core-concept · Operating model · emerging · Reviewed
Agent estate governance
Portfolio governance for discovering and registering every enterprise agent with its identity, sponsor, owner, purpose, risk tier, platform, models, tools, data, dependencies, status, value, and exceptions.
Definition
Portfolio governance for discovering and registering every enterprise agent with its identity, sponsor, owner, purpose, risk tier, platform, models, tools, data, dependencies, status, value, and exceptions. Each agent can look acceptable while the unmanaged estate becomes ungovernable.
Agent registries are arriving, while cross-platform discovery and enforcement remain fragmented.
Why it matters
Each agent can look acceptable while the unmanaged estate becomes ungovernable.
The operating shift is from “Project-by-project inventory” to “A continuously governed agent estate.”
System anatomy
- Practice 1
- Discover and register agents across every build surface
- Practice 2
- Block ownerless, duplicate, expired, or unapproved agents
- Practice 3
- Measure risk, value, control coverage, and exception debt as a portfolio
Important distinctions
- Project-by-project inventory
- This concept moves the engineering system toward a continuously governed agent estate.
Implementation signals
- Discover and register agents across every build surface
- Block ownerless, duplicate, expired, or unapproved agents
- Measure risk, value, control coverage, and exception debt as a portfolio
Failure modes
- Shadow agents operating outside inventory
- A registry that is stale, voluntary, or disconnected from enforcement
Sources and further study
- Microsoft Agentic Center of Excellence — Manage the agent lifecycle
A product-lifecycle model spanning intake, deployment, monitoring, improvement, ownership, evaluation, and deliberate retirement.
Use in this library: Official guidance. Guidance describes recommended practice; citation does not prove that a control is implemented or effective in a particular environment.
guidance · guidance · Published 2026-07-14 - Microsoft Entra ID Governance — Governing Agent Identities
An identity-governance model for agent sponsors, access packages, ownership continuity, lifecycle workflows, and enable or disable decisions.
Use in this library: Official guidance. Guidance describes recommended practice; citation does not prove that a control is implemented or effective in a particular environment.
guidance · guidance · Published 2026-06-16 - NIST NCCoE — Identity and Authority for Software Agents concept paper
A concept paper exploring how established identity and authorization practices can apply to software and AI agents.
Use in this library: Official guidance. Guidance describes recommended practice; citation does not prove that a control is implemented or effective in a particular environment.
guidance · guidance · Published 2026-02-05