Agent

Agents and apps registered in the tenant agent registry (Microsoft 365 admin center > Agents > All agents). Each package may contain one or more elements (Agent Builder agent, custom-engine agent, bot, Office add-in).

Part of the Microsoft Agent 365 inventory.

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Daily	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
App id	String	Application identifier the package is associated with.	{{Agent.AppId}}
Asset id	String	Asset identifier the package is associated with.	{{Agent.AssetId}}
Available to	String	Audience scope that can find and install the package (allowedForAll, allowedForSome, allowedForNone).	{{Agent.AvailableTo}}
Copilot Studio agent	Copilot Agent	Resolved relation to the Copilot Studio agent this package was published from. Joined on the backing Entra app id (CustomCopilotEntity.EntryIdApplicationId == this.AppId). Null when the package didn't originate from Copilot Studio or the Copilot Studio agent hasn't been inventoried.	{{Agent.CopilotStudioAgent}}
Copilot Studio agent name	String	Display name of the linked Copilot Studio agent. Computed during inventory.	{{Agent.CopilotStudioAgentName}}
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	{{Agent.CreatedTime}}
Deployed to	String	Audience scope the package is deployed to (acquiredForAll, acquiredForSome, acquiredForNone).	{{Agent.DeployedTo}}
Display Name	String		{{Agent.DisplayName}}
Element types	String	Comma-separated list of element types contained in the package (AgentMetadatas, DeclarativeCopilots, CustomEngineCopilots, Bots, OfficeAddIns, ExchangeAddIns, StaticTabs, ConfigurableTabs, ComposeExtensions).	{{Agent.ElementTypes}}
Agent Builder agent	Boolean	True when the package contains an Agent Builder element (elementTypes contains DeclarativeCopilots) - i.e. an agent built with Agent Builder in Microsoft 365 Copilot.	{{Agent.HasAgentBuilderAgent}}
Has custom engine agent	Boolean	True when the package contains a custom engine agent element (elementTypes contains CustomEngineCopilots).	{{Agent.HasCustomEngineAgent}}
Id	String	Microsoft Graph package identifier.	{{Agent.Id}}
Is blocked	Boolean	True when the agent or app is blocked from use across the organization.	{{Agent.IsBlocked}}
Last modified	DateTime	Last time the package metadata changed in the agent registry.	{{Agent.LastModifiedDateTime}}
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	{{Agent.LastModifiedTime}}
Manifest id	String	Manifest identifier reported by the package.	{{Agent.ManifestId}}
Manifest version	String	Manifest schema version reported by the package.	{{Agent.ManifestVersion}}
Platform	String	How the agent was built, as classified by the Microsoft 365 admin center Platform column. Allowed values: Agent Builder in M365 Copilot, Copilot Studio, Other, SharePoint.	{{Agent.Platform}}
Publisher	String	Publisher of the package.	{{Agent.Publisher}}
Risk Score	Int32	Stores risk score	{{Agent.RiskScore}}
Risk Score Update	DateTime	Stores risk score update	{{Agent.RiskScoreLastUpdate}}
Risk Score Value	String	Stores risk score value like Low_Low	{{Agent.RiskScoreValue}}
Short description	String	Short description of the agent or app.	{{Agent.ShortDescription}}
Supported hosts	String	Comma-separated list of hosts the package can run in (Copilot, Outlook, Teams, M365, Word, Excel, PowerPoint).	{{Agent.SupportedHosts}}
Type	String	Package source type as reported by Microsoft Graph (firstParty = Microsoft, thirdParty = partner/store, lob = built in-house, shared = shared within the org). Allowed values: firstParty, lob, shared, thirdParty.	{{Agent.Type}}
Version	String	Version reported by the package manifest.	{{Agent.Version}}

Relations

Relation	Service	Description
Copilot Agent	Copilot Studio	Agents created inside Copilot Studio.
Agent Action	Microsoft Agent 365	Action the agent can perform.
Agent Capability	Microsoft Agent 365	Capability the agent can use.
Agent Element	Microsoft Agent 365	Individual elements (Agent Builder agents, custom engine agents, bots, add-ins) contained within an agent package.
Agent Knowledge Source	Microsoft Agent 365	Knowledge source the agent reads from.

Segments

Segment	Description
Blocked Agents	Lists agents that are currently blocked in the tenant agent registry.
Agents Deployed Tenant-Wide	Lists agents currently deployed to every user in the tenant.
Agents from External Publishers	Lists agents whose package source type is external (third-party publisher).
Custom Agents	Lists agents built in-house by the customer (Type == custom).
Agent Builder Agents	Lists agents built with Agent Builder in Microsoft 365 Copilot.

Actions

This object does currently not have any actions.

Policies that check this object

Policy	Severity	Description
Custom-built agent package (likelihood)	Low	Risk-probability factor: custom-built agents skip vendor-grade vetting, modestly raising the likelihood of latent issues in declared behavior, data access, or prompt safety.
Agent package is not blocked (likelihood)	Medium	Risk-probability factor: agent packages that are not blocked are usable by end users, so any latent risk in the agent carries baseline likelihood of surfacing.
Agent Missing Publisher	Medium	Flags agents that have no publisher recorded in the agent registry, making accountability and escalation impossible.
Blocked Agent Still Deployed	High	Flags agents that are blocked in the agent registry but still appear deployed to users, indicating that the block is not being enforced.
Custom Agent Deployed Tenant-Wide	Medium	Identifies custom-built agents that are deployed to every user in the tenant, where individual-author agents may not have gone through the same review as vendor apps.
External-publisher Agent Available to All Users	High	Identifies external-publisher agents that every user in the tenant can find and install, which is a common oversharing pattern after a broad initial enablement.