Findings by source

Gemini AI (custom)

Azure & Power Platform Unknown vendor · Cloud AI platform · connector shared_geminiai

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
40
Medium
People
1
Makers who created connections
Connections
1
1 environment · 1 maker
Data path
Third party
Flow data leaves the tenant
power-platformthird-party-connectordefault-environment
Next steps

Recommended actions

  1. 01Confirm whether Gemini AI (custom) is an AI service, then sanction, block, or ignore it.
  2. 02Gemini AI (custom) sends flow and app data to a third-party AI API. Classify the connector as Blocked or Business in a Power Platform DLP policy so it cannot be combined with SharePoint, Dataverse, or Outlook connectors.
  3. 03A connection exists in the Default environment, where every licensed user is a maker. Move sanctioned AI work to a managed environment and apply a DLP policy to Default.
Power Platform

Where the connector is used

EnvironmentTypeConnections
Contoso (default)Default1
Connector shared_geminiai · sends data to a third-party API
Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

PersonDepartmentSourceSign-ins · 30 dGranted
n/aPlatform owner or maker0No direct grant
Why

Evidence

  1. connector_usage · Sep 2, 2026
    Gemini AI (custom) connector: 1 connection by 1 maker across Contoso (default)
    Detail
    {
      "thirdParty": true,
      "connectorId": "shared_geminiai",
      "environments": [
        {
          "name": "Contoso (default)",
          "type": "Default",
          "connections": 1
        }
      ]
    }
  2. connection · Sep 2, 2026
    Connection 'Gemini AI (custom)' created by [email protected]
    Detail
    {
      "status": "Connected",
      "connectionId": "con-0006"
    }