MC1472007: Microsoft 365 Copilot Adds Admin Control to Manage Advanced Agent and Plugin Uploads

4 minutes
MWPRO IMPACT SCORE
OPERATIONAL IMPACT
60
0 25 50 75 100
HIGH IMPACT • REVIEW RECOMMENDED
Recommended Action:
Review the update and plan any required actions before rollout.
▶ What is MWPro Impact Score? Watch our 60‑second explainer

Primary Audience

Tenant AdminsMicrosoft 365 AdminsIT ManagersService OwnersSecurity Teams
Why this score?
AI Confidence
HIGH
Enough detail is available to trust this assessment.
Assessment Reasoning
A new control for managing who can upload advanced Copilot agents and plugins introduces governance changes requiring admin review and configuration before a default behaviour applies on October 25th. Admins must decide policy, implement Entra ID group selection if needed, and update internal documentation. User impact is moderate because plugin uploaders may be restricted, but regular users and basic uploads remain unaffected. Urgency is driven by the configuration window before the default applies, and effort involves policy decisions, admin portal updates and possible Entra group adjustments.
72
🛡️ Admin Impact
HIGH
28
👥 User Impact
MEDIUM
65
⚡ Urgency
HIGH
58
🔧 Effort
HIGH
ℹ️ WHAT YOU NEED TO KNOW
📌

AT A GLANCE

New admin control lets you choose who can upload advanced Copilot agents and plugins. Configure before defaults apply.
👥

END USERS

Users may lose or gain ability to upload advanced agents and plugins, depending on admin settings.
🛡️

IT ADMINS

Review the new upload control from 25 Sept and set policies before 25 Oct. Update documentation and notify support teams.
📅

ROLLOUT TIMELINE

Start:
September 25, 2026

📢 Official Microsoft Message Center Announcement

Manage who can upload advanced agents and plugins
Message ID: MC1472007 (Updated)

Updated September 15, 2026: We have updated the content below with additional information.

[What and Why:]

To help organizations manage the deployment of advanced Copilot extensibility scenarios, we are introducing a new admin control that determines who can upload advanced agents and plugins. This enhancement strengthens enterprise governance and manageability by allowing administrators to limit advanced-package uploads to specific users or Microsoft Entra ID groups while maintaining flexibility for organizations that want broader access.

[Rollout Schedule:]

  • General Availability (Worldwide): Rollout begins September 25th
  • Expected completion by the end of October 2026.

[Impact on Your Organization:]

Who is affected:

  • Microsoft 365 administrators responsible for managing Copilot agents and plugins.
  • Organizations that allow users to upload advanced agents or plugins.
  • Users who create or upload advanced agents and plugins after this feature becomes available.

Platforms/Services:

  • Microsoft 365 Copilot and Cowork surfaces, ATK
  • Copilot agents
  • Copilot plugins
  • Microsoft Entra ID

What will happen:

  • On September 25th, the control will be visible in MAC under Copilot Settings and admins will have until October 25th to select their preference of all users, no users or specific users or groups (see Advanced package uploads screenshot).

    21892 image 1

  • Starting October 25th, Advanced-package uploads will be enabled by default unless the admin has selected no users or specific users or groups.
  • Admins can configure uploads for all users, selected users, Entra ID groups, or no users.
  • Basic package uploads remain allowed and are not impacted.
  • An advanced agent is a package that has either a Declarative Agent with actions or with an MCP server. All other packages are considered basic.
  • This setting is only applicable to user uploaded packages and does not cover 1P or 3P built agents.
  • IT admins can view user uploaded packages as shared in MAC and the details page will show the components of the package.
  • The setting applies only to advanced agents and plugins uploaded after the control becomes available.
  • No action is required to maintain current behavior,

[Action Required/Recommendations:]

  • Review the advanced-package upload setting when it becomes available on September 25th.
  • Determine whether advanced-package uploads should be available to all users, selected users, groups, or no users prior to October 25th.
  • Update internal administrator and help desk documentation as needed.
  • Inform support teams of the new governance control.
  • If no action is taken, advanced-package uploads remain allowed by default.

[Compliance Considerations:]

  • The change introduces new administrative governance controls for advanced agents and plugins.
  • The feature supports administration through Microsoft Entra ID group membership.

Source: Microsoft Message Center • Analysed by MWPro

<<< [MC1472007] Archive
Tooltip: View earlier revisions of this post

Share This Update
Tags: