Agents Users Build
Agent Builder: the no-new-privileges principle, the broad-source scenario, knowledge scope, sharing and publishing, code interpreter and the sandbox.
Agents Developers Build
Copilot Studio, Agents Toolkit, custom engine agents, and Foundry: whose access each runs with, where it reaches users, and the guardrails.
The Agent Control Plane
Agent 365, Entra agent identities, Conditional Access for agents, policy and security templates, Defender real-time protection, and Purview extended to agents.
Prompt Injection and Runtime Defenses
Microsoft's operated layers, Defender for Office 365 at mail flow, the audit flags, the sandbox research, and blast radius as the customer's lever.