Exercise - Block agents with security risks

Completed

You can block agents across your organization. Blocking an agent turns off all instances created under that agent. These instances remain inactive until you unblock the agent.

In this exercise, you learn how to block an agent with risky behavior from the agents Overview page and from the agent Map. When you block an agent, all instances created under it are turned off. You can unblock the agent later to turn on the instances again.

Block from Agent Registry

  1. Go to Microsoft 365 admin center.

  2. In the left navigation pane, select AgentsOverview.

  3. In the Top actions for you section, select View agents under Agents at risk.

    Screenshot showing the agents at risk on the All agents page.

  4. In the Risks column, select the risks for the Comms agent.

  5. In the Security tab, select the risk.

  6. Review how Microsoft Entra flagged the risk due to abnormal activity such as abnormal sign-in frequency.

  7. In the upper right hand corner, select Block .

    Screenshot showing the Security tab with  risk and Block option.

  8. Select Save.

Block from agent Map

  1. Go to Microsoft 365 admin center.

  2. In the left navigation pane, select AgentsAll Agents.

  3. Select Map.

    Screenshot of the Agent map page.

  4. Select the agent with security risks.

    Screenshot of the agents at risk on the agent map.

  5. In the Security tab, review the agent risks.

  6. Select Block in the upper-right corner.

    Screenshot with the Block option selected.

  7. Select Save.