Microsoft 365 E7 adds Project Perception to stop rogue AI agents inside companies
- ID
- 37313
- Status
- summarized
- Published
- 20 Oct 2026, 5:17 PM
- Fetched
- 20 Oct 2026, 6:22 PM
- Provider
- SoyaCincau
- Category
- malaysia-tech
- Original URL
- https://soyacincau.com/2026/10/20/microsoft-365-e7-adds-project-perception-to-stop-rogue-ai-agents-inside-companies/
- Source URL
- https://soyacincau.com/feed/
Summary
- Score
- 6.5
- Created
- 20 Oct 2026, 6:22 PM
- Tags
- Audience
- developersai_ml_learnersai_agent_userssaas_founders
What happened
Microsoft has launched a security suite under Microsoft 365 E7 that includes Project Perception and Agent 365, aimed at monitoring internal AI agents that hold broad system access. The discovery layer reportedly identifies 60 local agent types — including Claude Code, OpenAI Codex and GitHub Copilot — and registers them centrally alongside Agent 365. The controls include Entra Agent ID (a separate digital identity per bot instead of borrowed employee credentials), sandboxing via Microsoft Execution Container, and Dynamic Permissions that start agents at zero authority and expire access when a task ends.
Why it matters
The design pattern here is the takeaway, not the SKU: the article's core argument is that the model can't be its own security guard, so rules and kill switches must sit outside it. If your team points Claude Code, Codex or Copilot at corporate data, expect those agents to be inventoried by an admin registry — decide now whether each agent gets its own identity and task-scoped, auto-expiring permissions, or keeps sharing a human's credentials where you can't tell bot actions from employee actions. Note the article gives no pricing, licensing tier details, or Malaysia availability for M365 E7, so treat procurement impact as unresolved.
Discussion angle
Reward hacking and prompt injection are the two failure modes cited — so for your own agents, where does the enforcement live? Compare giving each agent a scoped identity with expiring permissions versus the common shortcut of a shared service account with broad access.