Findings by source

Contoso HR Assistant

Audit log Microsoft · Agent platform · AppIdentity Copilot.Studio.cr4f2-hr-assistant

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
45
Medium
People
7
Named in audit records
Interactions
18
30 days · Custom agent
Last activity
3 h ago
First seen Aug 24, 2026
audit-logcustom-agent
Next steps

Recommended actions

  1. 01Contoso HR Assistant is a custom agent with 18 interactions. Open it in Copilot Studio or SharePoint to check its knowledge sources and who can publish changes; agents inherit the author's access and are the fastest-growing shadow AI surface in Microsoft 365.
Audit log

Agent activity

2026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 22026-08-25: 02026-08-26: 12026-08-27: 02026-08-28: 02026-08-29: 32026-08-30: 02026-08-31: 02026-09-01: 12026-09-02: 22026-09-03: 22026-09-04: 02026-09-05: 02026-09-06: 12026-09-07: 32026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 12026-09-13: 12026-09-14: 1
08-1609-14
Host
Copilot Studio18
Content reached
18 resources surfaced
People
7 people in 30 days
Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

PersonDepartmentSourceSign-ins · 30 dGranted
n/aAudit log0No direct grant
n/aAudit log0No direct grant
n/aAudit log0No direct grant
n/aAudit log0No direct grant
n/aAudit log0No direct grant
n/aAudit log0No direct grant
n/aAudit log0No direct grant
Why

Evidence

  1. copilot_interaction · Sep 14, 2026
    Audit log: Contoso HR Assistant, 18 events, 7 people, in Copilot Studio, 18 resources accessed (0 labeled) in 30 days
    Detail
    {
      "hosts": [
        {
          "host": "Copilot Studio",
          "count": 18
        }
      ],
      "teams": [],
      "plugins": [],
      "operations": [
        {
          "count": 18,
          "operation": "CopilotInteraction"
        }
      ],
      "labelledResources": 0
    }