The response log keeps what the agent said, not the path it took. The Foundry trace keeps the order of the steps, the failures and the tokens of each turn, and leaves the content to a protected table. See what the trace shows, who can see the content and what changed in Agent Framework 1.22.0, with an example run locally.
An agent can consume Copilot Credits in Work IQ, capacity in Fabric, and tokens or PTUs in Foundry. Examine the meters, a calculated example, and how to separate consumption, attributed cost, and the invoice without counting an operation twice.
Learn to discover paths, inspect schemas, and read messages with Work IQ MCP. A read-only example shows why fewer tools do not remove access, coverage, and authorization boundaries.
The slide had a single box labeled Microsoft IQ, and the relationship manager's agent got one question right out of four. Microsoft IQ is the name of a set: Work IQ, Fabric IQ, Foundry IQ and Web IQ, each with its own question, data home, status per component, identity and boundary. This article maps the four layers: what is GA and what is in preview, who answers in each one, where they meet and how far the data goes.
RAG over Microsoft 365 used to be your pipeline: a connector, a vector index, a sync job and permissions re-created by hand. Microsoft Work IQ takes that pipeline out of your hands — and charges in identity: there is no application-only authentication, every call runs as a person and tenant policy blocks writes by default. This article shows what changes, what stays with you and how to compose Work IQ with Foundry, Microsoft Fabric data agents and Databricks Genie without swapping the identity on the way.
The user prompt was clean. The hostile instruction came in through the content the tool brought back — and that is the door almost no security review looks at. This article gathers what moved in the 2026 OWASP Top 10, the two Prompt Shields intervention points, the spotlighting that ships off by default, what the MCP specification protects and what it leaves to you — and shows what has to be in place so a successful injection does not become impact.
Five sources per agent, answers capped at 25 rows by 25 columns, documented support for English only, and read-only queries: the Fabric data agent has an entry contract no prompt renegotiates. This article gathers the six source categories, the output limits, the asking user's identity, and the two retirements of 26 August — and shows what has to be in place before the pilot becomes a commitment to the business.
Microsoft Entra Agent ID reached general availability, and in Microsoft Foundry the agent identity is provisioned for you. Understand blueprints, the shared project identity and the RBAC that does not carry over on publish, why a sponsor is required at creation, how leaver workflows transfer sponsorship to prevent orphaned agents, and why the token subject decides where a Conditional Access policy actually lands.
A2A connects independent agents; MCP connects tools and resources. Understand tasks, identity, and trust across delegation, then follow a complete Python example to deploy and call an A2A agent in Microsoft Foundry, with RBAC and explicit preview limitations.
A vector index is a copy, and a copy inherits no permissions: the Databricks AI Search documentation states that row and column level permissions are not supported. The two routes an agent takes to the data — RAG and text-to-SQL —, where the access rule lives on each one, the Genie Agent's two credentials, and the metric layer that stops the number from changing.