Microsoft Agent 365 is a centralized governance layer that treats AI agents as first-class identities in your enterprise, giving each one its own Entra Agent ID, access policies, and audit trail. Announced at Ignite 2025 and formally launched on March 9, 2026 as part of the M365 E7 “Frontier Suite,” it reaches general availability on May 1, 2026. The standalone price is $15 per user per month. During its preview period, tens of millions of agents were registered across tens of thousands of customer tenants. Microsoft mapped over 500,000 agents within its own environment before shipping the product.
That last number is the quiet headline. Half a million agents running inside a single organization, most of them unknown to IT until someone built a tool to find them. Agent 365 is Microsoft’s answer to a problem that barely existed two years ago and is now urgent: who controls the agents?
What Agent 365 Actually Does
Agent 365 is not a platform for building agents. That role belongs to Copilot Studio, Microsoft Foundry, and the open-source AutoGen/Semantic Kernel stack. Agent 365 sits above all of them as the management and governance layer. Think of it as Active Directory for AI agents.
The architecture breaks down into five pillars:
Agent Registry
Every agent in the organization, whether built in Copilot Studio, imported from Adobe, Databricks, ServiceNow, SAP, or Workday, gets cataloged in a central registry. This includes “shadow agents” that teams spun up without IT approval. The registry supports quarantine functionality: if an agent violates policy, IT can isolate it without shutting down the entire workflow it supports.
This is the feature that matters most in practice. The biggest governance challenge enterprises face is not controlling the agents they know about. It is finding the ones they do not.
Entra Agent IDs
Each agent receives a unique Microsoft Entra identity, the same identity infrastructure used for human employees. This means agents can be assigned to groups, given conditional access policies, subjected to risk-based authentication, and audited through the same compliance tools that already exist for human users.
The practical implication: if your organization already uses Entra for identity governance, extending it to agents requires configuration, not new infrastructure. Agents inherit the policy engine your security team already knows.
Visualization and Dashboards
Agent 365 provides an “Agents Map” that shows connections between agents, the humans they act for, and the resources they access. Role-specific dashboards serve IT admins (operational health), security teams (threat surface), and business leaders (ROI and adoption metrics). Every agent action generates audit logs compatible with e-discovery.
Security Stack Integration
This is where Microsoft’s bundling strategy pays off. Agent 365 integrates with three existing security products:
- Microsoft Defender: Purpose-built protections against prompt injection, model tampering, and agent-based attack chains. Agent-specific threat detection extends Defender XDR to non-human identities.
- Microsoft Entra: Conditional access policies applied to agents in real time. If an agent’s risk score changes, its permissions adjust automatically.
- Microsoft Purview: Data loss prevention, compliance auditing, and content safety controls applied to agent outputs. This is how you enforce that an HR agent cannot leak salary data to a marketing workflow.
Interoperability
Agent 365 supports the Model Context Protocol (MCP) for cross-system agent actions. Agents can access organizational data through Word, Excel, SharePoint, Dynamics 365, and Teams via Microsoft’s “Work IQ” integration layer. This works across agents built on any framework, not just Microsoft’s own tools.
Pricing: The $15 Question
Agent 365 standalone costs $15 per user per month. The license is per-user, meaning all agents acting on behalf of a licensed user are covered regardless of how many agents that user has.
The more likely purchase path is M365 E7, the new top-tier bundle announced alongside Agent 365:
| Component | A La Carte Price |
|---|---|
| M365 E5 | $60/user/month |
| Copilot | $30/user/month |
| Agent 365 | $15/user/month |
| Entra Suite | $12/user/month |
| Total (separate) | $117/user/month |
| M365 E7 (bundled) | $99/user/month |
The $18 discount incentivizes the bundle, which is the point. Microsoft wants enterprises on E7, not buying Agent 365 standalone.
There is a licensing wrinkle worth noting. Agents that use Work IQ or MCP services require the human user to maintain a Copilot license, adding cost complexity. Analyst Rob Quickenden flagged this as “premature and potentially confusing for enterprise buyers.” If you are running agents that act autonomously without a clear human owner, the per-user model gets awkward.
Microsoft is offering 25 free Frontier preview licenses per tenant through December 2026 for testing.
Agent Performance Measurement
Copilot Studio added agent evaluation capabilities that feed directly into Agent 365’s dashboards. The evaluation framework supports:
- AI-generated test sets from agent metadata and knowledge sources, so you do not have to write every test case manually
- Multi-version comparison: test two versions of the same agent side by side before promoting to production
- Multi-model testing: run the same agent against different LLMs (OpenAI, Anthropic Claude, others via Foundry) to find the best fit per workflow
- Custom thresholds: set organizational standards for accuracy, relevance, and completeness, then fail agents that miss the bar
This is a meaningful step beyond “deploy and hope.” Most enterprise agent deployments today lack any systematic evaluation. According to Gartner’s 2025 report on AI agent governance, fewer than 15% of organizations have formal agent testing processes. Agent 365 does not solve this problem entirely, but it removes the “we do not have tooling” excuse.
The integration between Copilot Studio evaluations and Agent 365 dashboards means performance data flows from build-time testing into production monitoring. You can track whether an agent’s quality degrades over time as its knowledge sources change or its user base grows.
How It Compares to the Competition
Microsoft is not alone in recognizing that agent governance is now a product category. Here is how the major platforms approach it:
Salesforce Agentforce takes a CRM-first approach. Its MuleSoft Agent Fabric handles cross-system integration, and the Einstein Trust Layer provides security guardrails. Pricing is consumption-based at $0.10 per action (Flex tier), which can be cheaper for low-volume use cases but unpredictable at scale. Salesforce reported 8,000+ Agentforce customers as of January 2026.
ServiceNow AI Agents built an AI Control Tower with deterministic workflow orchestration baked in. For ITSM-centric agent deployments, ServiceNow’s approach is arguably more mature. Gartner ranked ServiceNow #1 for “Building and Managing AI Agents” in its 2025 evaluation. The downside: it is tightly coupled to the ServiceNow platform.
Google Vertex AI Agent Builder offers tool governance through Cloud API Registry with pay-per-use pricing. It is the most open-source-friendly option but lacks a dedicated agent identity layer comparable to Entra Agent IDs.
Microsoft’s key differentiator is breadth. Agent 365 governs agents from any vendor, not just Microsoft’s own. The Entra identity layer, Defender threat detection, and Purview compliance tooling create an integrated security stack that competitors have to assemble from multiple products. Whether that integration justifies the price depends on how deep you already are in the Microsoft ecosystem.
What This Means for Enterprise IT
If your organization runs Microsoft 365 E5 today and is deploying AI agents at any scale, Agent 365 is probably inevitable. The identity infrastructure (Entra), security tooling (Defender), and compliance layer (Purview) already exist. Agent 365 extends them to cover non-human identities.
The harder question is timing. GA is May 1, but the per-user licensing model may not fit organizations running autonomous agents without clear human owners. The product also assumes you want centralized governance, which conflicts with how many organizations actually adopt AI agents: team by team, shadow IT style, with governance as an afterthought.
For organizations already managing agent sprawl, Agent 365 provides the registry and policy engine they need. For organizations just starting their agent strategy, the Windows 365 for Agents runtime paired with Agent 365 governance creates a complete stack from build to operate.
The $99/month E7 bundle is Microsoft’s bet that enterprises will pay a premium for agent infrastructure the same way they pay for email and productivity. Given that 90% of the Fortune 500 already use Copilot, that bet looks reasonable.
Frequently Asked Questions
What is Microsoft Agent 365?
Microsoft Agent 365 is a centralized control plane for managing, governing, and securing AI agents across an enterprise. It provides agent registration, identity management via Entra Agent IDs, security integration with Defender and Purview, and performance dashboards. It treats AI agents as first-class digital identities similar to human employees.
How much does Microsoft Agent 365 cost?
Microsoft Agent 365 costs $15 per user per month as a standalone product. It is also bundled in the new Microsoft 365 E7 tier at $99 per user per month, which includes M365 E5, Copilot, Agent 365, and the Entra Suite. The license is per-user, covering all agents acting on behalf of that user.
When is Microsoft Agent 365 generally available?
Microsoft Agent 365 reaches general availability on May 1, 2026. It was previewed at Ignite 2025 and formally announced on March 9, 2026 as part of the Frontier Suite. Microsoft is offering 25 free preview licenses per tenant through December 2026.
How does Agent 365 compare to Salesforce Agentforce?
Agent 365 is a vendor-agnostic governance control plane that manages agents from any source, while Salesforce Agentforce is CRM-centric and primarily governs agents within the Salesforce ecosystem. Agent 365 uses per-user pricing ($15/month), while Agentforce offers per-action pricing ($0.10/action). Agent 365 integrates with Microsoft’s existing security stack (Defender, Entra, Purify), whereas Agentforce uses the Einstein Trust Layer.
What is an Entra Agent ID?
An Entra Agent ID is a unique Microsoft Entra identity assigned to each AI agent, treating it like a first-class digital identity similar to a human employee. This enables agents to be managed through conditional access policies, role-based access control, risk-based authentication, and compliance auditing using the same infrastructure enterprises already use for human identity governance.