Microsoft 365: One-time cleanup of aged pending requests in All Agents

🚨 The Signal: Microsoft will permanently delete pending 'All Agents' requests older than June 1, 2026, on August 20, 2026. This cleanup removes stale requests, potentially impacting agent identity management and access approvals if not actioned.

The Impact

Administrators are affected, facing a risk of unintended access changes for agent identities if pending requests are not reviewed.

• Administrators: Risk of losing context on pending agent access requests.
• Security Team: Potential for unapproved agent access if critical requests are deleted.
• Compliance Officers: Difficulty in auditing agent identity lifecycle if requests are purged.

The Action

1. Navigate to All Agents > Requests in the Microsoft 365 admin center.
2. Filter pending requests created before June 1, 2026.
3. Review each identified pending request for its relevance and security implications.
4. Approve or reject any critical pending requests to preserve their status before August 20, 2026.

Domain: Agentic-AI · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges, Multi-Factor Authentication · ISM: ISM-0109, ISM-0123, ISM-0140, ISM-0445, ISM-0974, ISM-1173, ISM-1175, ISM-1228, ISM-1380, ISM-1401, ISM-1504, ISM-1505, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1679, ISM-1680, ISM-1681, ISM-1682, ISM-1683, ISM-1686, ISM-1688, ISM-1689, ISM-1815, ISM-1819, ISM-1872, ISM-1873, ISM-1874, ISM-1883, ISM-1892, ISM-1893, ISM-1894, ISM-1897, ISM-1898, ISM-1906, ISM-1907