SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

You have a Microsoft 365 subscription, and every user has a Microsoft Exchange Online mailbox.

You use Microsoft Entra Agent ID to register and manage AI agents. Your developers create these two agents:

• Agent1: An interactive agent that helps users summarize their own Exchange Online email.
• Agent2: An autonomous agent that sends nightly updates to a Microsoft Teams channel.

You must grant each agent Microsoft Graph access while minimizing access scope and satisfying its operating model. Which permission type should be assigned to each agent?

Each permission type can be used once, more than once, or not at all.