Agent Authorization Document

AGENT NAME

The display name used in the agent registry, admin center, or internal inventory.

BUSINESS PURPOSE

One to three sentences explaining the problem this agent solves and the workflow it supports.

AUTHORIZED ACTIONS

List each action the agent is permitted to take, using precise language tied to specific systems or workflows.

EXPLICIT PROHIBITIONS

List what the agent must not do. If this field is blank, the authorization record is incomplete.

DATA ACCESS SCOPE

Name the systems, libraries, sites, datasets, or applications the agent can read from and write to.

BUSINESS SPONSOR

Full name and title of the person accountable for this agent's business purpose and lifecycle decisions. Maps to the Sponsor role in Microsoft Entra Agent ID. This person decides whether the agent should exist, what it is authorized to accomplish, and whether it should be renewed or retired.

TECHNICAL OWNER

Full name and title of the administrator responsible for this agent's operational management, permissions, and identity configuration. Maps to the Owner role in Microsoft Entra Agent ID. Not the approving authority.

REVIEW TRIGGER CONDITIONS

Describe the events that require re-authorization, such as a change in purpose, data access, ownership, regulation, or an incident.

NEXT SCHEDULED REVIEW DATE

Set the date when the organization will confirm the record is still accurate and complete.

AUTHORIZATION SIGNATURE

Capture the approving person's name, title, and date. This should be the accountable business owner, not only the developer or IT administrator.