Dynamics 365 Sales - Create records in Dynamics 365 Sales using Sales agent
🚨 The Signal: Dynamics 365 Sales Copilot agents can now create records directly from chat, prepopulating forms with conversational context. This expands AI agent capabilities, increasing potential for data exposure and unauthorized record creation if not properly governed.
The Impact
Users interacting with Copilot agents face a risk of unintended or malicious data creation, impacting data integrity and compliance.
- End users: Risk of inadvertently creating incorrect or unauthorized records via conversational AI.
- Security teams: Increased attack surface for prompt injection leading to unauthorized data creation.
- Data owners: Potential for data integrity issues due to AI-driven record generation.
- Compliance teams: New challenge in auditing and ensuring compliance for AI-generated data.
The Action
- Review and update existing data governance policies to specifically address AI agent-driven data creation in Dynamics 365.
- Implement robust monitoring for AI agent activities, focusing on record creation events in Dynamics 365.
- Educate users on responsible interaction with Copilot agents, emphasizing verification of prepopulated fields before submission.
- Assess and configure Dynamics 365 Sales security roles and permissions to ensure least privilege for AI agent-driven actions.
- Evaluate Microsoft Purview Data Loss Prevention (DLP) policies for Dynamics 365 to prevent sensitive data exposure during AI interactions.
Domain: Agentic-AI · Impact: high · Workload: M365 Apps