Free AI Agents, the E7 Bill and AD vs Entra | Workplace Ninjas US

Summary

The episode previews technical sessions and discussions for Workplace Ninjas US, focusing on AI agents, Microsoft 365 security, licensing, and the relationship between Active Directory (AD) and Microsoft Entra.

AI Agents for Administration

Ugur Koc argues that many everyday Microsoft Graph and Defender portal tasks don’t require expensive cloud compute or high-tier licensing. He describes running agents locally with an open-source large language model on modest hardware, potentially on a device with 8 GB of RAM.

He discusses a YAML-based agent framework that connects to MCP servers and can use a local model such as Ollama with Qwen. The goal is to make agents easier to build and configure than agents in Security Copilot.

Koc also plans to cover security reviews of community projects. He describes using AI-assisted checks to find code issues, then fixing them through pull requests before projects are released. The security discussion includes safe MCP use and proper handling of API keys and other secrets. The speakers caution against exposing secrets in repositories.

Agent Identity and Licensing

The panel discusses Microsoft Entra Agent ID and licensing for applying Conditional Access to managed identities. Agent registration and visibility are available without a paid license, but Conditional Access protections for agents may require Agent 365 or Microsoft 365 E7.

The speakers warn that without the necessary licensing, an agent accessing services such as Microsoft Graph could bypass the intended Conditional Access protections. They present licensing requirements as an important and potentially confusing part of securing agents.

Microsoft 365 Security Guidance

Ru Campbell previews a live, 60-minute walkthrough of hardening a clean Microsoft 365 tenant. A key starting point is a Conditional Access policy that blocks access from unmanaged devices.

The session will cover Conditional Access best practices, common mistakes, approaches that work at scale, and what different Entra and Microsoft 365 licensing tiers provide—from Entra Free and P1 through E5 and E7. The discussion frames E7 as relevant when adding agent capabilities, rather than as a prerequisite for basic tenant security.

AD and Entra

Jon Towles describes an event debate between Merill Fernando, who works primarily with Entra, and Spencer Alessi, an AD specialist. The speakers emphasize that cloud-managed devices and cloud-based identities are separate decisions: moving devices to the cloud does not necessarily mean identities must be cloud-only.

The AD-versus-Entra discussion is presented with humor while addressing real customer questions about whether to retain AD or move fully to cloud identity.

Product Mention

A sponsor segment promotes ENow Software’s App Governance Accelerator 4.0 for Entra app connections. The segment highlights configurable, multi-stage approvals; Microsoft Defender for Cloud Apps risk assessments; and centralized requests and reviews. The product is intended to reduce manual administration while improving oversight of SaaS and AI applications.

Reviews, Guides, and Tutorials

No formal product review is presented. The episode previews practical conference sessions on:

• Building low-cost, local AI agents for administrative tasks.
• Reviewing community tools and securing agents, MCP connections, and secrets.
• Hardening a Microsoft 365 tenant in 60 minutes, beginning with a managed-device Conditional Access policy.
• Reviewing Conditional Access practices and licensing considerations for agents.

Main Speakers and Sources

Merill Fernando (host), Jon Towles, Ugur Koc, Ru Campbell, and Spencer Alessi. Campbell’s Conditional Access session is described as a joint session with Eveyna.