May 1st, 2026
0 reactions

Sponsor group type requirements for agent identities

As part of moving to general availability (GA) for Entra Agent ID, agent blueprints, agent blueprint principals, and agent identities only accept dynamic membership groups andĀ Microsoft 365 groups as group-type sponsors.Ā In addition, role-assignable groups were supported during the Agent ID public preview but aren’t included in the GA release. Ā 

Why we’re making this changeĀ 

Sponsors are a critical attribution mechanism in Agent ID. When an admin or automation queries “who is responsible for this agent?” or “whichĀ agentsĀ is this user responsible for?”, the sponsor relationship must resolveĀ quickly and reliablyĀ to ensure a good experience.Ā Ā 

We’re making these changes to ensure the best performance while still enabling customers to use groups as sponsors of their Agent ID objects. Dynamic membership groups and Microsoft 365 groups are optimized for the patterns that sponsors require. By narrowing the supported set, we ensure that these operations remain fast and predictable as Agent ID adoption grows.Ā 

What this means for youĀ 

  • New sponsor assignmentsĀ must use dynamic membership groups or MicrosoftĀ 365 groups. Attempts to assign other group types as sponsors will be rejected.Ā 
  • Existing sponsors from other group types that are already set on your agent identities or blueprints continue to function. No customer action is required.Ā 
  • Individual usersĀ remain fully supported as sponsors, with no changes.Ā 

Recommended action and next stepsĀ 

If your current workflows assign fixed-membership security groups or role-assignable groups as sponsors, transition to dynamic membership groups or Microsoft 365 groups before your next provisioning cycle. For details about how to configure sponsors, see Administrative relationships in Entra Agent ID.Ā 

We continue to accelerate the pace of development in Agent ID and Entra ID, and we plan to add support for new group types as Agent ID sponsors later this year. We also listen to customer feedback and will evaluate the priority of supporting role-assignable groups in the future. Watch this blog for updates!Ā 

Author

The Microsoft Entra Agent ID team

0 comments