Dynamics 365 Finance and Operations cross-app: Boost productivity with Copilot - Enable agents to work with attachments through Dynamics 365 ERP MCP server

🚨 The Signal: Dynamics 365 Copilot agents can now access, create, delete, and reason over content in ERP record attachments. This significantly expands agent capabilities and data access, increasing the attack surface for sensitive ERP data.

The Impact

Dynamics 365 admins and security teams are affected by increased data exposure risk from Copilot agents accessing sensitive ERP attachments.

• Dynamics 365 Admins: Must review and configure agent permissions for attachment access.
• Security Teams: Increased risk of data exfiltration or unauthorised modification via agentic flows.
• Compliance Officers: New data handling and access controls required for agent activity.
• End Users: Potential for agents to access or modify sensitive documents without direct human oversight.

The Action

1. Review existing Dynamics 365 security roles and privileges for Copilot agent identities.
2. Implement least privilege access for Copilot agents to ERP attachments.
3. Configure data loss prevention (DLP) policies in Microsoft Purview to monitor agent interactions with sensitive ERP data.
4. Establish audit logging and alerting for agent activities involving attachment creation, deletion, or modification.
5. Update incident response plans to include scenarios involving compromised Copilot agents accessing ERP attachments.

Domain: Agentic-AI · Impact: high · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898