Skip to content

Agent 365

Learning Status

📖 Initial overview complete — deeper dive pending. Last updated: 2026-04-04.

☕ Café Analogy

Your café now has 20 robot baristas (AI agents) — some make coffee, some take orders, some do inventory. But who's managing them? Who hired them? Do they all have access to the safe?

Agent 365 is the café manager's dashboard — it shows you every robot in the building, what they're doing, what they have access to, and lets you fire any rogue ones on the spot.

Without Agent 365, you have "agent sprawl" — shadow agents nobody governs. With it, agents become managed digital coworkers.

What Is Agent 365?

A unified control plane for managing AI agents across your entire Microsoft 365 environment:

  • Entra → manages human identities
  • Intune → manages devices
  • Agent 365 → manages AI agents ← this is new
Detail
GA date May 1, 2026
Price $15/user/month add-on, or included in E7 ($99/user/month)
Where Microsoft 365 Admin Center
Manages Microsoft agents, Copilot Studio agents, third-party agents, open-source agents

Architecture — Where Agent 365 Fits

┌────────────────────────────────────────────────────┐
│              MICROSOFT 365 ADMIN CENTER            │
│                                                    │
│  ┌────────────┐ ┌────────────┐ ┌────────────────┐  │
│  │   Entra    │ │  Intune    │ │  AGENT 365     │  │
│  │  (Users)   │ │  (Devices) │ │  (AI Agents)   │  │
│  └─────┬──────┘ └─────┬──────┘ └───────┬────────┘  │
│        │              │                │            │
│        ▼              ▼                ▼            │
│  ┌──────────────────────────────────────────────┐   │
│  │           SECURITY & COMPLIANCE              │   │
│  │                                              │   │
│  │  ┌──────────┐  ┌─────────┐  ┌────────────┐  │   │
│  │  │ Defender │  │ Purview │  │ Conditional│  │   │
│  │  │  XDR     │  │  DLP    │  │  Access    │  │   │
│  │  └──────────┘  └─────────┘  └────────────┘  │   │
│  └──────────────────────────────────────────────┘   │
└────────────────────────────────────────────────────┘

The 5 Pillars of Agent 365

Pillar What It Does ☕ Analogy
1. Registry Single searchable catalog of every agent in your org Staff directory for all robots
2. Identity Every agent gets an Entra Agent ID (unique identity) Name badge + access card
3. Lifecycle Create → deploy → monitor → update → retire agents Hiring to firing process
4. Governance Policies, access reviews, least-privilege, conditional access Rules about what robots can do
5. Observability Real-time dashboards, telemetry, activity logs, risk signals CCTV cameras watching every robot

The "Agent Sprawl" Problem

Without Agent 365:

  • Marketing built 3 agents in Copilot Studio
  • Sales deployed 2 agents from a vendor
  • IT doesn't know about any of them
  • One agent has read access to the CEO's mailbox
  • Nobody reviews what data agents access
  • No audit trail when something goes wrong

With Agent 365:

  • Every agent registered, visible, owned
  • Entra Agent ID = traceable identity
  • Conditional access policies applied
  • Purview DLP enforced on agent actions
  • Dashboard shows activity, risk, ROI
  • Rogue agents quarantined instantly

How It Connects to What You Already Know

You already know... Agent 365 equivalent
Entra ID for users Entra Agent ID for agents
Intune compliance policies for devices Agent 365 governance policies for agents
Purview DLP for user data Purview DLP for agent-generated content
Conditional Access for user sign-ins Conditional Access for agent actions
M365 Admin Center Same place — new "Agents" blade

Before and After

Aspect Before (Today) After (Agent 365)
Agent visibility Scattered across tools One registry
Identity Shared service accounts or none Unique Entra Agent ID per agent
Access control Whatever the creator configured Conditional Access + least privilege
Monitoring Manual, per-tool Unified dashboard + telemetry
Compliance Hope for the best Purview + Defender integrated
Shadow agents Unknown Discovered and quarantined

Customer FAQ

Question Answer
"Do we need this if we only have Copilot?" Yes — even Copilot Cowork creates agent-like behaviors that need governance
"Can it manage non-Microsoft agents?" Yes — supports third-party and open-source agents in the registry
"Is this just another admin console?" No — first time agents have first-class identity like users and devices
"When is GA?" May 1, 2026
"How much?" $15/user/month or included in E7 ($99/user/month)

Official Sources