Viva Learning: Copilot experience transitions to Learning Agent in Microsoft 365 Copilot

🚨 The Signal: Viva Learning's Copilot experience is shifting to a unified Learning Agent within Microsoft 365 Copilot. This centralises AI-driven learning assistance, potentially broadening access to AI capabilities and requiring administrative review of agent permissions.

The Impact

All Viva Learning users and M365 administrators are affected, with the security risk being the uncontrolled deployment of a new AI agent.

• Viva Learning users: May be prompted to install a new AI agent, potentially exposing them to unapproved AI interactions.
• M365 administrators: Must review and manage the deployment of a new AI agent, risking unmanaged AI access if not configured.
• Security teams: Need to assess the new AI agent's data access and interaction capabilities for compliance.
• Organisations: Risk unapproved AI agent deployment if administrative action is not taken to restrict access.

The Action

1. Review your organisation's policy on AI agent deployment and usage within Microsoft 365.
2. Access Microsoft 365 Admin Center to verify and configure permissions for the Learning Agent.
3. Implement or update policies to restrict or permit Learning Agent access based on your security posture.
4. Communicate approved usage guidelines for Learning Agent to end-users.

Domain: Agentic-AI · Impact: medium · Workload: Other