Microsoft Purview for agents: AI observability and insider risk management now generally available

Microsoft Purview for agents, including DSPM – AI Observability and Insider Risk Management, will be generally available by late May 2026. It enables Microsoft 365 E7 or Agent 365 admins to monitor AI agent activity, assess risks, enforce governance, and manage insider risks with privacy controls, supporting compliance and security. As organizations deploy AI agents that can access enterprise data and take action on behalf of users, governing and securing agent activity becomes critical. Microsoft Purview will extend its data security and compliance capabilities to include AI agents, helping organizations gain visibility into agent behavior, assess risk, and apply consistent governance controls. Microsoft Purview for agents will introduce Data Security Posture Management (DSPM) – AI Observability and Insider Risk Management for agents. DSPM helps organizations understand where sensitive data is, assess data-related risk, and continuously improve their security and compliance posture. This message is associated with Microsoft 365 Roadmap ID 516032. When this will happen Public preview: Rollout started in December 2025 and is expected to complete in late April 2026. General availability (Worldwide): Rollout will begin in early May 2026 and is expected to complete by late May 2026. How this affects your organization Who is affected Microsoft 365 administrators responsible for security, compliance, and governance Organizations using or planning to deploy AI agents Tenants with Microsoft 365 E7 or Agent 365 subscriptions What will happen DSPM – AI Observability and Insider Risk Management for agents will move from preview to general availability. Learn more about activation. With Microsoft 365 E7 or Agent 365 subscriptions, admins will be able to: Monitor and analyze AI agent activity across enterprise environments Identify potentially risky or non-compliant agent behavior Apply governance policies aligned with organizational requirements Insider Risk Management for agents Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Admins will be able to create policies based on their own internal policies, governance, and organizational requirements. The solution is built with privacy by design: Users are pseudonymized by default. Role-based access controls and audit logs […]

The post Microsoft Purview for agents: AI observability and insider risk management now generally available appeared first on M365 Admin.