Business Skills in Work IQ - Default On

🚨 The Signal: New Dataverse AI capabilities, including Business Skills and Declarative Agents, will be enabled by default in new environments. This expands AI access to sensitive business data, increasing data exposure risk if not properly governed.

The Impact

Admins and Security Teams are affected by increased data exposure risk due to AI agents accessing sensitive business data by default.

• Security Teams: Increased risk of sensitive data exposure via AI agents.
• Admins: Need to review and configure AI data access permissions.
• Data Owners: Data previously isolated may now be exposed to AI agents.
• Compliance Teams: New AI capabilities require updated data governance policies.

The Action

1. Review existing Dataverse environments for active Copilot Premium, Power Apps Premium, or Dynamics 365 products.
2. Assess data classification and sensitivity within Dataverse environments.
3. Develop or update policies for AI agent access to sensitive business data.
4. Implement granular access controls for Business Skills and Declarative Agents in Dataverse.
5. Monitor AI agent activity and data access logs for anomalous behavior.

Domain: Agentic-AI · Impact: high · Workload: Other