entra-agent-user

An agent user is a specialized user identity in Microsoft Entra ID that enables AI agents to act as digital workers. It allows agents to access APIs and services that strictly require user identities (e.g., Exchange mailboxes, Teams, org charts), while maintaining appropriate security boundaries.

Agent users receive tokens with idtyp=user, unlike regular agent identities which receive idtyp=app.

Important: The identityParentId must reference a true agent identity (created via an agent identity blueprint), NOT a regular application service principal. You can verify by checking that the service principal has @odata.type: #microsoft.graph.agentIdentity and servicePrincipalType: ServiceIdentity.

エージェント ID から Microsoft Entra ID でエージェント ユーザーを作成すると、AI エージェントが Microsoft 365 および Azure 環境でユーザー ID 機能を備えたデジタル ワーカーとして機能できるようになります。 ソース: github/awesome-copilot。