Insight into Security Groups and AI Agents
Traditionally, monitoring focuses on the 'normal' user: an employee who logs in and performs specific actions. But what happens behind the scenes?
Technically speaking, security groups and AI agents behave exactly like users within the system. They acquire permissions, execute tasks, and have access to sensitive functionality. If these are not included in the risk analysis, blind spots form in your security. In our latest update, we made these new types of users visible.
What’s New?
1. Introducing AI Agents
Recently, AI agents have been introduced to Business Central. They work independently to get things done, which means they need
their own set of permissions. But how do you know if an agent has accidentally gained access to something sensitive? In our updated monitoring, these agents are now explicitly visible.
We’ve separated them by license type, letting you quickly distinguish between
human users and AI, so you can manage your risks without any confusion.
2. Transparency in Security Groups
Managing permissions with security groups is efficient, but it can obscure compliance insights when combined with regular permission
sets and organizational roles. After all, exactly which permissions does a user obtain through which group?
In the new update, we have made this completely transparent:
-
Direct insight: Security groups are now analyzed for risks, just like users.
-
The origin of permissions: When reviewing the analysis result of an
individual user, you can now see exactly which permissions are
assigned directly, which are obtained through membership in a security group, and which come from regular permission sets.
Complete oversight
With these additions, we ensure that your risk analysis is complete. Whether it concerns a new colleague, a smart AI assistant, or a complex permissions structure via groups: you stay in control.
The update is available immediately in the Authorization Box. Do you have questions about how to best interpret these new insights? Feel free to contact us.
