SharePoint agent is not approved

Last updated Oct 17, 2026 Policies Access & Sharing

AI summary

Rencore Governance identifies SharePoint agents that have not been approved, which could expose sensitive sites to uncontrolled information access. Implement an approval workflow to verify intended uses and agent permissions before activation.

Severity: Low Security Recommended Generally available

What it detects

Identifies SharePoint agents that have not been reviewed or approved before use, posing security risks.

Why it matters

Unapproved SharePoint agents could expose sensitive sites to AI interactions, leading to uncontrolled information access. Organizations should implement an approval workflow in Rencore Governance to verify intended uses and permissions before agent activation. Restrict self-service agent creation unless reviewed by IT.

The rule

Every SharePoint Agent where Is Approved is false

In Rencore Governance

Details

Applies to	SharePoint agent
Connector	SharePoint
Severity	Low
Category	Security
Recommended	Yes
Recommended automation	None
License type	Standard

Other policies that check SharePoint agent objects:

SharePoint agent references more than two site collections (Medium)
SharePoint agent uses outdated site collection (Medium)
SharePoint agent uses outdated list (Medium)
SharePoint agent references confidential site without approval (High)

Frequently asked questions

What does the SharePoint agent is not approved policy detect?

The SharePoint agent is not approved policy identifies SharePoint agents that have not been reviewed or approved before use, posing security risks.

Which objects does the SharePoint agent is not approved policy check?

The SharePoint agent is not approved policy checks SharePoint agent objects from the SharePoint inventory and reports each one that matches its rule as a violation.

How severe is a violation of the SharePoint agent is not approved policy?

Violations of the SharePoint agent is not approved policy have Low severity. The policy is in the Security category.

Which module includes the SharePoint agent is not approved policy?

The SharePoint agent is not approved policy comes with the SharePoint connector in the Digital Workplace module of Rencore Governance, which every Plan includes.

Was this page helpful?