Episode 431: Agent Governance Is the New App Governance

Jul 2, 2026

They dig into agent sprawl across Copilot, Copilot Studio, and third-party platforms and why governance is suddenly critical. Identity, data access, permissions, and lifecycle issues from agents are highlighted as distinct from traditional apps. Microsoft Agent 365, agent registries, risk scoring, and the admin center’s inventory tools get a close look. Lifecycle and unexpected billing risks are also flagged as urgent concerns.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

ANECDOTE

Short Personal Email Became Others' Accounts

Scott described receiving invoices and account messages because strangers used his short Outlook.com address to register services.
He can't reclaim or delete some accounts because sign-in or phone-based recovery belongs to the stranger who registered them.

ANECDOTE

Authenticator Prompts Became Noisy And Opaque

Ben and Scott described frequent Authenticator push spam and the loss of detailed sign-in telemetry that once helped diagnose unusual prompts.
Microsoft removed much of the sign-in detail, leaving opaque push prompts without clear origin information.

INSIGHT

Agents Combine Identity Data And Autonomy

Agents blur identity and data boundaries: they have creators, owners, permissions, and can act autonomously or on behalf of users.
That mix creates data-leak and orchestration risks when agents call external LLMs or APIs without clear controls.

Get the Snipd Podcast app to discover more snips from this episode

Get the app

Welcome to Episode 431 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott get into why agent governance is quickly becoming one of the most pressing challenges for Microsoft 365 administrators. As agentic workflows become more common across Copilot, Copilot Studio, and third-party platforms, organizations are dealing with a sprawl problem that looks familiar but hits differently. Agents bring their own identity, data access, permissions, lifecycle, and security concerns all at once, and unlike traditional apps, a single user can now have dozens of agents acting on their behalf or autonomously across Teams, SharePoint, Exchange, and beyond.

The episode walks through Microsoft Agent 365 as a starting point for building that control plane, including the agent registry, user and permission scoping, and the certification tab where publisher attestation gives some visibility into compliance claims though with notable gaps. Ben and Scott also touch on the Shadow AI preview in the Frontier program, the challenges of graph permission readability in the permissions view, and why the agent lifecycle problem, think what happens when the person who built a custom agent leaves the org, is something administrators need to start thinking about now before consumption billing turns an unmanaged agent into a surprise line item.

Show Notes

About the sponsors

Nasuni is a leading unstructured data platform for enterprises where file data is mission-critical for both people and AI. Nasuni powers the operational file layer where work happens — helping organizations manage, protect, and activate data so teams can work smarter, reduce costs, and operate securely without limits.

TrustedTech is a leading Microsoft Cloud Solution Provider (CSP) specializing in Microsoft Cloud services, Microsoft perpetual licensing, and Microsoft Support Services for medium and enterprise-sized businesses. Their robust team of in-house, U.S.-based Microsoft architects and engineers are certified in all 6/6 Microsoft Solutions Partner Designations in the Microsoft Cloud Partner Program.

ShareGate is your migration and governance solution for Microsoft 365. ShareGate helps your teams simplify tenant migrations, get Copilot-ready, and take control of Microsoft 365 governance.

Intelligink — Would you like to become the irreplaceable Microsoft 365 resource for your organization? Let us know!