Copilot Studio agent action authority

Place an action check in the connector-backed API or flow before mutation.

01 / Principal and identity

Who acts, and what can the platform identify?

A published agent may act through a user or maker-provided connection.

Copilot Studio supports user authentication and agent-author connections for tools.

Trace the proposed action
  1. 01Originating task
  2. 02Agent or workload
  3. 03A connector action updates a service ticket or customer record.
  4. 04Observed effect

02 / Action-time control

Where can an unauthorized effect be stopped?

Place an action check in the connector-backed API or flow before mutation.

Distinguish the signed-in user, connection owner and authorized task.

SubjectVerified caller and task
RequestOperation, target and values
OutcomeDecision, attempt and state

Delegation constraint

A maker connection can make an action technically possible for many users without granting each task the same authority.

03 / Worked denial

Test a request outside the grant.

An agent attempts to close a high-severity incident using a maker connection.

Adversarial verification

Run one high-severity incident closure with user authentication and one with an agent-author connection. Verify the downstream workflow requires the case owner in both modes.

04 / Review and responsibility

What should the audit trail prove?

Agent/session reference, connection mode, user, incident, approval, connector call and resulting state.

ProofGrid provides downstream authority control without claiming a certified Copilot Studio connector or vendor endorsement.

Platform primary source

Check the current execution model

Architecture discussion

Map one consequential action in your environment.

Request a Conversation