Microsoft Viva: Agent flexible query in Analytics Workbench

🚨 The Signal: Viva Insights will offer new flexible query capabilities for Microsoft 365 Copilot agent adoption. This allows analysts to combine agent usage metrics with organizational data, enabling custom reports on AI agent activity and potential data access patterns.

The Impact

Viva Insights analysts gain new data access, increasing the risk of sensitive information exposure if not properly governed.

• Insights analysts: New access to granular Copilot agent usage data, increasing potential for data exposure.
• Security teams: Need to monitor and govern new data access paths within Viva Insights for AI agent activity.
• Privacy officers: Increased risk of PII exposure through combined agent usage and organizational attributes.
• Organisations: Enhanced visibility into AI agent adoption, but also new data governance responsibilities.

The Action

1. Review existing Viva Insights data access policies and roles for analysts.
2. Assess the types of organizational attributes combined with Copilot agent metrics.
3. Develop or update data loss prevention (DLP) policies for Viva Insights outputs.
4. Educate Viva Insights analysts on responsible data handling and privacy implications.
5. Monitor audit logs for unusual data queries or exports related to Copilot agent usage.

Domain: Agentic-AI · Impact: medium · Workload: Microsoft Purview