The operating model

The Sabiki Adoption Loop

The operating model of the AI Identity Control Plane for Microsoft 365: one plane to see, govern and control every non-human identity (NHI). It runs as a repeatable, five-stage loop that takes any Microsoft 365 customer from “we're nervous about AI” to “we run AI with confidence”, and gives the MSP a service to sell at every stage. Because NHI sprawl never stops, the loop never closes.

Discover Understand Govern Enable Optimise back to Discover
01
Discover

See every non-human identity.

Connect a Microsoft 365 tenant agentless and read-only, and surface every non-human identity (NHI): agents, Copilots, service principals, OAuth apps and automation.

AIRM capability

Agentless, read-only discovery via the Microsoft Graph API, full AI & non-human identity inventory, same day.

Your MSP service

AI Identity Onboarding Review & the free NHI Risk scan, your first paid engagement and the discovery artefact.

02
Understand

Know the risk and who owns it.

Score each identity for risk and blast radius, establish ownership, and map the picture to the governance frameworks that apply.

AIRM capability

Three-axis risk scoring, Identity Graph, the NHI Risk Score and mapping to 11 frameworks.

Your MSP service

A branded risk report and advisory conversation, turning findings into a remediation plan.

03
Govern

Put a human in control.

Bring every non-human identity under continuous control, allow, challenge, pause or block, with an audit trail and evidence for boards and insurers.

AIRM capability

Governance actions, continuous policy, and end-to-end audit & compliance reporting.

Your MSP service

AI Agent & NHI Governance, a monthly managed service that keeps every client tenant under control.

04
Enable

Say yes to AI, safely.

With risk understood and controls in place, the customer can switch on Copilot and agents with confidence, adoption stops stalling at the pilot.

AIRM capability

Prioritised remediation and a clean, governed baseline to deploy AI against.

Your MSP service

Copilot & AI go-live enablement, the service that converts a stalled pilot into safe production.

05
Optimise

Keep it safe as it grows.

AI identity sprawl never stops, so governance never ends, continuous monitoring, re-assessment and quarterly evidence keep the estate healthy and the MSP embedded.

AIRM capability

Continuous monitoring, trend tracking, re-scoring and quarterly posture reporting.

Your MSP service

AI Identity Risk Posture, a quarterly review and QBR input that renews on its own evidence.

The Loop is how the control plane runs. Every AIRM capability and every MSP service maps to it.

Run the framework on a client, free.

Start at Discover: register free and run one full NHI Risk assessment on any Microsoft 365 tenant.

Free NHI Risk Score →

The Sabiki Adoption Loop™ is Sabiki Security's methodology for safe, MSP-delivered AI adoption on Microsoft 365. (“AI adoption framework” is a generic industry term we deliberately don't claim.)

← Back to resources