> Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover
[DATE: 28/04/2026 06:37]
[LANGUAGE: EN]
An administrative role meant for artificial intelligence (AI) agents within Microsoft Entra ID could enable privilege escalation and identity takeover attacks, according to new findings from Silverfort.
Agent ID Administrator is a privileged built-in role introduced by Microsoft as part of its agent identity platform to handle all aspects of an AI agent's identity lifecycle operations in a