Microsoft 365 Admin Center: Control Settings for agents with actions in Teams Toolkit

🚨 The Signal: A new Microsoft 365 Admin Center control allows administrators to restrict who can publish advanced Copilot agents with custom actions created via Teams Toolkit. This directly impacts the governance and security posture of agentic AI deployments.

The Impact

Admins and Security Teams are affected by new controls over agent deployment, reducing the risk of unauthorized or insecure agent actions.

  • Admins: New control over advanced agent publishing, reducing uncontrolled AI agent proliferation.
  • Security Teams: Enhanced ability to govern agent identities and their actions, mitigating AI-related risks.
  • Agent Makers: Potential restrictions on publishing advanced agents, requiring admin approval.
  • Organisations: Improved posture against rogue AI agents and data exfiltration risks.

The Action

  1. Navigate to Microsoft 365 Admin Center.
  2. Locate the new control setting related to 'agents with actions' or 'advanced agents' in Teams Toolkit.
  3. Review and configure the setting to restrict publishing capabilities to authorized agent makers.
  4. Communicate policy changes to agent developers and relevant stakeholders.

Domain: Agentic-AI · Impact: high · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898