Microsoft announces controls to assess, limit and stop AI agents
Checked on
Published on
Tools to monitor and stop AI agents working inside a company: what they allow.

In this article
The essentials
On 19 October, Microsoft announced features that assess the risk of AI agents in companies, reduce their rights or stop them.
Why it is needed
Microsoft calls AI agents the company’s new “insiders”: like employees, they access data and systems and act on their own. The company says it runs hundreds of thousands of them internally; at that scale, humans can no longer monitor them one by one.
Three new features
① Dynamic Agent Risk: a risk assessment continuously updated from the agent’s identity, data, devices, cloud, network and activity. ② Dynamic Permissions: only the permissions needed for a task, for its duration; human approval can be required for high-impact actions. ③ Dynamic Conditional Access: a graduated response when risk rises — reduced rights, writes blocked, human approval, shutdown.
Detecting and monitoring
Detection covers 35 more types of local agents, 60 in all, including Claude Code, OpenAI Codex and GitHub Copilot. Each agent receives an identity distinct from the user’s (Entra Agent ID). Project Perception adds “Guardian Agents” and “Playbooks”: playbooks define the desired security outcomes, and Guardian Agents act within the framework set by humans.
To keep in mind
The announcement does not specify the availability date. This article is based on Microsoft’s blog.
Learn the grammar
French grammar
Learn sentence patterns and usage from the article’s own sentences.
01The present indicative
est / sont + attribute (noun, adjective, prepositional phrase)
Pourquoi c’est nécessaireKey pointsÊtre in the present is est for a singular subject and sont for a plural one. It describes nature, state or place (“is”, “is located”). If what follows (the attribute) is a noun, adjective or prepositional phrase, it is not a passive. If a past participle follows, it is a passive (est annoncé). Headlines and summaries often use the present to describe the current situation.
02The passé composé
present of avoir + past participle
Le 19 octobre, Microsoft a annoncé des fonctions qui évaluent le risque des agents d’IA en entreprise, réduisent leurs droits ou les arrêtent.Key pointsThe passé composé is the most common past tense, used for “did” and “has done” — actions completed in the past. It is formed with the auxiliary avoir (a / ont…) in the present + a past participle. Past participles of -er verbs end in -é (annoncer → annoncé); learn the irregular ones (faire → fait, prendre → pris, voir → vu). In the negative, ne … pas wraps the auxiliary (n’a pas annoncé). In the news it reports facts that have already happened, such as “announced” or “voted”.
03Negation and its scope
ne / n’ … pas · ne … plus
L’entreprise dit en faire tourner des centaines de milliers en interne ; à cette échelle, les humains ne peuvent plus les surveiller un par un.Key pointsNormally ne and pas wrap the verb. Before a vowel, ne becomes n’. Check which part of the sentence the negation covers. Ne … plus means “no longer”.
04Pouvoir: ability and possibility
peut / peuvent / pourrait + infinitive
① Dynamic Agent Risk : une évaluation du risque mise à jour en continu à partir de l’identité, des données, des terminaux, du cloud, du réseau et de l’activité de l’agent. ② Dynamic Permissions : seules les permissions nécessaires à une tâche, pour sa durée ; une approbation humaine peut être exigée pour les actions à fort impact. ③ Dynamic Conditional Access : une réponse graduée quand le risque monte — droits réduits, écritures bloquées, approbation humaine, arrêt.Key pointsPut a base-form verb after pouvoir. Peut means “can” or “may”; the conditional pourrait gives a more reserved possibility, “might”. It does not necessarily mean implementation is settled.
05Purpose with pour
pour + infinitive
Des outils pour surveiller et arrêter les agents d’IA qui travaillent dans l’entreprise : ce qu’ils permettent.Key pointsThis is the purpose, “in order to…”. Put the base form of a verb after pour. The purpose stated here is separate from whether the effect was actually achieved.
06The subject relative pronoun qui
noun + qui + verb
Des outils pour surveiller et arrêter les agents d’IA qui travaillent dans l’entreprise : ce qu’ils permettent.Key pointsQui continues a description of the person or thing just mentioned (“the one that does…”). Because qui is itself the subject of the next verb, do not repeat the subject. The verb agrees with the noun qui refers to.
07Dates and their prepositions
le + 日付 / du … au …
Le 19 octobre, Microsoft a annoncé des fonctions qui évaluent le risque des agents d’IA en entreprise, réduisent leurs droits ou les arrêtent.Key pointsLe 15 octobre means “on 15 October”. Distinguish the le before a date from the le that marks a weekly habit like a weekday. Du is de + le and au is à + le, so decide the meaning from the verb and period expressions around them. Their role depends on the group: a range of dates, the date of a bulletin or another complement.
Japanese grammar
Understand the structure and usage from the text.
01Cause or purpose with ため
〜ため / 〜ために
会社の中で動くAIエージェントを、見張って、止めるための機能です。Key pointsため is used for both reason and purpose. “成立ではないため” is a reason and “運転手を守るため” a purpose. Decide from the whole sentence whether what precedes is a cause or a goal.
02Giving examples with など
noun / expression + など
①「ダイナミック・エージェント・リスク」は、ID、データ、端末、クラウド、ネットワーク、エージェント自身の動きなどの情報から、危険度を、いつも測り続けます。Key points“暴言など” gives “abusive language” as one example. It is not necessarily a closed list of only the things named. It also helps when reading the scope of a news story.
03The polite past ました
verb stem (連用形) + ました
マイクロソフトは19日、社内のAIエージェントの危険度を測り、必要なら権限を減らしたり、止めたりする機能を発表しました。Key pointsIn “発表しました”, ました makes a verb polite past. The negative is “ませんでした”. Read the actual date together with the date and time in the text.
04Quoting with と: content and report
plain-form sentence + と + verbe de parole (報じる, 説明する…)
同社は、社内でも、数十万のエージェントが動いていると説明しています。Key pointsと takes the content that is reported or explained. In “改定する方針だと報じました”, “改定する方針だ” is what the report said. Separating the content from who said it and how makes long sentences easier to read.
05Treating a clause like a noun with こと
plain-form sentence + こと + particle
エージェントが増えると、1つひとつを、人が見張ることはできません。Key points“〜すること” treats an action or content like a noun. The particle after it (が・を・は…) shows its role in the sentence. “ことができる” is a fixed combination meaning “can”.
06Possibility in Japanese: できる・られる
verb potential form / 〜ことができる
何ができるのかを整理します。Key pointsできる is the basic verb for ability. The potential form of 受ける is 受けられる. The same られる can also be passive or honorific, so decide from the meaning of the sentence.