Skip to main content
Version: 2.2.1-preview

MT.1205 - Agent Identity Blueprints and Blueprint Principals should have assigned sponsors (Preview)

Agnivesh S.
Contributed by Agnivesh S.All contributors →

Overview​

Agent Identity Blueprints and Blueprint Principals should have assigned sponsors.

Sponsors provide business ownership and ongoing accountability for AI agents. While technical owners maintain configuration and authentication settings, sponsors justify why the agent exists, approve access scopes, and ensure the agent's activities remain aligned with organizational security policies.

This check audits all Agent Identity Blueprints and Blueprint Principals to verify that designated sponsors are assigned.

Remediation action:​

  1. Open the Microsoft Entra admin center and navigate to Entra ID > Agents > Agent blueprints.
  2. Search for the reported Blueprint or Blueprint Principal by its Object ID or display name.
  3. Under Access, select Owners and sponsors.
  4. Select the Agent blueprint or Agent blueprint principal tab for the reported object.
  5. Select Add > Add sponsor, choose the appropriate business manager or department lead, and select Add.
  6. Verify that the active sponsors are listed.

Test Metadata​

FieldValue
Test IDMT.1205
SeverityMedium
SuiteMaester
CategoryEntra
PowerShell testTest-MtEntraAgentSponsor
TagsEntra, Graph, LongRunning, Maester, MT.1205, Preview, Severity:Medium

Source​

  • Pester test: tests/Maester/Entra/Test-MtEntraAgentSecurity.Tests.ps1
  • PowerShell source: powershell/public/maester/entra/Test-MtEntraAgentSponsor.ps1