An agent only needs read access to one SharePoint site. How should its Entra Agent ID be permissioned?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Least privilege for agents means one site read, not Global Admin. Non-humans overprivilege too.
Full explanation below image
Full Explanation
Correct Answer — A
Agent identities should receive minimal permissions required for their function, scoped to resources needed.
Why B is wrong: Far excessive.
Why C is wrong: Inappropriate privilege class.
Why D is wrong: Overbroad Graph rights.
Exam tip: Agent permissions → least privilege scoped access.