entra-agent-user

Create Microsoft Entra ID agent users from agent identities.

1|Updated Feb 23, 2026
One-click install
npx skills add https://github.com/Gabeujin/workspace-init-mcp --skill entra-agent-user-gabeujin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: entra-agent-user
Source: https://github.com/Gabeujin/workspace-init-mcp/tree/main/awesome/skills/entra-agent-user
Command: npx skills add https://github.com/Gabeujin/workspace-init-mcp --skill entra-agent-user-gabeujin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enables AI agents to act as digital workers within Microsoft 365 and Azure by creating dedicated user identities in Microsoft Entra ID, allowing them to access user-specific APIs and services securely.

Core Features & Use Cases

  • Digital Worker Identity: Creates agentUser identities in Entra ID, distinct from application identities.
  • M365 Service Access: Grants agents the ability to interact with services like Exchange Online and Microsoft Teams as a user.
  • Use Case: An AI agent needs to send an email on behalf of a department. This Skill provisions an agentUser for the AI, assigns it a mailbox, and allows it to send emails via Exchange Online APIs.

Quick Start

Use the entra-agent-user skill to create a new agent user with the display name 'Sales Bot' and user principal name '[email protected]', linked to agent identity '00000000-0000-0000-0000-000000000000'.

Frequently Asked Questions about entra-agent-user

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Microsoft Entra ID user identity for an AI agent?

You can provision an agentUser in Microsoft Entra ID by linking it to a pre-existing agent identity service principal, which enables the AI agent to perform actions as a digital worker within Microsoft 365 and Azure environments.

What is an agentUser in Microsoft Entra ID?

An agentUser is a dedicated user identity created in Entra ID for an AI agent. It is distinct from application identities and allows the agent to securely access user-specific APIs and services like Exchange Online and Microsoft Teams.

Do I need specific Microsoft Graph API permissions to provision an agentUser?

Yes, provisioning an agentUser requires specific Microsoft Graph API permissions and a pre-existing agent identity service principal to issue tokens with idtyp=user for accessing M365 services.

How does an AI agent access Microsoft 365 services as a digital worker?

An AI agent accesses Microsoft 365 services as a digital worker by using an agentUser identity to issue tokens with idtyp=user. This facilitates secure scenarios like email management, calendar access, and Microsoft Teams interactions.

Can I use an application identity instead of an agentUser for Microsoft Teams interactions?

Using an application identity is different from creating an agentUser. The agentUser approach specifically issues tokens with idtyp=user to grant AI agents access to user-specific APIs and services within Microsoft 365 environments.