Created by Claude - please verify

Entra Agent ID - agent identities with owners, sponsors, application permissions and last sign-in.

Required Microsoft Graph permissions

AgentIdentity.Read.All Application.Read.All AuditLog.Read.All (last sign-in) — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Entra Agent ID (part of Microsoft Agent 365 / Entra licensing for agents).

Endpoints: GET /v1.0/servicePrincipals/microsoft.graph.agentIdentity · GET .../owners, .../sponsors, .../appRoleAssignments ($batch) · GET /beta/reports/servicePrincipalSignInActivities (cached)

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

AI Agent Identity Inventory

AI agents built with Copilot Studio, Azure AI Foundry and similar tools get their own Entra identities. They can hold permissions, act on data and run without a person watching. Every agent should have a sponsor accountable for it and an owner who manages it.