Microsoft Agent 365: Everything You Need to Know in 2026

AI agents are no longer a research concept. They are running inside enterprises right now — booking meetings, processing invoices, triaging support tickets, and making decisions on behalf of employees. Tools like ChatGPT and Gemini have already proven what AI can do for individual productivity, and now the focus is shifting to autonomous agent fleets. The problem? Most organizations have zero visibility into what these agents are doing, what data they can access, or whether they are even authorized to exist.

Microsoft Agent 365 is Microsoft’s answer to that governance gap. It went generally available on May 1, 2026, and positions itself as the first dedicated control plane for managing AI agents at enterprise scale. Think of it as an IT admin console, but instead of managing users and devices, you are managing autonomous AI agents.

We have spent the past week digging into the platform, its capabilities, its pricing, and its limitations. Here is the full breakdown.

Quick Stats

Our Rating	7.5 / 10
Price	$15/user/month (standalone) or $99/user/month (Microsoft 365 E7 bundle)
Best For	Mid-to-large enterprises running multiple AI agents across Microsoft and multi-cloud environments
Platform	Microsoft 365 Admin Center, integrates with Azure, AWS Bedrock, Google Cloud
Developer	Microsoft
Category	AI Agent Governance and Security
Release Date	May 1, 2026 (GA)

Key Takeaways

• Agent 365 is not an AI agent itself — it is the platform that governs your AI agents. It provides visibility, identity management, threat detection, and policy enforcement for agents built across Copilot Studio, Azure AI Foundry, local runtimes, and even third-party platforms.
• The standalone license costs $15 per user per month. But the realistic total cost is significantly higher once you factor in consumption-based charges for agent runtime, which Microsoft does not govern through Agent 365.
• Cross-cloud registry sync is the standout feature. Agent 365 can discover and inventory agents running on AWS Bedrock and Google Cloud — a capability no competing product offers today.
• Several key security features are still in preview. Runtime threat protection through Defender for Cloud Apps and Defender for Cloud will not reach GA until later in 2026, meaning the “full security” pitch is only partially delivered at launch.
• The Microsoft 365 E7 bundle at $99/user/month is 15% cheaper than buying the components separately. If you already need E5, Copilot, and Entra Suite, the math works out.
• Small businesses should wait. If you are running fewer than a handful of agents, the cost and complexity of Agent 365 is difficult to justify right now.

What Is Microsoft Agent 365?

Microsoft Agent 365 is a dedicated management and security platform for AI agents operating within (and beyond) your Microsoft 365 environment. It is built on three core pillars: observe, govern, and secure.

Observe means you get a centralized dashboard showing your entire agent fleet — total registered agents, active users, growth trends, connected platforms, total runtime hours, and emerging risk signals. For the first time, IT teams can actually see how many AI agents are running across their organization.

Govern means you can apply consistent policies to agents regardless of where they were built or how they run. Agents built in Copilot Studio, Azure AI Foundry, or even local OpenClaw runtimes on Windows endpoints all fall under the same governance umbrella. Through Microsoft Entra, each agent gets its own identity, simplifying audit logging and access reviews.

Secure means Microsoft Defender and Microsoft Purview extend their existing capabilities to cover agents. Defender provides continuous threat detection and real-time protection to block unsafe agent behaviors. Purview handles data visibility, information protection, DLP, and risk safeguards.

In practical terms: if an agent in your organization suddenly starts accessing files it should not, Agent 365 flags it. If someone spins up a rogue agent on a local runtime, Agent 365 discovers it. If an agent on AWS Bedrock is interacting with your Microsoft data, Agent 365 can see it.

Core Features Breakdown

Agent Registry and Discovery

Agent 365 maintains a central registry of all agents in your organization. It automatically discovers agents across:

• Microsoft Copilot Studio — agents built using Microsoft’s no-code/low-code agent builder
• Azure AI Foundry — custom agents built on Azure’s AI platform
• Local OpenClaw runtimes — agents running directly on Windows endpoints
• AWS Bedrock (public preview) — cross-cloud agent discovery
• Google Gemini Enterprise Agent Platform (public preview) — cross-cloud agent discovery

The cross-cloud capability is particularly notable. No other agent governance platform currently ships with the ability to discover and monitor agents across AWS and Google Cloud environments.

Entra Agent IDs

Every agent gets a dedicated identity through Microsoft Entra. This means agents are treated as first-class identities — just like users and devices — with risk-based access controls, conditional access policies, and full audit trails.

This solves a real problem. In most organizations today, agents operate under the identity of the user who created them, making it nearly impossible to track what the agent did versus what the human did.

Defender and Purview Integration

Microsoft Defender adds runtime threat detection for agents, blocking unsafe behaviors and flagging malicious activity. Microsoft Purview provides DLP and information protection, ensuring agents do not leak sensitive data.

Important caveat: the agent-specific runtime protection features in Defender for Cloud Apps and Defender for Cloud are still in public preview as of May 2026. Full GA for these features is expected around June 2026 or later.

Overview Dashboard

The Agent 365 dashboard gives IT admins a real-time view of:

• Total registered agents and active users
• Agent growth trends over time
• Connected platforms and runtimes
• Total agent runtime in hours
• Emerging risk signals and policy violations

Context Mapping (Coming June 2026)

Microsoft Defender will provide asset context mapping for each agent — showing the devices they run on, MCP servers configured for them, the identities associated with them, and the cloud resources those identities can reach. This is expected to arrive via Intune and Defender public preview in June 2026.

Pricing and Licensing

Here is where it gets complicated. There are two ways to buy Agent 365:

Plan	Price	What’s Included
Agent 365 Standalone	$15/user/month (annual commitment)	Agent governance, registry, Entra Agent IDs, Defender/Purview integration
Microsoft 365 E7	$99/user/month with Teams ($90.45 without Teams)	Everything in E5 + Copilot + Entra Suite + Agent 365
Buying components separately	~$117/user/month	E5 ($60) + Copilot ($30) + Entra Suite ($12) + Agent 365 ($15)

The E7 bundle saves you roughly 15% compared to buying each component individually. If your organization already uses or plans to use E5, Copilot, and Entra Suite, the E7 bundle is the obvious choice.

The Hidden Cost: Consumption Billing

Here is the part Microsoft does not emphasize in the marketing: Agent 365 does not govern consumption spend. The $15/user/month covers the governance platform itself. But the actual cost of running your agents — compute, API calls, token usage — is billed separately through Azure consumption meters.

For organizations with non-trivial agent workloads, the realistic monthly cost can be 2x to 3.5x the headline per-seat price. This is the single biggest gotcha in Agent 365’s pricing model, and IT teams need to account for it in their budgets.

How It Fits with Copilot Cowork

Microsoft also recently launched Copilot Cowork, which takes a different but complementary approach. While Agent 365 is the governance and security layer, Copilot Cowork is the execution layer — it lets users delegate multi-step, long-running tasks to AI agents directly within Microsoft 365 apps.

Cowork is now available on iOS and Android as of May 2026, supports custom plugins and native integrations with Fabric and Dynamics 365, and even offers Anthropic’s Claude Opus 4.7 model as a selectable option alongside Microsoft’s default model routing.

Agent 365 sits underneath all of this. When Copilot Cowork deploys an agent to process your quarterly report or triage your inbox, Agent 365 is what ensures that agent has the right permissions, is not accessing unauthorized data, and is not exhibiting suspicious behavior.

Pros and Cons

Pros

• Fills a genuine gap. No other platform provides centralized governance for AI agents across Microsoft, AWS, and Google Cloud environments.
• Entra Agent IDs are well-designed. Treating agents as first-class identities with their own access controls and audit trails is the right architectural choice.
• Deep Microsoft stack integration. If you are already invested in Defender, Purview, Entra, and Intune, Agent 365 plugs in cleanly without requiring a separate security stack.
• Cross-cloud registry sync is a strategic differentiator. Being able to discover and monitor agents on AWS Bedrock and Google Cloud is something competitors simply do not offer yet.
• The E7 bundle pricing makes sense for organizations that already need the full Microsoft security and productivity stack.

Cons

• Key security features still in preview. Runtime threat protection through Defender for Cloud is not GA yet, which undercuts the security pitch at launch.
• Consumption costs are not governed. The biggest expense of running agents — compute and API usage — falls entirely outside Agent 365’s scope.
• Reactive rather than proactive discovery. By the time an agent appears in Agent 365, it is already live. The platform does not catch agents at the moment of instantiation, creating a window of unmonitored activity.
• Complexity and cost are high for smaller organizations. At $15/user/month before consumption costs, this is hard to justify for teams running only a few agents.
• Cross-cloud sync is still in public preview. The AWS Bedrock and Google Cloud integrations are not yet production-ready.

Who Is This For?

Agent 365 is built for mid-to-large enterprises (500+ seats) that are already running multiple AI agents across their organization and need centralized governance.

Specifically, it is a strong fit if you:

• Already run Microsoft 365 E5 and are considering the E7 upgrade
• Have agents deployed across Copilot Studio, Azure AI Foundry, and potentially AWS or Google Cloud
• Face regulatory or compliance requirements around AI agent governance
• Need audit trails and identity management for autonomous AI systems
• Have an IT security team that needs visibility into agent activity across the organization

It is not a good fit if you:

• Are a small business or startup with fewer than 50 users — see our best AI tools for small business instead
• Only run one or two simple agents in Copilot Studio
• Do not have an existing Microsoft security stack (Defender, Purview, Entra)
• Are looking for a tool that manages agent costs — Agent 365 does not do this

For smaller organizations, we recommend waiting until Q4 2026 when the preview features mature and Microsoft potentially introduces a lighter-weight tier.

Verdict: 7.5 / 10

Microsoft Agent 365 tackles a problem that every enterprise will need to solve in the next 12 months: how do you govern AI agents at scale? The vision is compelling, the architecture is sound, and the cross-cloud discovery capability is genuinely ahead of the market.

But the execution is still catching up. Key security features remain in preview at launch. The pricing model hides significant consumption costs behind a clean per-seat number. And the platform is reactive rather than proactive when it comes to discovering new agents.

For large enterprises deep in the Microsoft ecosystem with regulatory pressure and a growing fleet of AI agents, Agent 365 is worth adopting now — with the understanding that you are buying into a platform that will mature significantly over the next two quarters.

For everyone else, it is worth watching closely but not rushing to deploy. The agent governance space is moving fast, and by late 2026, the competitive landscape will look very different.

Our rating: 7.5 out of 10. Solves the right problem with the right architecture, but needs another quarter or two to fully deliver on its promises.

Frequently Asked Questions

What is the difference between Microsoft Agent 365 and Microsoft Copilot?

Copilot is the AI assistant embedded in Microsoft 365 apps — it helps you write emails, summarize meetings, and analyze data. Agent 365 is the governance layer that manages, monitors, and secures AI agents (including those built with Copilot Studio) across your organization. They are complementary products, not competitors. For a comparison of AI assistants themselves, see our GPT-5.5 vs Claude Opus 4.7 breakdown.

Do I need Microsoft 365 E5 to use Agent 365?

No. Agent 365 is available as a standalone license at $15/user/month. However, it works best when paired with Microsoft Defender, Purview, and Entra, which are included in E5. Without these, you lose significant governance and security capabilities.

Does Agent 365 work with non-Microsoft AI agents?

Yes, through the cross-cloud registry sync feature (currently in public preview). Agent 365 can discover and monitor agents on AWS Bedrock and Google Gemini Enterprise Agent Platform. It also manages agents running on local OpenClaw runtimes on Windows endpoints.

Is Agent 365 included in Microsoft 365 E7?

Yes. Microsoft 365 E7 ($99/user/month) bundles E5, Copilot, Entra Suite, and Agent 365 together at roughly a 15% discount compared to purchasing each component separately.

Can Agent 365 control how much my agents spend on compute?

No. This is a common misconception. Agent 365 governs agent identity, access, data protection, and threat detection. It does not monitor or control Azure consumption costs associated with running agents. You will need Azure Cost Management or similar tools for that.

When will the preview features reach general availability?

Microsoft has indicated that runtime threat protection through Defender and context mapping through Intune will enter public preview in June 2026, with GA expected later in the year. Cross-cloud registry sync for AWS and Google Cloud does not have a confirmed GA date yet.

Is Agent 365 worth it for small businesses?

For most small businesses, not yet. The cost, complexity, and the fact that several features are still in preview make it difficult to justify. If you are running fewer than 50 users with simple agent deployments, wait until the platform matures and pricing potentially adjusts for smaller tiers.