Microsoft Entra ID · Developer & Technical
Agent Registry Administrator
Manages all aspects of the Agent Registry service in Microsoft Entra ID including metadata, collections, and visibility of AI agents.
Scope: Full administration of the Agent Registry for AI agents
Permissions
- Manage agent metadata
- Manage agent collections
- Control agent visibility
- Assign registry roles to users/agents
Common use cases
- Organizing AI agents in registry
- Managing agent discoverability
- Controlling agent access
Best practices
- Categorize agents properly
- Review visibility settings
- Document registry structure
Security considerations
- Controls agent exposure
- Affects agent discoverability
Common questions
When should I assign the Agent Registry Administrator role?
Assign Agent Registry Administrator when you need to: Organizing AI agents in registry; Managing agent discoverability; and Controlling agent access. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Agent Registry Administrator role do?
The Agent Registry Administrator role grants permissions including: Manage agent metadata; Manage agent collections; Control agent visibility; and Assign registry roles to users/agents. See the Permissions section above for the full list.
What are the security risks of the Agent Registry Administrator role?
Key considerations when assigning Agent Registry Administrator: Controls agent exposure; and Affects agent discoverability. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.