Microsoft Agent 365: the control plane for your AI agents.

Microsoft Agent 365 is the Microsoft 365 service that works as the control plane for an organization's AI agents. It brings together in the Microsoft 365 admin center the agent registry, the agent map and agent analytics; it gives each agent an identity in Microsoft Entra Agent ID, with a sponsor who is accountable for it, and applies Conditional Access to it; and it extends Microsoft Purview and Microsoft Defender protection to agents. It works with agents from Copilot Studio, Microsoft Foundry and third parties. It has been generally available since May 1, 2026, is licensed per user and is included in Microsoft 365 E7, not in E3 or E5. Arcetec, a Microsoft partner in Colombia, implements it in four steps (inventory, identities, policies and protection, operations) and sells the licenses through CSP, invoiced in Colombian pesos.

See every agent working in your organization, decide which data it can reach and protect it with Microsoft Entra, Purview and Defender, from the Microsoft 365 admin center. Arcetec implements it and leaves it running.

Generally available since May 2026.
Microsoft and third-party agents in a single inventory.
Licensed per user, not per agent.

El registro de agentes de Microsoft Agent 365 en el Centro de administración de Microsoft 365: Asistente de compras, Soporte de TI, Revisor de contratos, Mesa de ayuda, cada uno con su plataforma y su patrocinador, y un agente que nadie había registrado pasa de la sombra a la cuarentena.

See the twelve features

What does Microsoft Agent 365 do?

Microsoft organizes it around three verbs: observe, control and protect. Each one relies on a tool your IT team already knows.

Observe — A registry with every agent, including the ones nobody registered; a map of who and what data each one works with, and reports for each role.
Control — Each agent with its identity in Microsoft Entra Agent ID, a sponsor who is accountable for it, access policies and rules for its entire lifecycle.
Protect — Microsoft Purview safeguards the data agents touch, and Microsoft Defender detects and blocks suspicious activity before it causes harm.

Which agents are working in your company today?

The registry and the agent map answer that question, including for agents nobody registered.

The registry brings together in a single list the agents with a Microsoft Entra identity, the ones people register and the ones from the Teams store. Microsoft Defender helps find the unregistered ones running on devices, and an unauthorized agent can be quarantined until someone reviews it. The agent map links each agent to the people who use it and the resources it reaches, and analytics show which ones are actually used. The twelve features, one by one, are in Microsoft Agent 365 features.

An inventory with Microsoft and third-party agents
Quarantine for unauthorized agents
Usage and performance of each agent
Dedicated views for security, compliance and IT

See the twelve features

El mapa de agentes de Microsoft Agent 365 une a Compras y Jurídica con el agente Asistente de compras y con SharePoint y Outlook, y marca en rojo una conexión que nadie aprobó, con Servidor MCP.

Who is accountable for each agent, and what can it access?

An agent is governed like a person: with an identity, someone accountable for it and access rules.

El agente Asistente de compras con su identidad en Microsoft Entra Agent ID y su patrocinador, y una política de acceso condicional que se enciende: bloquear si el riesgo del agente es alto; solo sitios de sharepoint aprobados; solo servidores mcp aprobados.

With Microsoft Entra Agent ID, each agent has its own identity and a sponsor: the person accountable for it. Copilot Studio agents receive it when they are created, with their creator as sponsor. Conditional Access and policy templates are applied to that identity, just as with any user: risk-based access, blocking of compromised agents and control over the tools they can use, MCP servers and connectors included.

Identity and sponsor for every agent
Risk-based Conditional Access
Which MCP servers, plugins and connectors they can use
Lifecycle rules: onboarding, review and retirement

What happens if an agent touches data it shouldn't?

The protections that already cover your people extend to your agents.

Microsoft Purview applies sensitivity labels, data loss prevention, auditing, retention and eDiscovery to what agents do. Microsoft Defender detects suspicious activity, blocks tool invocation and fixes misconfigurations. If your company already works with Defender and Purview, Agent 365 puts them to watch over agents too. It is the same foundation as our work in cybersecurity with Microsoft.

Sensitivity labels and data loss prevention
Auditing, retention and eDiscovery for every agent
Threat detection and tool blocking
Remediation of misconfigurations

Un incidente de Microsoft Defender sobre un agente: Un agente intentó enviar un archivo etiquetado como Confidencial fuera de la organización. La respuesta: invocación bloqueada y agente enviado a revisión.

Which agents can it govern?

Agents published through Microsoft 365 channels and registered with Microsoft Entra Agent ID appear in the inventory automatically. The rest are added with additional steps.

Copilot Studio — They receive their agent identity when created, with their creator as sponsor, and join the registry automatically.
Microsoft Foundry and Agent Framework — Custom-built agents are registered with the Agent 365 SDK.
Third-party agents — Published integrations from Box, Canva, Figma, Miro, n8n, Zendesk and Zoho, among others. In preview, sync with AWS Bedrock and Google Cloud.
Tools and MCP servers — Which MCP servers, plugins, skills and connectors agents can use, across the entire tenant.

What license does Microsoft Agent 365 require?

It is licensed per user, not per agent. These are Microsoft's terms as of October 2026.

Agent 365 is licensed per user: for those who use agents, those who manage them and those who sponsor them. Agents do not carry their own license, there is no cap on agents per licensed user and there are no consumption charges. It is included in Microsoft 365 E7, the suite that brings together Microsoft 365 E5, Microsoft 365 Copilot, Microsoft Entra Suite and Agent 365, and it can also be purchased separately. It is not included in E3 or E5. Arcetec sells Microsoft licenses as a CSP partner, invoiced in Colombian pesos, with the licenses in your own tenant.

Prerequisite to activate it

Microsoft 365 E5
Or Microsoft 365 E3 with Defender Suite and Purview Suite
Or Microsoft 365 Business Premium, among other plans
At least one user with an Agent 365 license

Get a quote for licenses

How does Arcetec implement Microsoft Agent 365?

The same team builds agents with Copilot Studio, configures Entra, Purview and Defender, and sells the licenses through CSP. That is why your agents are governed from day one.

Step 01 · Inventory — We activate the registry and review which agents already exist in your tenant, including the ones nobody registered.
Step 02 · Identities and owners — Each agent with its identity in Microsoft Entra Agent ID and a person accountable for it.
Step 03 · Policies and protection — Conditional Access, Purview labels and data loss prevention, and Defender alerts for agents.
Step 04 · Operations — Reports for each role and periodic review of each agent's lifecycle.

Frequently asked questions about Microsoft Agent 365.

What IT teams usually ask before bringing their agents under control.

What is Microsoft Agent 365?

It is Microsoft's control plane for AI agents. It brings together in the Microsoft 365 admin center the inventory of an organization's agents, control over what each one can do and their protection, with Microsoft Entra, Microsoft Purview and Microsoft Defender.

Which agents does it work with?

With Microsoft agents and third-party agents. Those published through Microsoft 365 channels and registered with Microsoft Entra Agent ID, such as Copilot Studio agents, appear in the inventory automatically. Those built outside these environments require additional steps, for example with the Agent 365 SDK.

What is Microsoft Entra Agent ID?

It is each agent's own identity in Microsoft Entra, with a sponsor who is accountable for it. It is available to all Entra customers; extending Entra protections such as Conditional Access to agents requires Agent 365.

Is it included in Microsoft 365 E5?

No. Microsoft 365 E3 and E5 do not include it. It is purchased separately or as part of Microsoft 365 E7, which brings together Microsoft 365 E5, Microsoft 365 Copilot, Microsoft Entra Suite and Agent 365.

Do you pay for each agent?

No. Agent 365 is licensed per user: for those who use, manage or sponsor agents. Agents do not carry their own license, there is no cap on agents per licensed user and there are no consumption charges.

What do you need before activating it?

One of the plans Microsoft requires as a prerequisite: Microsoft 365 E5; Microsoft 365 E3 with Microsoft Defender Suite and Microsoft Purview Suite; or Microsoft 365 Business Premium, among others. Microsoft 365 E3 with Copilot is not enough on its own. And at least one user with an Agent 365 license.

How does Arcetec implement it?

In four steps: the inventory of the agents that already exist, an identity and a sponsor for each one, access policies and protection with Purview and Defender, and operations with reports for each role. Licenses are purchased through Arcetec, a Microsoft CSP partner, invoiced in Colombian pesos.

Why don't you publish the price?

Because it changes with Microsoft's price list and the exchange rate. The quote is based on the number of people who will use, manage or sponsor agents in your company, using the current price list.

How many agents are working in your company today?

Let's review your tenant and we will tell you what it would take to have all of them visible, with an owner and protected.

Talk to a specialist

Official Microsoft sources

What this page says comes from Microsoft and is current as of October 2026: the service description, the Microsoft Learn documentation, the product page and the licensing FAQ. Microsoft updates Agent 365 every month: what is in preview may change before it reaches general availability.

Artículos sobre artificial intelligence

Topic:Artificial intelligence