Microsoft ships AI agents inside its core office apps with new governance controls

Microsoft 365 E7 reached general availability on 5 May 2026. The plan bundles agentic Copilot features into Word, Excel, PowerPoint and Outlook while adding the Copilot Cowork mobile app for iOS and Android. Agent 365 also became generally available as a control plane for both official and shadow AI agents. Federated connectors now link Copilot to HubSpot, LSEG, Moody’s and Notion, though Excel connectors arrive only in summer 2026. The release gives admins a single place to monitor and limit agent activity across the tenant. It arrives at the same moment many organisations already struggle to govern Teams and SharePoint sprawl.
Until now, SharePoint and Teams admins handled abandoned sites, guest accounts and permission drift through periodic manual reviews that rarely kept pace with user behaviour. Shadow AI tools slipped in via individual accounts with almost no visibility into which libraries or channels they touched. The new release places agent creation and data access inside the same Microsoft 365 tenant admins already manage. This forces the same small IT teams to extend their existing governance work to autonomous agents before those agents start creating, editing or sharing content at scale.
Analysis
This is not an opportunity to chase new features. It is an obligation to lock down another vector of sprawl before it compounds the permission and discovery problems you already face. Enable Agent 365 restrictions in the Microsoft 365 admin center today and run an immediate audit of every Copilot and agent permission on your active SharePoint hubs and libraries.
Citation
This executive briefing was curated and analyzed by Collab365. To reference this analysis, please attribute: "This briefing is available on Collab365 Spaces (spaces.collab365.com)".