{"id":520632,"date":"2026-05-07T23:46:00","date_gmt":"2026-05-08T06:46:00","guid":{"rendered":"https:\/\/jorgep.com\/blog\/?p=520632"},"modified":"2026-05-08T08:45:03","modified_gmt":"2026-05-08T15:45:03","slug":"microsoft-agent-365-governance-for-ai-agents","status":"publish","type":"post","link":"https:\/\/jorgep.com\/blog\/microsoft-agent-365-governance-for-ai-agents\/","title":{"rendered":"Microsoft Agent 365: Governance for AI Agents"},"content":{"rendered":"\n<div class=\"wp-block-columns has-theme-palette-7-background-color has-background is-layout-flex wp-container-core-columns-is-layout-2edb0647 wp-block-columns-is-layout-flex\" style=\"margin-top:0;margin-bottom:0\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:80%\">\n<p>Part of: <strong> <a href=\"https:\/\/jorgep.com\/blog\/series-ai-learnings\/\">AI Learning Series Here<\/a><\/strong><\/p>\n\n\n<style>.kadence-column395113_97b87a-23 > .kt-inside-inner-col,.kadence-column395113_97b87a-23 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column395113_97b87a-23 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column395113_97b87a-23 > .kt-inside-inner-col{flex-direction:column;}.kadence-column395113_97b87a-23 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column395113_97b87a-23 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column395113_97b87a-23{position:relative;}@media all and (max-width: 1024px){.kadence-column395113_97b87a-23 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column395113_97b87a-23 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column395113_97b87a-23\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading510545_15a085-99, .wp-block-kadence-advancedheading.kt-adv-heading510545_15a085-99[data-kb-block=\"kb-adv-heading510545_15a085-99\"]{font-size:var(--global-kb-font-size-sm, 0.9rem);font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading510545_15a085-99 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading510545_15a085-99[data-kb-block=\"kb-adv-heading510545_15a085-99\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading510545_15a085-99 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading510545_15a085-99[data-kb-block=\"kb-adv-heading510545_15a085-99\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading510545_15a085-99 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading510545_15a085-99\">Quick Links:\u00a0<a href=\"https:\/\/jorgep.com\/blog\/resources-for-learning-ai\/\">Resources for Learning AI<\/a> | <a href=\"https:\/\/jorgep.com\/blog\/keeping-up-with-ai\/\">Keep up with AI<\/a> | <a href=\"https:\/\/jorgep.com\/blog\/list-of-ai-tools\/\" data-type=\"post\" data-id=\"402818\">List of AI Tools<\/a> | <a href=\"https:\/\/jorgep.com\/blog\/local-ai-series\/\" data-type=\"page\" data-id=\"519365\">Local AI<\/a><\/p>\n<\/div><\/div>\n\n\n<style>.kb-row-layout-id395113_d73e95-0d > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id395113_d73e95-0d > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id395113_d73e95-0d > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-none, 0rem );padding-top:var(--global-kb-spacing-xxs, 0.5rem);padding-bottom:var(--global-kb-spacing-xxs, 0.5rem);grid-template-columns:repeat(2, minmax(0, 1fr));}.kb-row-layout-id395113_d73e95-0d > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id395113_d73e95-0d > .kt-row-column-wrap{grid-template-columns:repeat(2, minmax(0, 1fr));}}@media all and (max-width: 767px){.kb-row-layout-id395113_d73e95-0d > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id395113_d73e95-0d alignnone wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-2-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top\">\n<style>.kadence-column395113_df36f9-de > .kt-inside-inner-col,.kadence-column395113_df36f9-de > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column395113_df36f9-de > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column395113_df36f9-de > .kt-inside-inner-col{flex-direction:column;}.kadence-column395113_df36f9-de > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column395113_df36f9-de > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column395113_df36f9-de{position:relative;}@media all and (max-width: 1024px){.kadence-column395113_df36f9-de > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column395113_df36f9-de > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column395113_df36f9-de\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading395113_b3212c-b9, .wp-block-kadence-advancedheading.kt-adv-heading395113_b3212c-b9[data-kb-block=\"kb-adv-heading395113_b3212c-b9\"]{text-align:center;font-size:var(--global-kb-font-size-sm, 0.9rem);line-height:60px;font-style:normal;background-color:#f5a511;}.wp-block-kadence-advancedheading.kt-adv-heading395113_b3212c-b9 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading395113_b3212c-b9[data-kb-block=\"kb-adv-heading395113_b3212c-b9\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading395113_b3212c-b9 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading395113_b3212c-b9[data-kb-block=\"kb-adv-heading395113_b3212c-b9\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading395113_b3212c-b9 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading395113_b3212c-b9\">Subscribe to <a href=\"https:\/\/go.35s.be\/jtb\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>JorgeTechBits  newsletter<\/strong><\/a><\/p>\n<\/div><\/div>\n\n\n<style>.kadence-column395113_4b4b81-29 > .kt-inside-inner-col,.kadence-column395113_4b4b81-29 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column395113_4b4b81-29 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column395113_4b4b81-29 > .kt-inside-inner-col{flex-direction:column;}.kadence-column395113_4b4b81-29 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column395113_4b4b81-29 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column395113_4b4b81-29{position:relative;}@media all and (max-width: 1024px){.kadence-column395113_4b4b81-29 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column395113_4b4b81-29 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column395113_4b4b81-29\"><div class=\"kt-inside-inner-col\"><\/div><\/div>\n\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\"><div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><a href=\"htthttps:\/\/jorgep.com\/blog\/book-dont-just-chat-delegate\/\"><img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"1024\" src=\"https:\/\/jorgep.com\/blog\/wp-content\/uploads\/CoverBook-01-640x1024.jpg\" alt=\"\" class=\"wp-image-520234\" style=\"aspect-ratio:0.6250142320391666;width:98px;height:auto\" srcset=\"https:\/\/jorgep.com\/blog\/wp-content\/uploads\/CoverBook-01-640x1024.jpg 640w, https:\/\/jorgep.com\/blog\/wp-content\/uploads\/CoverBook-01-188x300.jpg 188w, https:\/\/jorgep.com\/blog\/wp-content\/uploads\/CoverBook-01-768x1229.jpg 768w, https:\/\/jorgep.com\/blog\/wp-content\/uploads\/CoverBook-01-960x1536.jpg 960w, https:\/\/jorgep.com\/blog\/wp-content\/uploads\/CoverBook-01-1280x2048.jpg 1280w, https:\/\/jorgep.com\/blog\/wp-content\/uploads\/CoverBook-01.jpg 1600w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/a><figcaption class=\"wp-element-caption\"><a href=\"https:\/\/jorgep.com\/blog\/book-series-ai-dont-just-chat\/\" data-type=\"page\" data-id=\"520242\">Check out the Book Series<\/a><\/figcaption><\/figure>\n<\/div><\/div>\n<\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading519190_b33a00-c9, .wp-block-kadence-advancedheading.kt-adv-heading519190_b33a00-c9[data-kb-block=\"kb-adv-heading519190_b33a00-c9\"]{font-size:var(--global-kb-font-size-sm, 0.9rem);font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading519190_b33a00-c9 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading519190_b33a00-c9[data-kb-block=\"kb-adv-heading519190_b33a00-c9\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading519190_b33a00-c9 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading519190_b33a00-c9[data-kb-block=\"kb-adv-heading519190_b33a00-c9\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading519190_b33a00-c9 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading519190_b33a00-c9\"><strong>Disclaimer:<\/strong> <strong>I create this content entirely on my own time, and the views expressed here are mine alone (not my employer&#8217;s)<\/strong>. Because I love leveraging new tech, I use AI tools like Gemini, NotebookLM, Claude, Perplexity and others as a &#8220;digital team&#8221; to help research and polish these articles so I can share the best possible insights with you!<\/p>\n\n\n\n<p>As organizations move from experimenting with AI assistants to deploying autonomous and semi\u2011autonomous agents, a new challenge emerges: governing what those agents actually do at runtime.This isn\u2019t about who built an agent\u2014it\u2019s about what it can access, what actions it can take, and whether it\u2019s operating safely inside the enterprise.  <strong>That\u2019s the problem Microsoft Agent 365 is designed to solve. <\/strong><\/p>\n\n\n\n<p><\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading520632_c2f240-dd, .wp-block-kadence-advancedheading.kt-adv-heading520632_c2f240-dd[data-kb-block=\"kb-adv-heading520632_c2f240-dd\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading520632_c2f240-dd mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading520632_c2f240-dd[data-kb-block=\"kb-adv-heading520632_c2f240-dd\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading520632_c2f240-dd img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading520632_c2f240-dd[data-kb-block=\"kb-adv-heading520632_c2f240-dd\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading520632_c2f240-dd wp-block-kadence-advancedheading has-theme-palette-7-background-color has-background\" data-kb-block=\"kb-adv-heading520632_c2f240-dd\"><em>Before we begin, one question comes up repeatedly Does Agent 365 track token usage, quotas, or model consumption?  &#8212; The short answer is no\u2014and that\u2019s by design.<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-agent-365-actually-is\">What Agent 365 Actually Is<\/h2>\n\n\n\n<p>Microsoft Agent 365, generally available as of May 1, 2026, is an enterprise control plane for AI agents.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>It does not build agents.<\/li>\n\n\n\n<li>It does not host models.<\/li>\n<\/ul>\n\n\n\n<p>Instead, it sits above agent frameworks and model platforms, extending Microsoft 365 security, identity, and compliance controls to AI agents.  In practical terms, Agent 365 treats agents like first-class enterprise identities\u2014similar to users or applications.<\/p>\n\n\n\n<p>Please see companion blog posts on <a href=\"https:\/\/jorgep.com\/blog\/ai-governance-orchestration-vendors-may-2026\/\" data-type=\"post\" data-id=\"520653\">AI Governance &amp; Orchestration Vendors (May 2026)<\/a> and <a href=\"https:\/\/jorgep.com\/blog\/servicenow-ai-control-tower-overview\/\" data-type=\"post\" data-id=\"520651\">ServiceNow AI Control Tower<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"the-three-pillars-observe-govern-secure\">The Three Pillars: Observe, Govern, Secure<\/h2>\n\n\n\n<p>Agent 365 is built around three core capabilities:<\/p>\n\n\n<style>.kb-table-container520632_9622aa-28{font-size:var(--global-kb-font-size-sm, 0.9rem);overflow-x:auto;}.kb-table-container .kb-table520632_9622aa-28 th{padding-top:var(--global-kb-spacing-xxs, 0.5rem);padding-right:var(--global-kb-spacing-xxs, 0.5rem);padding-bottom:var(--global-kb-spacing-xxs, 0.5rem);padding-left:var(--global-kb-spacing-xxs, 0.5rem);text-align:center;}.kb-table-container .kb-table520632_9622aa-28 caption{text-align:center;}.kb-table-container .kb-table520632_9622aa-28 td{padding-top:var(--global-kb-spacing-xxs, 0.5rem);padding-right:var(--global-kb-spacing-xxs, 0.5rem);padding-bottom:var(--global-kb-spacing-xxs, 0.5rem);padding-left:var(--global-kb-spacing-xxs, 0.5rem);text-align:left;}.kb-table-container .kb-table520632_9622aa-28 tr:nth-of-type(even){background-color:var(--global-palette8, #F7FAFC);}.kb-table-container .kb-table520632_9622aa-28 td, .kb-table520632_9622aa-28 th{border-top:1px solid var(--global-palette6, #718096);border-right:1px solid var(--global-palette6, #718096);border-bottom:1px solid var(--global-palette6, #718096);border-left:1px solid var(--global-palette6, #718096);}@media all and (max-width: 1024px){.kb-table-container .kb-table520632_9622aa-28 td, .kb-table520632_9622aa-28 th{border-top:1px solid var(--global-palette6, #718096);border-right:1px solid var(--global-palette6, #718096);border-bottom:1px solid var(--global-palette6, #718096);border-left:1px solid var(--global-palette6, #718096);}}@media all and (max-width: 767px){.kb-table-container .kb-table520632_9622aa-28 td, .kb-table520632_9622aa-28 th{border-top:1px solid var(--global-palette6, #718096);border-right:1px solid var(--global-palette6, #718096);border-bottom:1px solid var(--global-palette6, #718096);border-left:1px solid var(--global-palette6, #718096);}}<\/style><div class=\"kb-table-container kb-table-container520632_9622aa-28 wp-block-kadence-table\"><table class=\"kb-table kb-table520632_9622aa-28\">\n<style>.kb-table-container .kb-table tr.kb-table-row520632_0ea3b3-41{background-color:var(--global-palette7, #EDF2F7);}<\/style><tr class=\"kb-table-row kb-table-row520632_0ea3b3-41\">\n<th class=\"kb-table-data kb-table-data520632_72a2a4-43\">\n\n<p>Pillar<\/p>\n\n<\/th>\n\n<th class=\"kb-table-data kb-table-data520632_446e61-bb\">\n\n<p>What It Does<\/p>\n\n<\/th>\n\n<th class=\"kb-table-data kb-table-data520632_e7ad26-51\">\n\n<p>Key Capabilities<\/p>\n\n<\/th>\n\n<th class=\"kb-table-data kb-table-data520632_b8e4b0-85\">\n\n<p>Outcome<\/p>\n\n<\/th>\n<\/tr>\n\n<tr class=\"kb-table-row kb-table-row520632_bd459a-13\">\n<th class=\"kb-table-data kb-table-data520632_cdf44b-03\">\n\n<p>Observe<\/p>\n\n<\/th>\n\n<td class=\"kb-table-data kb-table-data520632_ec7cf6-19\">\n\n<p>Provides visibility into all AI agents across the environment<\/p>\n\n<\/td>\n\n<td class=\"kb-table-data kb-table-data520632_cc71f6-a0\">\n\n<p>Centralized Agent Registry in Microsoft 365 admin center; Inventory of known and registered agents; Visibility into agent activity and health; Discovery of unsanctioned or \u201cshadow AI\u201d agents via Defender and Intune<\/p>\n\n<\/td>\n\n<td class=\"kb-table-data kb-table-data520632_d4e00d-dc\">\n\n<p>Ensures agents cannot operate outside IT awareness<\/p>\n\n<\/td>\n<\/tr>\n\n<tr class=\"kb-table-row kb-table-row520632_20df51-e9\">\n<th class=\"kb-table-data kb-table-data520632_0751a1-1a\">\n\n<p>Govern<\/p>\n\n<\/th>\n\n<td class=\"kb-table-data kb-table-data520632_bb9483-ec\">\n\n<p>Controls how agents operate using enterprise identity and policy frameworks<\/p>\n\n<\/td>\n\n<td class=\"kb-table-data kb-table-data520632_f04911-ec\">\n\n<p>Entra Agent ID for each agent; Least-privilege access enforcement; Alignment with Zero Trust principles; Full lifecycle management (onboarding to retirement); Integration with Entra and Purview for access and compliance<\/p>\n\n<\/td>\n\n<td class=\"kb-table-data kb-table-data520632_e88808-cd\">\n\n<p>Ensures agents operate within defined permissions and policies<\/p>\n\n<\/td>\n<\/tr>\n\n<tr class=\"kb-table-row kb-table-row520632_73d4fb-94\">\n<th class=\"kb-table-data kb-table-data520632_469d20-b0\">\n\n<p>Secure<\/p>\n\n<\/th>\n\n<td class=\"kb-table-data kb-table-data520632_7f7f97-d3\">\n\n<p>Enforces protection and policy at runtime<\/p>\n\n<\/td>\n\n<td class=\"kb-table-data kb-table-data520632_05aa32-15\">\n\n<p>Continuous monitoring via Microsoft Defender; Detection of anomalous or risky behavior; Ability to isolate or sandbox agents (including Windows 365 for Agents); Enforcement of data protection and DLP policies via Purview<\/p>\n\n<\/td>\n\n<td class=\"kb-table-data kb-table-data520632_df6be2-71\">\n\n<p>Moves governance from static policy to real-time enforcement<\/p>\n\n<\/td>\n<\/tr>\n<\/table><\/div>\n\n\n<p><em><strong>Governance is enforced at runtime, not just at approval.<\/strong><\/em><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Continuous monitoring through Microsoft Defender<\/li>\n\n\n\n<li>Detection of anomalous or risky behavior<\/li>\n\n\n\n<li>Ability to isolate or sandbox agents (including Windows 365 for Agents)<\/li>\n\n\n\n<li>Enforcement of data protection and DLP policies via Purview<\/li>\n<\/ul>\n\n\n\n<p>This brings AI governance out of policy documents and into real-time control.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-agent-365-does-not-do\">What Agent 365 Does Not Do<\/h2>\n\n\n\n<p>Agent 365 does not manage LLM token usage.<\/p>\n\n\n\n<p>It does not:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Count prompt or completion tokens<\/li>\n\n\n\n<li>Enforce token budgets or quotas<\/li>\n\n\n\n<li>Provide token-level cost reporting<\/li>\n\n\n\n<li>Rate-limit model usage based on tokens<\/li>\n<\/ul>\n\n\n\n<p>This is not a missing feature\u2014it\u2019s a deliberate architectural boundary.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"where-token-governance-lives\">Token Tracking and Governance<\/h2>\n\n\n\n<p>Token usage is handled by the model platform, not the agent governance layer.<\/p>\n\n\n\n<p>For example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Azure OpenAI \/ Azure AI Foundry: tokens, quotas, TPM\/RPM limits, cost tracking<\/li>\n\n\n\n<li>Copilot Studio: capacity-based consumption models<\/li>\n\n\n\n<li>Third-party providers: token accounting and billing<\/li>\n<\/ul>\n\n\n\n<p>Agent 365 can observe that an agent invoked a model\u2014but it does not meter that usage.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"why-this-separation-matters\">Why This Separation Matters<\/h2>\n\n\n\n<p>This design follows familiar enterprise patterns:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Entra ID governs identity\u2014not compute usage<\/li>\n\n\n\n<li>Azure Resource Manager governs infrastructure\u2014not user behavior<\/li>\n\n\n\n<li>Agent 365 governs agent behavior\u2014not model economics<\/li>\n<\/ul>\n\n\n\n<p>Separating these concerns delivers three advantages:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Consistent governance across models and clouds<\/li>\n\n\n\n<li>Clear ownership between security teams and platform teams<\/li>\n\n\n\n<li>Independent evolution of model platforms without breaking governance<\/li>\n<\/ul>\n\n\n\n<p>Put simply:<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading520632_55d174-74, .wp-block-kadence-advancedheading.kt-adv-heading520632_55d174-74[data-kb-block=\"kb-adv-heading520632_55d174-74\"]{margin-right:var(--global-kb-spacing-3xl, 6.5rem);margin-left:var(--global-kb-spacing-3xl, 6.5rem);text-align:center;font-size:var(--global-kb-font-size-md, 1.25rem);font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading520632_55d174-74 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading520632_55d174-74[data-kb-block=\"kb-adv-heading520632_55d174-74\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading520632_55d174-74 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading520632_55d174-74[data-kb-block=\"kb-adv-heading520632_55d174-74\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading520632_55d174-74 wp-block-kadence-advancedheading has-theme-palette-7-background-color has-background\" data-kb-block=\"kb-adv-heading520632_55d174-74\"><strong><em>Agent 365 answers \u201cwho\u201d and \u201cwhat.\u201d  | Model platforms answer \u201chow much.\u201d<\/em><\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-to-explain-it-simply\">How to Explain It Simply to Customers<\/h2>\n\n\n\n<p>Microsoft Agent 365 governs who an AI agent is, what it can do, what data it can access, and whether it is operating safely. Token usage, quotas, and costs are managed by the model platforms the agent uses. <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Agent 365 delivers enforceable governance for AI agents<\/li>\n\n\n\n<li>It manages identity, access, lifecycle, and runtime security<\/li>\n\n\n\n<li>It intentionally does not track tokens or quotas<\/li>\n\n\n\n<li>Token management belongs to Azure OpenAI, AI Foundry, or other providers<\/li>\n\n\n\n<li>This separation is what makes enterprise-scale AI governance workable<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Resources:<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Please see companion blog posts on <a href=\"https:\/\/jorgep.com\/blog\/ai-governance-orchestration-vendors-may-2026\/\" data-type=\"post\" data-id=\"520653\">AI Governance &amp; Orchestration Vendors (May 2026)<\/a> and <a href=\"https:\/\/jorgep.com\/blog\/servicenow-ai-control-tower-overview\/\" data-type=\"post\" data-id=\"520651\">ServiceNow AI Control Tower<\/a><\/li>\n\n\n\n<li>Microsoft Mechanics YouTube Video:  <a href=\"https:\/\/www.youtube.com\/watch?v=yWwYLbMvc3s\">How Microsoft Agent 365 works<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.youtube.com\/watch?v=_AbcvGfP-eI\">Discover, manage, and secure AI agents with Microsoft Agent 365<\/a> by Vasu Jakkal\u2019s at RSAC 2026<\/li>\n\n\n\n<li><a href=\"https:\/\/www.youtube.com\/watch?v=CrAJZy7ne3Q\">Agent 365 | Your Security &amp; Compliance Controls<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>As organizations move from experimenting with AI assistants to deploying autonomous and semi\u2011autonomous agents, a new challenge emerges: governing what those agents actually do at runtime.This isn\u2019t about who built an agent\u2014it\u2019s about what it can access, what actions it can take, and whether it\u2019s operating safely inside the enterprise. That\u2019s the problem Microsoft Agent&#8230;<\/p>\n","protected":false},"author":2,"featured_media":447242,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","ngg_post_thumbnail":0,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[441],"tags":[1032,471,941,930,871,730],"class_list":["post-520632","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-talk","tag-agents","tag-ai","tag-ai-agents","tag-ai-series","tag-genai","tag-microsoft-365"],"taxonomy_info":{"category":[{"value":441,"label":"Tech Talk"}],"post_tag":[{"value":1032,"label":"Agents"},{"value":471,"label":"AI"},{"value":941,"label":"AI Agents"},{"value":930,"label":"AI Series"},{"value":871,"label":"GenAi"},{"value":730,"label":"Microsoft 365"}]},"featured_image_src_large":["https:\/\/jorgep.com\/blog\/wp-content\/uploads\/ModerndEUC-Copilot11.jpg",600,254,false],"author_info":{"display_name":"Jorge Pereira","author_link":"https:\/\/jorgep.com\/blog\/author\/jorge\/"},"comment_info":0,"category_info":[{"term_id":441,"name":"Tech Talk","slug":"tech-talk","term_group":0,"term_taxonomy_id":451,"taxonomy":"category","description":"","parent":0,"count":700,"filter":"raw","cat_ID":441,"category_count":700,"category_description":"","cat_name":"Tech Talk","category_nicename":"tech-talk","category_parent":0}],"tag_info":[{"term_id":1032,"name":"Agents","slug":"agents","term_group":0,"term_taxonomy_id":1042,"taxonomy":"post_tag","description":"","parent":0,"count":118,"filter":"raw"},{"term_id":471,"name":"AI","slug":"ai","term_group":0,"term_taxonomy_id":481,"taxonomy":"post_tag","description":"","parent":0,"count":162,"filter":"raw"},{"term_id":941,"name":"AI Agents","slug":"ai-agents","term_group":0,"term_taxonomy_id":951,"taxonomy":"post_tag","description":"","parent":0,"count":127,"filter":"raw"},{"term_id":930,"name":"AI Series","slug":"ai-series","term_group":0,"term_taxonomy_id":940,"taxonomy":"post_tag","description":"","parent":0,"count":168,"filter":"raw"},{"term_id":871,"name":"GenAi","slug":"genai","term_group":0,"term_taxonomy_id":881,"taxonomy":"post_tag","description":"","parent":0,"count":89,"filter":"raw"},{"term_id":730,"name":"Microsoft 365","slug":"microsoft-365","term_group":0,"term_taxonomy_id":740,"taxonomy":"post_tag","description":"","parent":0,"count":47,"filter":"raw"}],"_links":{"self":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/520632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/comments?post=520632"}],"version-history":[{"count":7,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/520632\/revisions"}],"predecessor-version":[{"id":520669,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/520632\/revisions\/520669"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/media\/447242"}],"wp:attachment":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/media?parent=520632"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/categories?post=520632"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/tags?post=520632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}