Dynamics 365 Sales - Teams owned opportunities to be researched by Sales Opportunity Agent

🚨 The Signal: Dynamics 365 Sales will use an AI agent to research opportunities owned by 'Owner teams'. This expands AI agent access to team-owned data, increasing the attack surface for sensitive business information.

The Impact

AI agents will access team-owned sales data, increasing data exposure risk for sensitive business information.

  • Sales teams: AI agent access to team-owned opportunities could expose sensitive data.
  • Admins: New AI agent capabilities require review of data access and security configurations.
  • Security teams: Expanded AI agent data access increases the potential for data exfiltration or misuse.

The Action

  1. Review Dynamics 365 Sales security roles and permissions for AI agent interactions.
  2. Assess data classification and sensitivity for information within team-owned opportunities.
  3. Develop or update policies for AI agent data access and usage within Dynamics 365.
  4. Monitor audit logs for AI agent activity and data access post-GA.

Domain: Agentic-AI · Impact: medium · Workload: M365 Apps