Copilot Agents are powerful. They can answer questions, automate tasks, and even create workflows. But before your org goes wild building agents, let’s talk about admin controls—and the one thing admins don’t control.
Where to Find It
Head to Microsoft 365 Admin Center → Settings → Copilot → Data Access → Agents. This is your command center for managing who can create, use, and share agents.
What Admins Can Control
From the panel on the right, you’ll see two key toggles:
- Who can access agents
- All users: Everyone gets access.
- No users: Lock it down completely.
- Specific users/groups: Granular control for pilot programs or sensitive workflows.
- Who can share agents with the entire organization
- All users who can access agents: Broad sharing.
- No users: Keep agents private.
- Specific users/groups: Limit sharing to trusted roles.
Admins can also manage third-party language models, Copilot in Power Platform, and data security/compliance from the same settings page.
What Admins Can’t Control
Here’s the kicker: Admins don’t decide which users can create agents. That’s baked into the licensing and Copilot experience itself. If a user has the right Copilot capabilities, they can create agents—no extra toggle for that. This is your command center for managing who can create, use, and share agents.
What about you all? Have you found further ways to restrict the agent creation process?