Microsoft Agent 365

Microsoft Agent 365 is a Microsoft 365 service that provides a centralized control plane for AI agents. It enables organizations to discover, manage, govern, and secure agents across their environments. Agent 365 works with agents built on Microsoft platforms and with agents built or acquired from third‑party sources; and integrates with Microsoft 365 administration, identity, security, and compliance capabilities.

Available plans

Microsoft Agent 365 is available as a stand-alone subscription for use with eligible Microsoft 365 subscriptions and is also included with Microsoft 365 E7.

For detailed plan information on subscriptions that enable users for Microsoft Agent 365, see the Microsoft 365 Enterprise plan comparison, Microsoft 365 Business plan comparison, and Microsoft 365 Education plan comparison.

Feature availability

Note

As of October 1, 2026 Microsoft Agent 365 meets all FedRAMP High controls reviewed by Microsoft's independent third-party assessor. Final authorization by Microsoft's accrediting agency is pending.

The following table describes core Agent 365 capabilities:

Features	Management Console	Included with Microsoft 365 Enterprise, Business, Education, and Front Line Worker plans	Requires Microsoft 365 E7 / G7 or Agent 365	GCC Availability
Inventory of agents across the organization in the Agent Registry	Microsoft 365 Admin Center	Yes	Yes	Yes
Basic governance actions on agents (publish, deploy, block, delete, approve; assign agents to specific user/groups; reassign agent owner, pin, etc.)	Microsoft 365 Admin Center	Yes	Yes	Yes
Automate agent lifecycle actions using conditions-based rules	Microsoft 365 Admin Center	Yes	Yes	Yes
Synchronize agents and agent metadata from external platforms that aren’t managed by Agent 365 into the registry	Microsoft 365 Admin Center	Yes	Yes	Yes
Policy templates applying customized policies and controls to agents	Microsoft 365 Admin Center	No	Yes	Yes
Observability and monitoring of agent activity (Visualization and telemetry)	Microsoft 365 Admin Center	No	Yes	Yes
Control which tools (including Microsoft MCP servers) agents can access tenant-wide	Microsoft 365 Admin Center	No	Yes	Yes
Graph API provides access to agent registry, basic metadata, and governance actions	N/A	No	Yes	No
Access packages for agents to define scope of agent permissions	Entra	No	Yes	Yes
Built‑in Entra lifecycle policies automate sponsor‑driven workflows to maintain accountability	Entra	No	Yes	Yes
Conditional access and identity protection for agents (for agents with delegated access - extend user policies to agents)	Entra	No	Yes	Yes
Monitor and block malicious and noncompliant network traffic for agents, operating on user devices, and for Copilot Studio agents​	Entra	No	Yes	No
Audit logs of agent activities and eDiscovery (content search) of agent interaction to export and hold for legal, regulatory, and investigative needs	Purview	No	Yes	No
Data Lifecycle Management for agent-generated data and interactions in line with regulations and org policies	Purview	No	Yes	No
Detect and review noncompliant agent interactions; extend compliance manager to agents to assess, manage, and demonstrate AI compliance	Purview	No	Yes	No
Data Security Posture Management with AI Observability provides deep interaction visibility for agents	Purview	No	Yes	No
Extend Insider Risk Management to agents – detect anomalous and risky agent activities	Purview	No	Yes	No
Agents inherit and honor data sensitivity labels	Purview	No	Yes	No
Data loss prevention – block agents from accessing and sharing sensitive content	Purview	No	Yes	No
Sync shadow AI endpoint agents	Defender	No	Yes	No
Identify and remediate agent misconfigurations and exposure risks, relationship mapping for local agents (agent to devices, MCPs, etc.)	Defender	No	Yes	No
Detect suspicious agent activity, receive alerts, and allow blocking for tool invocations for agents	Defender	No	Yes	No
Collect Agent 365 unified agent observability logs and allow investigation and hunting for threats for agents	Defender	No	Yes	Yes
Device compliance for agent conditional access	Intune	No	Yes	Yes
Policy-controlled environment for agents runtime	Intune	No	Yes	No
Block unsanctioned local endpoint agents	Intune	No	Yes	No

Learn more

For more information about Microsoft Agent 365, check out the following resources:

• Microsoft Agent 365 overview
• Microsoft Agent 365 documentation

Messaging

To stay informed of upcoming changes, including new and changed features, planned maintenance, or other important announcements, visit the Message center.

Licensing terms

For licensing terms and conditions for products and services purchased through Microsoft Commercial Volume Licensing Programs, see the Product Terms site.

Accessibility

Microsoft remains committed to the security of your data and the accessibility of our services. For more information, see the Microsoft Trust Center and the Office Accessibility Center.