Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

Microsoft patched a critical vulnerability in the Agent ID Administrator role within Entra ID that allowed privilege escalation and service principal takeover.

• •The Agent ID Administrator role, designed for AI agent identity management, could allow users to become owners of arbitrary service principals
• •Attackers could add credentials to authenticate as compromised service principals with elevated permissions
• •This vulnerability enabled privilege escalation if service principals held high-impact Graph permissions or directory roles
• •Microsoft released a patch on April 9, 2026, blocking unauthorized ownership assignments with a Forbidden error
• •Organizations should monitor role usage, track ownership changes, and secure privileged service principals