Condition in Conditional Access based on the risk level Microsoft Entra ID Protection assigns to agent identities, letting a policy stop high-risk agents from obtaining tokens.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Agent risk in context, with comparison tables and the common traps.
Terms in this definition
- Conditional Access
Policy engine in Microsoft Entra ID P1 that, depending on signals such as risk or named locations, allows access subject to controls like MFA or a compliant device, or blocks it.
- Risk level
The low, medium or high value that Microsoft Entra ID Protection gives to show how likely it is that an account or a sign-in has been compromised; Conditional Access policies based on risk respond to it. Insider risk levels in Microsoft Purview Adaptive Protection (Elevated, Moderate, Minor) are a different scale.
- Microsoft Entra ID Protection
Uses risk scores on users and sign-ins to spot, look into and fix threats to identities. Policies that respond to that risk live in Conditional Access, and a Microsoft Entra ID P2 licence is required.
- Agent
A specialised form of Microsoft Copilot set up for one particular job, pairing instructions with knowledge and skills. You can create one in Copilot Studio, SharePoint or Agent Builder, and administrators control them from the Microsoft 365 admin center.
- Exclusions
Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.
- Stop sequence
One of up to four strings that make the model halt generation; the sequence itself is not included in the output.