Microsoft · Technologies
Agent 365
Every AI agent in your organisation. One register. One set of rules.
Microsoft Agent 365 is the control plane for AI agents. It gives you one place to observe, govern and secure every agent in your organisation, including agents your people build and agents from other vendors. We help you set it up before agents multiply, not after.
AGENT REGISTER · EXAMPLE TENANT
AGENT
OWNER
DATA SCOPE
STATUS
Invoice-Triage
Finance
Dynamics 365
GOVERNED
HR-Onboarder
People
SharePoint HR
GOVERNED
Quote-Builder
Sales
CRM + Pricing
REVIEW
legacy-bot-07
Unknown
Unscoped
SHADOW
Field-Safety
Operations
Power Apps
GOVERNED
Sample register
Governed · in review · shadow
In plain terms
You would not put unmanaged laptops on your network. The same discipline now applies to AI agents.
Agent 365 gives you one place to see every agent in your organisation, who owns it, what data it can touch and what it is allowed to do. Here is what changes.
Without Agent 365
- Nobody can say how many agents exist in your environment
- Agents built in Copilot Studio and other tools ship without review
- There is no audit trail when a client or an assessor asks questions
- Security teams say no to new AI projects, or do not hear about them at all
With Agent 365
- A live register shows every agent, its owner and its data scope
- New agents enter through a front door with the right approvals
- Agent activity is logged and visible in Defender and Purview
- Security teams can say yes, because the guardrails are already in place
What CG TECH can do with Agent 365
The work, broken into the parts that matter.
One register for every agent
Most organisations already have more agents than they think. Agent 365 provides a central registry in the Microsoft 365 admin centre, and its discovery tools use Microsoft Defender and Intune to find agents running in the cloud and on devices, including shadow agents nobody signed off. We run discovery, then catalogue what exists, who owns it and what data it touches.
a complete agent register you can govern from
Identity and access policy
Every agent gets a Microsoft Entra identity, an owner and a scope, the same way your people do. Conditional Access policies extend to agents, so access is checked against real time risk. We set who can build, deploy and use which agents, and wire approvals so new agents enter through a front door.
enforceable rules, not a policy document
Monitoring, audit and acceptable use
The Agent 365 dashboard shows agent activity, usage and risk signals in real time. We configure monitoring so you can see what each agent does and with which data, set clear guardrails for acceptable use, and use Microsoft Purview so records are kept and you stay audit ready.
an audit trail your security team and auditors can rely on
Integration with your security posture
Agent 365 lands inside the controls you already run. Microsoft Defender extends threat protection to agents, Purview covers data security and loss prevention, and Intune applies device policy. Agent risk shows up in the same view as every other risk, not in a side channel.
one security picture, not a side channel
How an engagement runs
From kickoff to live governance, step by step.
01
Discover
We inventory your environment, find the agents that already exist and map each one against data sensitivity.
02
Design
We set identity, access policy and monitoring rules to fit how your organisation actually works.
03
Enable
We switch on governance, connect Defender and Purview, and test the guardrails on real agents.
04
Handover
Your team gets the register, a runbook and training so it runs without us.
Copilot Cowork Cost Estimator
What would Copilot Cowork cost your team?
Work out your likely monthly spend in AUD and projected return on investment. See your licensing and estimated credit usage.
Start your estimate →Takes about 2 minutes. Get instant access and a detailed report emailed to you.
Questions we hear a lot
Common questions about Agent 365
What is Microsoft Agent 365?
Agent 365 is Microsoft’s control plane for AI agents. It gives you one place to see, govern and secure every agent in your organisation, including agents your own people build and agents that came from other vendors. It became generally available on 1 May 2026.
Do we need Agent 365 if we only use Copilot?
Copilot itself is governed by your Microsoft 365 controls. The agents your people build in Copilot Studio and beyond are not covered the same way. Agent 365 is what brings those agents under proper management.
How is this different from Defender or Purview?
Defender protects against threats and Purview protects data. Agent 365 governs the agents themselves: their identity, inventory, permissions and behaviour. It plugs into both, along with Microsoft Entra and Intune.
What does Agent 365 cost?
Agent 365 is licensed per user. At launch, Microsoft priced it at 15 US dollars per user per month standalone, and it is also included in the Microsoft 365 E7 suite. We confirm licensing for your situation during discovery so there are no surprises.
We have not built any agents yet. Is this too early?
It is the best time. Setting up governance before agents multiply is far cheaper than untangling sprawl later, and it lets you say yes to AI projects with confidence.
What actually counts as an agent?
Anything that acts on your behalf rather than waiting to be asked: a Copilot Studio agent answering staff questions, an agent triaging a mailbox, a vendor tool that reaches into your data. The problem Agent 365 solves is that these arrive from different places and nobody holds the full list.
Do agents need their own identity?
Yes, and treating them like staff accounts is the shift most businesses have not made yet. An agent with its own identity can be given permissions, reviewed and switched off. An agent running under a person’s account cannot be told apart from that person.
What should we do before agents multiply?
Write down what you already have, give each one an owner, and agree who can create new ones. That register is the thing every business wishes it had started six months earlier, and it takes an afternoon at the beginning.
Ready when you are
Want to talk about Agent 365?
A discovery session maps your environment, your risks and your quick wins. You keep the plan either way.
What to expect
- A consultant replies within 4 business hours
- Session booked to understand your requirements
- We will provide you with a fixed price quote