Manage who can upload advanced agents and plugins

Starting September 25, Microsoft 365 admins can control who uploads advanced Copilot agents and plugins, limiting access to specific users or Entra ID groups. This governance feature rolls out worldwide by October 2026, with default uploads enabled unless admins configure restrictions by October 25. Basic uploads remain unaffected. What and Why: To help organizations manage the deployment of advanced Copilot extensibility scenarios, we are introducing a new admin control that determines who can upload advanced agents and plugins. This enhancement strengthens enterprise governance and manageability by allowing administrators to limit advanced-package uploads to specific users or Microsoft Entra ID groups while maintaining flexibility for organizations that want broader access. Rollout Schedule: General Availability (Worldwide): Rollout begins September 25th Expected completion by the end of October 2026. Impact on Your Organization: Who is affected: Microsoft 365 administrators responsible for managing Copilot agents and plugins. Organizations that allow users to upload advanced agents or plugins. Users who create or upload advanced agents and plugins after this feature becomes available. Platforms/Services: Microsoft 365 Copilot and Cowork surfaces Copilot agents Copilot plugins Microsoft Entra ID What will happen: On September 25th, the control will be visible in MAC (see Advanced package uploads screenshot) and admins will have until October 25th to select their preference of all users, no users or specific users or groups. Starting October 25th, Advanced-package uploads will be enabled by default unless the admin has selected no users or specific users or groups. Admins can configure uploads for all users, selected users, Entra ID groups, or no users. Basic package uploads remain allowed and are not impacted. The setting applies only to advanced agents and plugins uploaded after the control becomes available. No action is required to maintain current behavior, Action Required/Recommendations: Review the advanced-package upload setting when it becomes available on September 25th. Determine whether advanced-package uploads should be available to all users, selected users, groups, or no users prior to October 25th. Update internal administrator and help desk documentation as needed. Inform support teams of the new governance control. If no action is taken, advanced-package uploads remain allowed by […]

The post Manage who can upload advanced agents and plugins appeared first on M365 Admin.