Show Notes
Welcome to Episode 431 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott get into why agent governance is quickly becoming one of the most pressing challenges for Microsoft 365 administrators. As agentic workflows become more common across Copilot, Copilot Studio, and third-party platforms, organizations are dealing with a sprawl problem that looks familiar but hits differently. Agents bring their own identity, data access, permissions, lifecycle, and security concerns all at once, and unlike traditional apps, a single user can now have dozens of agents acting on their behalf or autonomously across Teams, SharePoint, Exchange, and beyond.
The episode walks through Microsoft Agent 365 as a starting point for building that control plane, including the agent registry, user and permission scoping, and the certification tab where publisher attestation gives some visibility into compliance claims though with notable gaps. Ben and Scott also touch on the Shadow AI preview in the Frontier program, the challenges of graph permission readability in the permissions view, and why the agent lifecycle problem, think what happens when the person who built a custom agent leaves the org, is something administrators need to start thinking about now before consumption billing turns an unmanaged agent into a surprise line item.
Show Notes
Overview of Microsoft Agent 365
Episode 409 – Preparing for Copilot- Securing Your Microsoft 365 Data and Beyond
Episode 425 – Exploring Collaboration and Governance at the MVP Summit with Joy Apple
Manage agents in the Microsoft 365 admin center
Agent management in Microsoft 365 admin center
Shadow AI in Microsoft 365 admin center (Preview)
Understand agent details in Microsoft 365 admin center
About the sponsors
Nasuni is a leading unstructured data platform for enterprises where file data is mission-critical for both people and AI. Nasuni powers the operational file layer where work happens — helping organizations manage, protect, and activate data so teams can work smarter, reduce costs, and operate securely without limits.
TrustedTech is a leading Microsoft Cloud Solution Provider (CSP) specializing in Microsoft Cloud services, Microsoft perpetual licensing, and Microsoft Support Services for medium and enterprise-sized businesses. Their robust team of in-house, U.S.-based Microsoft architects and engineers are certified in all 6/6 Microsoft Solutions Partner Designations in the Microsoft Cloud Partner Program.
M365 Licensing Consultation
M365 Tenant Assessment
Copilot Readiness Assessment
ShareGate is your migration and governance solution for Microsoft 365. ShareGate helps your teams simplify tenant migrations, get Copilot-ready, and take control of Microsoft 365 governance.
Intelligink — Would you like to become the irreplaceable Microsoft 365 resource for your organization? Let us know!
More from Microsoft Cloud IT Pro Podcast
Welcome to Episode 439 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott dig into two Azure agents with confusingly different names: the Azure Copilot Troubleshooting Agent and the Azure SRE Agent. Scott’s mental model is that the Troubleshooting Agent is the free, human-in-the-loop entry point built into the Azure portal. It runs as you, works one problem at a time, and opens a support request when it gets stuck. The SRE Agent is a paid operational platform with its own managed identity. It watches your logs, alerts, and repos, forms hypotheses, and can act in review or autonomous mode, much like a new member of your team.
Welcome to Episode 438 of the Microsoft Cloud IT Pro Podcast. Back in Episode 429, Ben and Scott introduced LLM wikis. In this episode, they come back a few months later to compare what those wikis turned into after real daily use: personalized work operating systems, or a WorkOS, that tie together tasks, meetings, research, communications, and recurring workflows. Scott walks through the skills that now run his day, from a 9:00 a.m. prioritization pass and meeting prep to meeting capture, end-of-day review, and clipping ingestion, all while keeping governed documents in Microsoft 365 where they belong.
Welcome to Episode 437 of the Microsoft Cloud IT Pro Podcast. In this episode, Nick Burling, Chief Product Officer at Nasuni, joins Ben and Scott to talk about getting unstructured file data ready for AI. Nick digs into why 70 to 80 percent of enterprise data sits in file shares and object storage, how that data tends to end up ungoverned and risky to point AI at, and Nasuni’s PSYCHIC framework for making it proprietary, secure, current, indexed, hybrid, and continuous. The conversation covers Nasuni’s AI Activate, the MCP based service that enforces permissions before a query ever runs, and the recent DryvIQ acquisition, which adds content classification, redaction, and policy enforcement on top of that index.
Welcome to Episode 436 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott dive into Microsoft Entra Tenant Governance. Almost nobody runs one Microsoft Entra tenant. Mergers, divestitures, dev and test environments, regional partitioning, that one AI proof-of-concept somebody spun up on a credit card. Organizations accumulate tenants the way they accumulate SharePoint sites. The difference is that nobody ever built an inventory of the tenants, and central IT frequently cannot name them, let alone say whether they are configured safely.
Welcome to Episode 435 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott take a lap around what’s new in Power BI, starting with the two MCP servers now in preview, one local and one remote, that can clean up your data model, write DAX for you, and turn a messy pile of tables into an actual usable semantic model. Ben shares how it helped him tame a 44 table QuickBooks Online mess, and why he had way better luck with it than with Copilot in Power BI.