Description
entra-agent-user is an agent skill from the github/awesome-copilot collection for creating agent users in Microsoft Entra ID, so that AI agents can act as digital workers with a user identity. An agent user is a specialized user identity linked to an agent identity. Its tokens carry the user type rather than the application type that regular agent identities receive, which lets the agent use APIs that require a user, such as Exchange mailboxes, Teams and organization charts. The skill covers the prerequisites: a Microsoft Entra tenant with Agent ID capabilities, an agent identity created from an agent identity blueprint, one of several Microsoft Graph permissions to create agent users, and the Agent ID Administrator role for the caller in delegated scenarios. It explains that the security boundaries must be kept appropriate while the agent is given these capabilities. The skill is for identity and platform administrators setting up agents in a Microsoft 365 organization. Creating a user identity for an agent gives it access to user-only data, so the permissions should be the least that the agent needs, and the setup should be approved and audited by the organization's identity administrators. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 8.6K installs and passing results from three security audits at the time of the scan.…
Highlights
- Creates agent users linked to agent identities
- User-type tokens for user-only APIs
- Access to mailboxes, Teams and org charts
- Prerequisites and required Graph permissions
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate entra-agent-user.
People also visit
mcp-deploy-manage-agents
Deploy and manage MCP-based declarative agents across Microsoft 365
entra-agent-user FAQ
What is an agent user?
A specialized user identity in Microsoft Entra ID, linked to an agent identity, so the agent can act as a digital worker with a user identity.
Why does an agent need a user identity?
Some APIs, such as Exchange mailboxes, Teams and organization charts, require a user identity rather than an application identity.
What do I need first?
An Entra tenant with Agent ID capabilities, an agent identity from a blueprint, one of the listed permissions, and the Agent ID Administrator role for delegated scenarios.
Should the permissions be broad?
No. The skill stresses the least permissions the agent needs, and the setup should be approved by identity administrators.
How do I install it?
Run npx skills add https://github.com/github/awesome-copilot --skill entra-agent-user.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best entra-agent-user alternatives?
Popular alternatives to entra-agent-user include implementing-agent-modes, agent-governance and agentic-eval. See all entra-agent-user alternatives