Aristo
Security · what Aristo holds
Aristo reads Contoso with 5 required read permissions plus 1 opt-in grant — none of them a write, each consented by your admin in Entra.
counted from your tenant’s app token, read live
13 application permissions Aristo asks for6 granted
Granted, reads only 6Granted, can write 0Not granted 7
What each agent your people built may reach — as its maker attested when it was built. Microsoft exposes no per-agent permission inventory, so this is the maker’s own answer, and labeled as one.
Scroll sideways for the remaining columns.
| Agent | Web search | OneDrive and SharePoint | Risk tier |
|---|---|---|---|
| Renewal brief | No | Yes | low |
| Bid librarian | Yes | Yes | medium |
| Month-end checklist | No | Yes | low |
| Onboarding buddy | No | Yes | low |