Microsoft Teams: Unified Agent and App Installation Management Across Microsoft 365 and Teams Admin Center

🚨 The Signal: App and agent installation policies are now unified across Teams, Outlook, and Microsoft 365 Copilot. This centralises control, simplifying management but requiring careful review of existing configurations to prevent unintended agent deployments.

The Impact

Security teams and M365 administrators are affected, with a risk of unintended agent deployments if existing policies are not reviewed.

• Security Teams: Risk of unauthorised agent execution if policies are not aligned.
• M365 Administrators: Need to review and consolidate app/agent installation policies.
• Copilot Users: Potential for new agent functionality based on unified policies.

The Action

1. Review existing app installation policies in Microsoft 365 admin center (admin.microsoft.com).
2. Review existing app installation policies in Teams admin center (admin.teams.microsoft.com).
3. Consolidate and align app and agent installation policies for consistent enforcement.
4. Test unified policies in a non-production environment before broad deployment.

Domain: M365-Apps · Impact: medium · Workload: Teams · Essential Eight: Application Control · ISM: ISM-0843, ISM-1490, ISM-1544, ISM-1582, ISM-1656, ISM-1657, ISM-1658, ISM-1659, ISM-1660, ISM-1870, ISM-1871