Cite as: Real Problem AI problem “How do I see which users have created AI agent identities in my Microsoft 365 tenant?”. Opportunity score 7.6 out of 10 (severity 8, AI feasibility 8, market signal 7, competition gap 7). Category AI / Agents. Trend Agents. Source signal: r/sysadmin post "Heads up: Users can register agent identity blueprints by default", 14 October 2026, 8 comments.. Canonical URL: https://www.realproblem.ai/idea/how-do-i-see-which-users-have-created-ai-agent-identities-in-my-microsoft-365-tenant.
How do I see which users have created AI agent identities in my Microsoft 365 tenant?
Microsoft Entra now lets any user register AI agent identity blueprints by default, whoever owns a blueprint can add a secret and act as any agent made from it, and switching the setting off does nothing about blueprints that already exist.
Who has it: Microsoft 365 admins and MSPs managing many client tenants.
- Severity8/10
- Feasible today8/10
- Market signal7/10
- Competition gap7/10
Heard in public
“Whoever owns a blueprint can add a secret to it and act as any agent made from it.”
Quoted word for word from the public post linked below. Nobody submitted it to Real Problem AI.
r/sysadmin post "Heads up: Users can register agent identity blueprints by default", 14 October 2026, 8 comments.What nothing does yet
A multi-tenant agent identity inventory: list every blueprint, owner, secret and permission across client tenants, flag user-created ones with broad Graph access, and run a monthly owner attestation review.
Tools that solve this
4 named so far, and where each one stops.
- Microsoft Entra admin center (Agent ID)
Shows agent identities, but one tenant at a time.
- Microsoft Graph PowerShell
Can list blueprints and owners, as the thread shows, but only for admins who script it.
- CIPP
Multi-tenant settings baselines for MSPs; reviewing agent blueprint ownership still needs custom work.
- Microsoft Defender for Cloud Apps
App governance for OAuth apps; agent blueprints and their secrets are a new object to watch.
How you might build it
- 01Microsoft Graph API (agent identity blueprints)
- 02GDAP multi-tenant access
- 03Permission risk scoring
- 04Owner attestation workflow
- 05PSA alerting
#NOV61 · Canonical URL: https://www.realproblem.ai/idea/how-do-i-see-which-users-have-created-ai-agent-identities-in-my-microsoft-365-tenant