Skip to main content
Version: 2.1.1-preview

MT.1118 - AI agents should avoid using author (maker) authentication for tools

Overview​

AI agents should not use author (maker) authentication for their connector tools.

When a connector tool uses author authentication, the agent accesses external services (SharePoint, SQL, Outlook, etc.) using the authors stored credentials instead of requiring the end user to authenticate. This creates a privilege escalation risk — the agent operates with the maker's full permissions regardless of who is chatting with it, and it bypasses separation of duties controls.

How to fix​

In Copilot Studio, review the agent's tools and change each connector's authentication setting from Agent author authentication to User authentication. This ensures the agent accesses external services using the chatting user's own credentials and permission scope.

Learn more: Configure user authentication in Copilot Studio

Test Metadata​

FieldValue
Test IDMT.1118
SeverityMedium
SuiteMaester
CategoryAIAgent
PowerShell testTest-MtAIAgentAuthorAuthentication
TagsAIAgent, CopilotStudio, Maester, MT.1118

Source​

  • Pester test: tests/Maester/AIAgent/Test-AIAgentSecurity.Tests.ps1
  • PowerShell source: powershell/public/maester/aiagent/Test-MtAIAgentAuthorAuthentication.ps1