rencore.com (opens in a new tab) Start a trial (opens in a new tab)

Find agents nobody owns

Last updated Policies Copilot Studio SharePoint

AI summary

Find Copilot Studio agents with no active owner or that nobody uses through inventory and policies, then reassign them to new owners, quarantine them, or delete them using automations. This helps you keep your environment clean and well-governed.

Find Copilot Studio agents that have no active owner or that nobody uses, and give each one an owner or clean it up.

Before you begin

  • Your Rencore role needs the permissions to create reports, policies and automations. See Rencore roles.
  • Copilot Studio is connected. It needs an Entra ID app and a Power Platform consent. See Copilot Studio.
  • Copilot Studio is part of the AI & Agents module. See Add-ons.

Steps

See all agents and their owners

  1. Click Inventory on the Nav Panel and open the Copilot Studio object “Copilot Agent”. See the Copilot Studio inventory reference.
  2. The columns “Owned By Name”, “Environment Name” and “Is Published” show who owns each agent, where it lives and whether it is live.
  3. To see where agents are created, add the report templates “Agent Creation by Department - 90 Days” or “Weekly Agent Creation Trend - 90 Days”. See Create a Report from a Template.

Flag agents without an owner

  1. Go to Policies > Policy Options ([…]) > Create Policy.
  2. In the “Policy Template Library”, filter by the service Copilot Studio and choose:
  3. For SharePoint agents, add SharePoint agent is not approved.
  4. Save each policy. See Create a Policy from a Template.

Give the agent an owner or clean it up

Create a Custom Automation with the trigger “on policy violation” or “manually”, and add one of the Copilot Studio automation actions:

  • “Reassign a Copilot Studio agent to a new owner”: the new owner gets maker permission on the Environment, and the previous owner loses access.
  • “Quarantine or release a Copilot Studio agent”: a quarantined agent stays visible, but it cannot answer in any channel until you release it.
  • “Delete a Copilot Studio agent”: deletes the agent and its Microsoft Entra Agent ID. This cannot be undone.
It is good practice to quarantine an agent first and delete it only when nobody claims it.

What you see

The policies list each agent with its Environment. Once an agent has an owner again, or is deleted, it leaves the policy after the next Copilot Studio scan.

Limits

  • Agents built in Agent Builder or Agent 365 are not in the inventory.
  • Rencore Governance cannot publish or unpublish an agent. Use quarantine to stop it.
  • The age in “Stale Unpublished Copilot Agents - 30 Days” counts from the creation date, not the last edit.

Frequently asked questions

How do I find Copilot Studio agents that have no owner?

Create a policy from the Policy Template Library, filtered by the service Copilot Studio, using the template Orphaned Copilot Agent Ownership Gap. It flags agents without an owner or with only disabled owners. Save the policy to start tracking them.

What happens to an agent when I quarantine it in Rencore Governance?

A quarantined Copilot Studio agent stays visible, but it cannot answer in any channel until you release it. Quarantining first and deleting only when nobody claims the agent is good practice.

What happens to the previous owner when I reassign a Copilot Studio agent?

The new owner gets maker permission on the Environment, and the previous owner loses access. You do this with the automation action Reassign a Copilot Studio agent to a new owner.

When does an agent leave the policy after I give it an owner or delete it?

The agent leaves the policy after the next Copilot Studio scan. Until then, the policy keeps listing it with its Environment.

Can Rencore Governance publish or unpublish a Copilot Studio agent?

No. Rencore Governance cannot publish or unpublish an agent. Use the quarantine action to stop an agent instead. Agents built in Agent Builder or Agent 365 are also not in the inventory.