Use access packages for governed agent access

Short summary

This article explains how to use Microsoft Entra access packages to govern AI agent access to resources like security groups, directory roles, and API permissions. Access packages ensure agent permissions are intentional, approved, auditable, and time-bound rather than permanent ad-hoc assignments. The guide recommends using them only for approved agents with clear ownership, sponsors, and documented business purpose, following earlier governance stages like inventory, classification, and Conditional Access.

• •Access packages grant time-bound, approved, auditable access to AI agents for defined resources
• •Use only after agents pass inventory, classification, owner assignment, and Conditional Access checks
• •Sponsor-based approval and expiry-by-default prevent permanent standing permissions for agent identities

Generated with AI, which can make mistakes.