New Features

Govern Every AI Agent in your Tenant from One Place

AI agents are being created across Microsoft 365 faster than most organizations can track them. They appear in Copilot Studio, in Agent Builder, and as SharePoint Agents sitting inside document libraries, each with its own creator, its own knowledge sources, and its own sharing settings. Until now there has been no single place to answer the basic questions: how many agents exist, who built them, what data they are grounded on, and which of them are exposed.

AI & Agents brings all of it into one governed surface. Orchestry inventories every agent across the three platforms, scores each one for risk, shows you what it is connected to and who can reach it, and gives you a single audited action to remove the ones that should not exist. It runs on the Microsoft 365 E3 or E5 licensing you already hold, with no Agent 365 entitlement required.

• One inventory across three platforms. Copilot Studio agents, Agent Builder agents, and SharePoint Agents are unified into a single filterable, exportable roster, with owner names resolved to real people rather than object IDs and a creation date on every row.

• A composite risk score you can act on. Every agent carries a score from 0 to 100, banded into five tiers from Low to Critical. The score is built from named governance insights, and the insights that fired are shown on the agent itself with a plain description of each, so the answer to "why is this agent near the top of my list" reads in words rather than arithmetic: it is shared tenant wide, its owner has left the company, it reaches an external MCP server.

• Every insight doubles as a filter. Each one carries a live count, so "we have a sharing problem" becomes "we have three agents shared tenant wide."

• A dashboard built for triage. Active agent counts, risk distribution across your estate, your most prolific agent creators, your highest risk agents, and 90 day inventory growth.

• The Power Platform context around your agents. Alongside the Agents roster you get Environments, DLP Policies, Custom Connectors, and Solutions, with per environment app and flow counts. A custom connector is how an agent reaches a system nobody expected it to reach, and it is usually the least inspected object in a tenant.

• Full coverage without extra licensing. Orchestry discovers your complete agent inventory, including Agent Builder agents that were shared by their creator rather than published to the organization.

• Remove an agent safely. Delete an agent across all sources from one place. Deleted agents are retained with a Deleted status, so your audit trail and trend history survive the cleanup.

• A dedicated admin role. The AI & Agents Admin role can be assigned to individual users or to groups and grants agent governance, reporting and actions and nothing beyond them. Every assignment change is written to the access control history.

AI & Agents is available on the Orchestry Enterprise plan. The AI readiness dashboard, which scores your tenant on 13 governance signals covering oversharing, governance, and Orchestry safeguards, is included on every Orchestry plan.

Bug Fixes

• Fixed an issue in the request wizard where the privacy picker did not render, leaving no way to continue past the Permissions step.

• Fixed an issue where sign-in and other cached endpoints could hang until the process was restarted.

• Fixed a performance issue where building Insights trend data placed excessive strain on large tenants.

• Fixed an issue where a new installation's first crawl could not read Teams channel messages.

• Fixed an issue in the new reporting experience where workspace search matched only a complete site URL and not a URL fragment.

• Fixed an issue where helper text on the OneDrive Reviews welcome page did not respect its "Show At Top of Page" position setting.