AgentsInfo

AgentsInfo Schema #

Table description #

TableSection TableType TableSectionName Description
SecurityForAi Regular Inventory information about AI agents discovered by Microsoft Security for AI (Sai) across providers including A365, Copilot Studio, and Azure AI Foundry.

Table retention #

HotDays ColdDays TotalInteractiveDays
30 0 30

Schema #

Name Description Type
AgentId Unique identifier for the agent. String
Availability The deployment scope of the agent (that is, whether deployed to all users, specific groups, or individual users). String
Capabilities The intents, actions, skills, and orchestrations of the agent. Object
Channels The channels or surfaces where the agent can operate, such as Microsoft 365 applications or APIs. Object
ConnectedAgents List of other agents connected to the agent for multi-agent orchestration. Object
CreatedDateTime Date and time when the account user was created DateTime
DeclaredDataSources The data repositories and knowledge sources the agent can access. Object
DeclaredTools Functional tools the agent can invoke at runtime. Object
Description Description of the information gathered String
Endpoints List of agent runtime endpoints, including URL, transport type, and external connectivity flag. Object
EntraAgentID The agent’s unique enterprise application object identifier in Microsoft Entra ID. This is the authoritative identity used for role-based access control (RBAC), lifecycle management, auditing, and Microsoft Graph operations. String
EntraBlueprintID Entra identity for Blueprint agents. The service principal ID assigned to the Blueprint template from which agent instances are derived. String
Guardrails Guardrails attached to the agent and their coverage. Object
InstanceCount Number of agent instances created from the same Microsoft Entra ID agent identity blueprint. Int64
Instructions The agent’s system prompt or instructions that define its behavior. String
LastPublishedDateTime Date and time when the agent was last published or deployed. DateTime
LastUpdatedDateTime Date and time when the agent’s metadata was last modified. DateTime
LifecycleStatus The agent’s current operational state in the tenant; possible values: Active, Blocked, Uninstalled, Deleted. String
McpServers The Model Context Protocol (MCP) servers connected to the agent, including server URLs and credential configuration. Object
Memory The agent’s declarative memory store configuration. Object
Model Model name or number of the product from the vendor or manufacturer; only available if device discovery finds enough information about this attribute String
Name Display name of the agent. String
ObservabilityID Unique identifier used to correlate the agent with its usage and activity data in Agents for Microsoft 365. String
Owners Primary owners of the agent. Object
Permissions Contains an array of permission objects; each permission object includes PermissionName, TargetAppId, TargetAppDisplayName, PermissionType, PrivilegeLevel, UsageStatus Object
Platform The platform that provided the information about the agents; possible values: Copilot Studio String
PublishedStatus The agent’s publications status; possible values: Draft, Published. String
RawAgentInfo Contents of the raw JSON that describes the agent and contains configuration details, as received from the provider Object
SharedWith The users and security groups the agent has been shared with. Object
Skills Skills attached to the agent. Object
SourceAgentId The platform-native identifier for this agent, scoped by OriginatingStore. String
Timestamp Date and time when the record was generated DateTime
ToolsAuthenticationType Structured summary of agent identity, authentication, and authorization model. String
Triggers List of the agent’s triggers. Object
Version Version of the agent. String

Schema changes #

Date Action
2026-08-19 Table added to tracking