Dynamics 365 Customer Service: Service tools, skills and plugins are now available for Scout

🚨 The Signal: Dynamics 365 Customer Service tools are now integrated into Scout, an AI agent. This allows customer service agents to access and act on service information directly within Scout, potentially expanding the attack surface for sensitive customer data.

The Impact

Customer service agents using Scout are affected, with a risk of unauthorized data access or manipulation if permissions are not meticulously managed.

  • Customer Service Agents: Risk of over-privileged access to sensitive customer data via Scout.
  • Security Teams: New attack vector for data exfiltration or manipulation through agentic AI.
  • Compliance Officers: Increased complexity in demonstrating data access controls and auditability.
  • IT Administrators: Need to validate and manage permissions for AI agents accessing D365 data.

The Action

  1. Review and validate all permissions assigned to the 'Service package on Dynamics 365 MCP' within Dynamics 365.
  2. Implement least privilege principles for any service accounts or identities used by Scout to access Dynamics 365 data.
  3. Audit existing Dynamics 365 Customer Service roles and ensure they are appropriate for interaction via Scout.
  4. Establish monitoring and alerting for unusual data access patterns or actions originating from Scout.
  5. Update incident response playbooks to include scenarios involving agentic AI data access and manipulation.

Domain: Agentic-AI · Impact: high · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898