Risk · 05
Agent 365 does not see every agent
Agent 365 is Microsoft's control plane for inventorying, governing and securing agents. It is generally available, and Microsoft describes registry, identity, lifecycle, least privilege, and administration through Entra, Purview and Defender. A registry is only as complete as what it is allowed to list.
The coverage boundary
Microsoft says agents published through Microsoft 365 channels with Entra Agent ID show up automatically. Agents built outside those environments need further steps. A company that only looks at the automatic list will miss the agent someone stood up beside it. For a team new to agents, the missing row is the risk.
E7 is not the only way to meet the name
Microsoft Learn's licence comparison, which describes E7 as generally available from 1 May 2026, includes Agent 365 in that suite and also notes it as a standalone add-on. Buying the name is not the same as having every agent registered. The Learn page is a map of what the suite can govern, not a statement that your estate is already on it.
Studio builds, Agent 365 watches a wider set
Copilot Studio is where a maker builds an agent. Agent 365 is where the estate is supposed to be seen. They are not the same job. In the FrontierOrg method, again a fiction, technology and security keep an entitlement exception after a worker transfers.
Monday
List every agent your team can name, including experiments. Mark which ones you can find in Agent 365 without extra work. The unmarked rows are the Monday task.
Which agent in your tenant was built somewhere Agent 365 does not list on its own?
Sources: Microsoft, Agent 365 (opens in a new tab). Microsoft Learn, Prepare for Microsoft Copilot by comparing E3, E5 and E7 (opens in a new tab).
Where this note mentions FrontierOrg, that is a fictional method for rehearsing a decision. It is not a company, not a client, and not a case study.