: First, an event occurs. Second, the agent reasons about that event using enterprise context. Third, the agent orchestrates actions across systems and workflows. This event-reasoning-orchestration model allows organizations to automate increasingly complex business scenarios while maintaining governance, compliance, and human oversight.  WHY GENERIC AI IS NOT ENOUGH One of the most important discussions in this episode focuses on the difference between generic AI and enterprise agents. Large language models trained on public internet data can answer questions and generate content, but they do not understand the unique realities of your organization. They do not know: * Customer relationships * Contract terms * Approval policies * Security boundaries * Business processes Enterprise agents are different because they operate using your organization's actual business data. Instead of guessing, they reason using customer records, invoices, support histories, purchase orders, financial policies, and operational workflows. This distinction is what separates enterprise AI from consumer AI. SALES QUALIFICATION AGENTS AND THE END OF MANUAL LEAD RESEARCH Sales teams often spend enormous amounts of time researching prospects before meaningful conversations even begin. A Sales Qualification Agent changes that process completely. When a lead arrives, the agent automatically enriches the opportunity using company information, historical account data, industry intelligence, and previous interactions. Rather than forcing sales representatives to spend hours researching prospects, the agent prepares actionable intelligence that allows them to focus on building relationships and closing deals. The discussion explores how organizations can dramatically improve lead quality, shorten sales cycles, and increase conversion rates by shifting research activities from humans to AI-powered agents.  ACCOUNT RECONCILIATION AGENTS IN FINANCE Finance departments often experience some of the fastest ROI from agentic workflows. Traditional reconciliation processes require finance professionals to compare invoices, purchase orders, subledgers, and general ledger entries manually. Account Reconciliation Agents automate much of this effort. These agents identify discrepancies, determine likely causes, propose corrections, and prepare draft journal entries for review. Rather than spending days matching transactions, finance teams can focus on financial analysis, planning, and strategic decision-making. The episode highlights examples where organizations significantly reduced month-end close cycles through AI-driven reconciliation processes.  CUSTOMER INTENT AGENTS AND BETTER CUSTOMER EXPERIENCES Customers rarely describe their actual problem directly. A billing issue may actually be a contract renewal concern. A support request may indicate a broader customer satisfaction problem. Customer Intent Agents analyze interaction history, support records, account data, contract information, and customer behavior to understand the true reason behind a customer interaction. Instead of routing tickets based solely on subject lines, organizations can route customers to the right people with the right context already available. This leads to: * Faster resolutions * Better customer experiences * Higher retention * Reduced escalations * Improved satisfaction scores The result is more intelligent customer engagement across the entire customer lifecycle. SUPPLIER COMMUNICATIONS AND PROCUREMENT AUTOMATION Procurement teams process a constant stream of supplier updates, delivery changes, shipment delays, and contract communications. Many of these activities remain highly manual despite being repetitive and predictable. Supplier Communication Agents monitor incoming messages, evaluate business impact, update systems, notify stakeholders, and escalate only when necessary. Instead of spending hours processing routine updates, procurement professionals can focus on strategic supplier relationships, sourcing decisions, and risk management. The conversation demonstrates how agentic workflows can significantly improve supply chain responsiveness and operational efficiency.  FIELD SERVICE AGENTS AND CONTEXT-DRIVEN OPERATIONS Field service organizations face a unique challenge: technicians often arrive on-site without complete information. Field Service Agents solve this problem by assembling contextual briefings before technicians begin their work. These agents combine: * Service history * Equipment records * IoT data * Inventory availability * Previous repairs * Operational recommendations The result is improved first-time fix rates, reduced operational costs, higher customer satisfaction, and better utilization of field service resources. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

I går1 h 9 min
episode Copilot Studio, AI Agents, RAG, and the Future of Business Automation with Nilüfer Doğan [MVP] cover

Copilot Studio, AI Agents, RAG, and the Future of Business Automation with Nilüfer Doğan [MVP]

Artificial Intelligence is entering a new era. While chatbots introduced many organizations to generative AI, today's intelligent AI agents are capable of much more. They can retrieve enterprise knowledge, execute business processes, automate repetitive tasks, integrate with business systems, and support employees across departments. Microsoft is investing heavily in this vision through Copilot Studio, Azure AI Foundry, Azure OpenAI, Power Platform, and Azure AI Search.In this episode of M365 FM, Mirko Peters welcomes Microsoft MVP Nilüfer Doğan to explore how organizations can move beyond AI experiments and begin building production-ready enterprise AI solutions. FROM ECONOMICS TO MICROSOFT AI DEVELOPMENT Nilüfer shares her unique career journey from studying economics to becoming a Microsoft MVP and Platform Developer working with some of Microsoft's newest AI technologies.She explains how her analytical background helped shape the way she approaches software development, problem solving, automation, and enterprise architecture. Rather than following a traditional computer science path, she discovered Power Platform after initially working in Data Science before transitioning into low-code development.Her story demonstrates that successful AI professionals often combine technical expertise with business thinking. WHAT A MODERN POWER PLATFORM DEVELOPER REALLY DOES Many people imagine Power Platform developers simply building Power Apps or Power Automate flows.Nilüfer explains that today's role is much broader.Her daily work includes: * Building enterprise AI agents * Developing Power Platform solutions * Supporting digital transformation projects * Mentoring citizen developers * Integrating Azure AI services * Designing secure enterprise architectures Modern Power Platform professionals increasingly work across multiple Microsoft technologies instead of focusing on a single product. WHY COPILOT STUDIO IS NO LONGER "JUST A CHATBOT" One of the biggest myths surrounding Copilot Studio is that it simply replaces traditional chatbots.During the conversation, Nilüfer explains why that assumption is outdated.Today's Copilot Studio enables organizations to create intelligent AI agents capable of: * Using enterprise knowledge * Calling business systems * Executing workflows * Using multiple tools * Connecting to Microsoft 365 * Working with Azure AI services * Supporting complex business processes Instead of predefined conversation trees, modern AI agents reason over instructions and available tools. THE BIGGEST MISCONCEPTIONS ABOUT AI AGENTS Organizations often expect AI agents to solve every business problem.Nilüfer explains that this is one of the largest mistakes companies make.Not every problem requires an AI agent.Sometimes the correct solution is: * Power Apps * Power Automate * Power Pages * Traditional automation * Custom Azure development Choosing the correct Microsoft technology is often more important than using the newest AI feature. HOW COPILOT STUDIO HAS EVOLVED Microsoft has dramatically expanded Copilot Studio during the past year.The discussion explores how the platform has shifted from manually building conversation topics toward instruction-based AI development.Rather than configuring every response individually, developers increasingly focus on: * Better instructions * Better prompts * Better knowledge * Better tools * Better orchestration This changes the role of developers from conversation designers into AI solution architects. AI AGENTS VS TRADITIONAL CHATBOTS One of the most valuable parts of the conversation focuses on the difference between classic chatbots and modern AI agents.Traditional chatbots require developers to define every possible decision path manually.AI agents instead: * Understand user intent * Choose appropriate tools * Retrieve relevant information * Execute workflows * Generate contextual responses This represents one of the biggest shifts in enterprise automation over the past decade. WHEN TO USE COPILOT STUDIO — AND WHEN TO USE AZURE AI Every organization eventually asks the same question:Should we build this inside Copilot Studio or inside Azure?Nilüfer explains that there is no universal answer.Smaller business scenarios can often be solved entirely inside Copilot Studio.Larger enterprise solutions involving huge datasets, complex AI pipelines, or advanced retrieval usually benefit from Azure AI services including Azure AI Foundry and Azure AI Search. BUILDING A REAL ENTERPRISE AI SOLUTION Instead of discussing theory, Nilüfer shares a real customer scenario.She explains how she built an intelligent knowledge assistant connected to an on-premises Confluence environment.The solution included: * Document indexing * Permission-aware search * Azure AI Search * Enterprise authentication * Copilot Studio * Secure knowledge retrieval Users only receive information they are authorized to access, demonstrating why enterprise AI requires much more than simply uploading documents into an LLM. UNDERSTANDING AZURE AI SEARCH Azure AI Search plays a critical role in enterprise AI architectures.Nilüfer explains how indexing, vectorization, and semantic search dramatically improve both response quality and performance.Instead of searching thousands of complete documents every time a question is asked, Azure AI Search retrieves only the most relevant information before sending it to the language model.This reduces latency while improving answer quality. WHAT RAG REALLY MEANS Retrieval Augmented Generation (RAG) has become one of the most frequently discussed AI concepts.During the episode, Nilüfer explains the complete RAG pipeline in practical terms.Topics include: * Document chunking * Vector embeddings * Index creation * Knowledge retrieval * Large Language Models * Response generation Understanding these building blocks helps organizations create more reliable AI solutions while reducing hallucinations. MEASURING BUSINESS VALUE One challenge facing almost every AI project is proving business value.Nilüfer explains several approaches for measuring success beyond simple usage statistics.Organizations should evaluate: * Productivity improvements * Time savings * Conversation quality * User adoption * Return on investment * Automation success rates * Operational KPIs Copilot Studio analytics combined with business metrics provide a much clearer picture of AI adoption. GOVERNANCE CANNOT BE AN AFTERTHOUGHT Innovation often receives the most attention, but governance determines whether AI projects remain sustainable.The discussion explores why organizations need: * Development environments * Sandbox environments * Data Loss Prevention policies * Security controls * AI monitoring * Lifecycle management * Permission management Without governance, enterprise AI quickly becomes difficult to manage. SUPPORTING CITIZEN DEVELOPERS Citizen developers play an increasingly important role inside Microsoft Power Platform.Nilüfer explains that successful citizen development requires more than simply giving users access to Copilot Studio.Organizations should invest in: * Training * Mentoring * Documentation * Governance * Best practices * Secure environments The goal is enabling innovation without creating unnecessary risk. HUMAN IN THE LOOP Not every business decision should be delegated to AI.The conversation explores scenarios where human approval remains essential, particularly for: * Financial approvals * Executive decisions * Compliance processes * Sensitive business operations Human oversight remains one of the most important design principles for enterprise AI. THE FUTURE OF POWER PLATFORM Will AI replace Power Apps and Power Automate?Nilüfer believes the opposite.Rather than disappearing, these tools are becoming increasingly intelligent through AI-assisted development, natural language creation, and deeper Copilot integration.Developers will spend less time creating basic applications and more time focusing on governance, architecture, security, and user experience. ADVICE FOR FUTURE AI BUILDERS For developers just starting with Microsoft AI technologies, Nilüfer recommends beginning with freely available learning resources before investing in expensive training.She encourages developers to: * Build real projects * Follow Microsoft community experts * Watch technical YouTube channels * Experiment with Copilot Studio * Learn Azure AI fundamentals * Understand governance * Learn the architecture—not just the prompts Her message is clear: AI tools are becoming easier to use, but understanding why they work remains the key to building successful enterprise solutions. TECHNOLOGIES DISCUSSED * Microsoft Copilot Studio * Microsoft Power Platform * Power Apps * Power Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

I går52 min
episode Stop Treating Agents Like Service Accounts cover

Stop Treating Agents Like Service Accounts

We spent the last two decades perfecting identity for two types of entities: humans and applications. Users received accounts, conditional access policies, and multi-factor authentication. Applications received service principals, managed identities, and API permissions. The model was clean, understandable, and effective. Then AI agents arrived. In this episode, we explore why the traditional identity framework is no longer enough in a world where autonomous agents can reason, plan, make decisions, and interact across multiple enterprise systems. These new digital workers operate somewhere between users and applications, creating an entirely new identity challenge that most organizations are not prepared for. We discuss why forcing agents into legacy service principal models creates dangerous security blind spots, governance failures, and operational complexity. As organizations rapidly deploy Copilot agents, Azure AI Foundry solutions, AWS Bedrock workloads, and custom AI assistants, the gap between innovation and governance continues to grow. THE SERVICE PRINCIPAL PROBLEM Traditional service principals were built for predictable applications performing known tasks. AI agents are fundamentally different. Unlike static workloads, agents dynamically decide which tools to use, which systems to access, and which actions to take next. This creates a major mismatch between modern AI capabilities and legacy identity architectures. Topics include: * Why service principals become overprivileged "god accounts" * The security risks of static permissions in dynamic environments * How prompt injection expands the attack surface * Why least-privilege becomes difficult with autonomous systems THE RISE OF SHADOW AI Many organizations already experienced Shadow IT and Shadow SaaS. Now a new challenge is emerging: Shadow Agents. Business units can create powerful AI agents using low-code platforms without involving security or governance teams. These agents often inherit permissions from existing systems and identities, creating significant visibility challenges. We examine: * How Shadow AI is spreading across enterprises * Why traditional audit logs fail to explain agent behavior * The hidden governance risks of decentralized AI adoption * The operational cost of unmanaged agent ecosystems WHY AGENTS REQUIRE A THIRD IDENTITY TYPE The old world contained two identity categories: * Users * Workloads The new world introduces a third category: * Agents Agents are neither human nor traditional applications. They require dedicated governance models, risk assessment, ownership structures, and lifecycle management. This episode explores how future identity platforms will evolve toward agent-native governance models that understand not just who is accessing data, but why an agent is performing a specific action. ENTRA AGENT ID AND THE FUTURE OF GOVERNANCE One of the most important concepts discussed is the emergence of agent identities as first-class citizens inside enterprise directories. We explore: * Agent Identity Blueprints * Blueprint Principals * Agent Identities * Agent Users * Risk-based agent governance * Agent lifecycle management * Unified policy enforcement This blueprint-driven model enables organizations to scale from dozens of agents to potentially thousands while maintaining control. CONDITIONAL ACCESS FOR AGENTS Conditional Access transformed human identity security. The next evolution applies similar principles to autonomous systems. Key concepts include: * Agent risk scoring * Action-based risk evaluation * Context-aware authorization * Human-in-the-loop approval workflows * Dynamic policy enforcement Rather than focusing on location or devices, agent security focuses on behavioral intent, operational scope, and data sensitivity. THE AGENT REGISTRY AND AGENTIC FABRIC Modern enterprises operate across Microsoft Azure, AWS, Google Cloud, Salesforce, and countless SaaS platforms. The discussion introduces the concept of a centralized Agent Registry and an Agentic Fabric that creates governance consistency across multi-cloud environments. Topics include: * Cross-platform agent discovery * Unified observability * Centralized governance * Multi-cloud identity control * Consistent policy enforcement BUILDING THE CONTROL PLANE FOR AI Identity is rapidly becoming the control plane for AI governance. Organizations that establish blueprint-driven governance, strong observability, unified policies, and structured lifecycle management will be positioned to scale AI safely and effectively. Those that continue treating agents like traditional applications may find themselves facing increasing security risks, compliance challenges, operational complexity, and missed business opportunities. FINAL THOUGHTS AI agents are changing the foundations of enterprise identity. The future is no longer about securing people or applications independently. It is about governing autonomous systems that act on behalf of both. The organizations that succeed will not simply deploy more agents. They will build the identity, governance, and security foundations necessary to trust those agents at scale. This episode explores what that future looks like—and why the transition has already begun. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

I går1 h 11 min
episode Work IQ: The New Intelligence Layer of Microsoft 365 cover

Work IQ: The New Intelligence Layer of Microsoft 365

Microsoft 365 is undergoing its biggest architectural transformation since the introduction of Microsoft Graph. What was once a collection of productivity applications is evolving into an intelligence platform capable of understanding not just data, but the relationships, decisions, workflows, and collaboration patterns that drive modern organizations. In this episode, we explore Microsoft's new Work IQ vision and why it represents a fundamental shift from information retrieval to organizational reasoning. We examine how Microsoft is building a persistent intelligence layer on top of Microsoft Graph, why governance is becoming more important than ever, and how organizations must rethink productivity, leadership, and AI adoption in a world where systems can understand work itself. THE PRODUCTIVITY MEASUREMENT PROBLEM Most organizations still measure activity instead of intelligence. Email volume, meeting hours, task completion rates, and collaboration metrics dominate executive dashboards, but these indicators rarely measure whether meaningful progress is actually being made. Topics discussed include: * Activity versus outcomes * Decision-making speed * Organizational intelligence * Context switching costs * Hidden productivity friction The conversation explores why many AI initiatives struggle to demonstrate measurable business value despite significant investments. FROM MICROSOFT GRAPH TO WORK IQ Microsoft Graph transformed how organizations access data across Microsoft 365. It unified access to files, emails, meetings, identities, and collaboration data. However, Graph was designed to answer what exists, not why it matters. This episode explains how Work IQ builds on top of Graph to create an intelligence layer capable of understanding relationships, projects, workflows, and decision patterns across the enterprise.  THE THREE LAYERS OF WORK IQ Work IQ introduces a new architecture built around three critical layers: * Data layer * Context layer * Memory layer Together, these layers create a persistent understanding of organizational activity, allowing AI systems to reason over work rather than simply retrieve information. Listeners learn how this architecture changes what is possible with Copilot, agents, and enterprise AI solutions. WHY CONTEXT IS THE NEW COMPETITIVE ADVANTAGE Organizations generate enormous amounts of information every day. The challenge is no longer storing information. The challenge is understanding it. The discussion explores how Work IQ creates context by connecting: * Emails * Meetings * Files * Teams conversations * Collaboration signals This creates an organizational memory that can help accelerate decision-making and reduce information silos. THE AGGREGATION CHALLENGE With greater intelligence comes greater responsibility. As Work IQ consolidates signals from across Microsoft 365, organizations face a new challenge: managing risk in a highly connected environment. The episode examines: * Oversharing risks * Permission inheritance * Data exposure concerns * Governance gaps * Security implications Organizations can no longer ignore outdated permissions, abandoned SharePoint sites, or poorly managed Teams environments. GOVERNANCE IN THE AI ERA One of the central themes of this conversation is governance. Work IQ respects existing Microsoft 365 permissions, but it also exposes weaknesses in those permission structures faster than ever before. Key topics include: * Sensitivity labels * Data Loss Prevention * Access controls * Policy enforcement * Compliance frameworks The discussion highlights why governance must become proactive rather than reactive. THE DATA HYGIENE CRISIS Before organizations can benefit from advanced AI capabilities, they must address foundational data challenges. The episode explores the importance of: * SharePoint cleanup * Permission reviews * Metadata quality * Team lifecycle management * Content governance Poor data hygiene becomes dramatically more visible once AI systems begin reasoning across enterprise information. MEMORY, INFERENCE, AND PRIVACY Work IQ introduces persistent memory and inference capabilities that create new opportunities and new concerns. Topics covered include: * Organizational memory * Behavioral inference * Privacy implications * Retention policies * Ethical AI design The conversation explores where the line should exist between intelligence and surveillance. AGENT 365 AND GOVERNED AUTONOMY As AI agents become more capable, organizations must establish clear rules regarding autonomy and accountability. The episode examines Microsoft's approach to agent governance and discusses: * Agent identities * Entra ID integration * Approval boundaries * Human oversight * Accountability models Listeners gain insight into how autonomous systems can safely operate within enterprise environments. WHY MOST AI PROJECTS FAIL Research consistently shows that a large percentage of enterprise AI initiatives fail to achieve their intended outcomes. This episode explores the root causes: * Weak governance * Poor data quality * Unclear ownership * Misaligned objectives * Lack of workflow redesign The conversation argues that organizational readiness is often a bigger challenge than technology itself. THE FUTURE OF MANAGEMENT Work IQ introduces a future where managers spend less time controlling information and more time orchestrating outcomes. Topics include: * Workflow-based organizations * Outcome-driven leadership * Human-agent collaboration * Decision governance * Organizational redesign The role of leadership shifts from managing activity to enabling intelligence. THE 2026 INFLECTION POINT With Work IQ capabilities becoming increasingly available across Microsoft 365, organizations face an important strategic choice. Do they prepare today by improving governance, cleaning data, and redesigning workflows? Or do they wait until competitors gain a structural advantage? Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

26. juni 20261 h 12 min