Skip to content
Get packs

Entra Agent User Setup

Walks an agent through creating a Microsoft Entra agent user account with Graph API calls.

Source Download skill
Repository
github/awesome-copilot
Stars
40,703
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent step-by-step instructions for creating an 'agent user' in Microsoft Entra ID, Microsoft's identity service. An agent user is a user-type account that lets an AI agent act like a digital worker, for example to access Exchange mailboxes, Teams, or org charts that normally require a real user login. The skill covers verifying the parent agent identity, creating the user via Microsoft Graph, optionally assigning a manager, and setting a usage location and licenses.

Great for

  • Developers building AI agents that must work inside Microsoft 365 or Teams
  • Microsoft 365 or Entra administrators provisioning identities for agents
  • Teams experimenting with Microsoft Entra Agent ID

Skip it if

  • People without a Microsoft Entra tenant with Agent ID features, since the steps will fail without it
  • Anyone wanting a general-purpose agent or non-Microsoft identity setup, because it is specific to Entra and Graph beta endpoints
  • Use in production without review: it creates accounts with licenses and access to mail and org data, which is a security-sensitive action

Try asking

  • “Create an agent user for my existing agent identity in our Entra tenant”
  • “Show me the Graph API calls to assign a manager and a Microsoft 365 license to an agent user”
  • “Verify that my service principal is a true agent identity before creating an agent user”
  • “Write a PowerShell script to provision an agent user with usage location US”
Step-by-step guide: how to use Entra Agent User SetupInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    entra-agent-user.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip entra-agent-user.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip entra-agent-user.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Use the least-privileged permission (AgentIdUser.ReadWrite.IdentityParentedBy) and test in a non-production tenant first
  • Check that the parent is a true agent identity (ServiceIdentity) before running the create call, since regular app service principals will fail
  • Review the generated Graph requests yourself before running them, as they create directory accounts and assign licenses

What's inside

  • SKILL.md

Redistributed unmodified from github/awesome-copilot under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.