Agent 365 for GCC Is Available, but It Has Security, Compliance, and Other Gaps with Commercial

• Microsoft 365 G7 mirrors E7 by adding Agent 365, which brings agent governance, observability, and identity control to GCC customers.
• Several Purview and Defender protections in Agent 365 that are available to commercial customers aren’t yet available for GCC customers.
• Missing audit, DLP, threat-detection, and runtime controls could limit production use of higher-risk agents.
• Government organizations should evaluate Agent 365 GCC and in the G7 suite for its functionality gaps compared to the commercial version.

Microsoft 365 (M365) G7, generally available as of Oct. 1, 2026, targets state and smaller government entities via the Government Community Cloud (GCC). G7 builds on G5 by adding Agent 365, M365 Copilot, and Entra Suite components. Agent 365 (also available à la carte without G7) provides a centralized control plane for discovering, managing, governing, and securing AI agents. However, Agent 365 for GCC doesn’t currently deliver the complete feature set that’s available to commercial customers. The gaps could affect whether government organizations can approve autonomous or data-sensitive agents for production use. (Microsoft plans to release the G7 suite to GCC High [U.S. federal government] and Department of Defense [DoD] customers prior to the end of 2026.)