Dynamics 365 Business Central: Copilot and agents - Run data queries with MCP Server

🚨 The Signal: New tools in Dynamics 365 Business Central allow Copilot and agents to run custom data queries against data without existing APIs. This expands data access for AI agents, increasing potential data exposure risks.

The Impact

Dynamics 365 Business Central administrators and security teams are affected by increased data access risks from AI agents.

  • Administrators: New capabilities require careful configuration to prevent unintended data exposure.
  • Security Teams: Expanded data access by AI agents necessitates enhanced monitoring and audit trails.
  • Data Owners: Data previously inaccessible via APIs can now be queried, increasing its exposure surface.
  • Compliance Officers: New data access methods may complicate compliance with data handling policies.

The Action

  1. Review and define strict data access policies for Copilot and agent queries within Dynamics 365 Business Central.
  2. Implement granular permissions for custom data queries, adhering to the principle of least privilege.
  3. Establish robust logging and auditing for all agent-initiated data queries and access attempts.
  4. Regularly audit agent configurations and data access patterns to identify anomalous behavior.
  5. Educate administrators on secure configuration practices for Copilot and agent data access.

Domain: Agentic-AI · Impact: high · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898