Microsoft adds dashboard and shadow detection for AI agents in M365
The May 2026 update to Agent 365 introduces an overview dashboard that displays real-time metrics on agent activity and usage. A centralized registry now stores metadata for every agent, complete with a visual map of how agents connect across the tenant. Governance features include lifecycle actions, approval flows, and policy templates drawn from SharePoint, Teams, Entra, Purview, and Defender. Preview capabilities cover registry sync with AWS Bedrock and Google Cloud plus shadow AI detection and blocking for local agents through Defender and Intune. Admins gain unified inventory, automated rules, and DLP extension to agent activity, with eDiscovery support for agent interactions.
Until now, AI agents and Copilot extensions appeared in the same uncontrolled way Teams once did, created by anyone with a license and left to accumulate without naming standards or retirement dates. Small IT teams already spent hours auditing external sharing and abandoned sites; adding ungoverned agents simply multiplied the same compliance exposure. The new registry and shadow detection change the equation by tying agent activity directly to existing SharePoint and Teams policies, but only for teams that configure the connections and run the scans. Without that step, the tools remain dormant while hidden agents continue to access document libraries and channels.
Analysis
Treat the registry as an early warning system, not a future project. Enable the Defender shadow AI detection preview today and export the first scan results to identify any agents already touching your SharePoint libraries or Teams channels.
Citation
This executive briefing was curated and analyzed by Collab365. To reference this analysis, please attribute: "This briefing is available on Collab365 Spaces (spaces.collab365.com)".