Manage who can upload advanced agents and plugins

A new admin control will allow Microsoft 365 administrators to manage who can upload advanced Copilot agents and plugins, enhancing governance by limiting uploads to specific users or Entra ID groups. This feature rolls out worldwide starting October 12, 2026, with no action needed to maintain current settings.

[What and Why:]

To help organizations manage the deployment of advanced Copilot extensibility scenarios, we are introducing a new admin control that determines who can upload advanced agents and plugins. This enhancement strengthens enterprise governance and manageability by allowing administrators to limit advanced-package uploads to specific users or Microsoft Entra ID groups while maintaining flexibility for organizations that want broader access. This aligns with Microsoft's Enterprise-ready AI commitment by giving admins greater control over how advanced AI-powered solutions are introduced into their environments.

[Rollout Schedule:]

• General Availability (Worldwide): Rollout begins October 12, 2026.
• Expected completion by the end of October 2026.

[Impact on Your Organization:]

Who is affected:

• Microsoft 365 administrators responsible for managing Copilot agents and plugins.
• Organizations that allow users to upload advanced agents or plugins.
• Users who create or upload advanced agents and plugins after this feature becomes available.

Platforms/Services:

• Microsoft 365 Copilot
• Copilot agents
• Copilot plugins
• Microsoft Entra ID

What will happen:

• Advanced-package uploads will be enabled by default.
• Admins can configure uploads for all users, selected users, Entra ID groups, or no users.
• Basic package uploads remain allowed and are not impacted.
• The setting applies only to advanced agents and plugins uploaded after the control becomes available.
• No action is required to maintain current behavior.

[Action Required/Recommendations:]

• Review the advanced-package upload setting when it becomes available.
• Determine whether advanced-package uploads should be available to all users, selected users, groups, or no users.
• Update internal administrator and help desk documentation as needed.
• Inform support teams of the new governance control.
• If no action is taken, advanced-package uploads remain allowed by default.

[Compliance Considerations:]

• The change introduces new administrative governance controls for advanced agents and plugins.
• The feature supports administration through Microsoft Entra ID group membership.