Risky Agents in Purview: When the agent gets its own identity, it also gets its own risk profile

Tue, 08 Sep 2026 00:00:00 +0000

You haven’t just adopted a new Copilot. You’ve brought a new digital actor into the organization.

That’s perhaps the most important change with agents right now.

When an agent gets its own identity, access to data, and the ability to perform actions over time, it’s no longer enough to ask who created it or who pressed start. We also need to ask what the agent actually does, what it has access to, whether its behavior changes, and what happens if it starts doing something it shouldn’t.

Copilot Studio on Heilt ærleg

Risky Agents in Purview: When the agent gets its own identity, it also gets its own risk profile