Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Security Copilot agents in Intune are AI-powered assistants that enhance enterprise security. They automate tasks for endpoint protection, identity management, threat intelligence, and device configuration. They help IT teams quickly address vulnerabilities, policy gaps, and emerging threats.
Agents are built on Microsoft Security Copilot's generative AI and automation capabilities. They observe, reason, and act with oversight and review from your administrators. Each agent is tailored to a specific use case, operates within the Intune admin center, and uses role-based access controls.
Available agents
Microsoft Intune includes specialized Security Copilot agents, each designed for a specific security scenario. The following agents are available:
Change Review Agent
The Change Review Agent evaluates the effect of approval requests in Intune and makes recommendations for the actions you can take.
Device Offboarding Agent
The Device Offboarding Agent identifies stale or misaligned devices across Intune and Microsoft Entra ID, providing actionable insights and requiring admin approval before offboarding any devices.
Policy Configuration Agent
With the Policy Configuration Agent, you import documents or write instructions in plain language. The agent uses this information to find matching settings in the Intune settings catalog and recommends values for these settings. You can then use the agent to create a policy with those settings and their values.
Vulnerability Remediation Agent
The Vulnerability Remediation Agent uses Defender data to monitor vulnerabilities and prioritize remediation with AI-driven risk assessments.
Getting started with agents
Prerequisites
Before you begin, make sure you have:
- Security compute units (SCU) available
- Reviewed the Privacy and data security in Microsoft Security Copilot to understand how your data is handled.
Setup process
- Enable Security Copilot using the Security Copilot setup guide.
- Sign in to the Microsoft Intune admin center using the least privileged role required for the agent you want to configure.
- Browse to Agents and select View details for the agent you want to configure.
Agents in the Microsoft ecosystem
While this article focuses on Intune agents, similar agents are available across other Microsoft security products. For more information, see:
Related content
Help shape the future of Intune agents
Join our Intune Agents Feedback Forum to share insights and influence upcoming capabilities in Microsoft Intune.
Sign up and learn more: https://aka.ms/IntuneAgentsForum