Copilot Agent Controls Arrive, but Default Access Remains

Beginning Sept. 25, 2026, administrators will be able to restrict advanced Copilot agent and plug-in uploads to specified users or groups. This capability is intended to give organizations more control over who can introduce new AI features into the tenancy, helping to contain spending from consumption-based agent capabilities. However, the immediate risk is that beginning Oct. 25, 2026, advanced package uploads will be enabled by default unless administrators configure restrictions.

Microsoft has not defined which agents or plug-ins qualify as advanced packages. The term likely refers to extensibility components that include external connections, custom actions, or packaged deployment artifacts.

Although this control indicates Microsoft’s continued investment in agent governance, organizations remain responsible for creating the governance model.

Timeline:

• Sept. 25, 2026: Control becomes available in the Microsoft 365 admin center
• Oct. 25, 2026: Advanced uploads become