MT.1205: Agent Identity Blueprints and Blueprint Principals should have assigned sponsors (Preview).
| ID | MT.1205 |
| Severity | Medium |
| Suite | Mito |
| Product | Entra ID |
| Feature | Agent identities |
| Security area | AI and agents |
| Resource type | Agent |
| User impact of fixing | Low |
| Effort to fix | Low |
| Framework controls | nist-800-53-r5:AC-2 Account Management |
| Reads from | Microsoft Graph |
| Lifecycle | Preview |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Agent Identity Blueprints and Blueprint Principals should have assigned sponsors.
Sponsors provide business ownership and ongoing accountability for AI agents. While technical owners maintain configuration and authentication settings, sponsors justify why the agent exists, approve access scopes, and ensure the agent’s activities remain aligned with organizational security policies.
This check audits all Agent Identity Blueprints and Blueprint Principals to verify that designated sponsors are assigned.
Remediation action:
Section titled “Remediation action:”- Open the Microsoft Entra admin center and navigate to Entra ID > Agents > Agent blueprints.
- Search for the reported Blueprint or Blueprint Principal by its Object ID or display name.
- Under Access, select Owners and sponsors.
- Select the Agent blueprint or Agent blueprint principal tab for the reported object.
- Select Add > Add sponsor, choose the appropriate business manager or department lead, and select Add.
- Verify that the active sponsors are listed.
Related links
Section titled “Related links”Mito check. Author: agnivesh. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.