Skip to content

Agent governance

Every Copilot Studio agent known, owned, authenticated and shared on purpose.

34checks

In short

Agent governance is one of the 11 core modules in The Governor, Ustrema's governance app for Microsoft Power Platform, Copilot Studio and agents. It runs 34 checks every week to answer one question: Which of our agents can anyone talk to, and who answers for them? Every failing check becomes a finding with an owner, closed with Copilot Studio, Entra Agent ID, Microsoft Purview Audit, Agent 365, Managed Environments.

The question it answers

Which of our agents can anyone talk to, and who answers for them?

What it measures

Each of the 34 checks looks for patterns like these, in every environment, every week:

  • Published agents with no authentication
  • Agents shared with the entire organisation
  • Tools that run with the maker's own credentials
  • Agents without an owner or an Entra Agent ID
  • Shadow agents: used, but missing from the inventory

What you get

Once the findings are closed and the controls are in place, your tenant has:

  • An agent baseline and an intake process
  • Every agent in the Estate with its purpose, business owner and review date
  • Sharing and authentication fixed where it matters

Microsoft services it works with

The Governor checks that these Microsoft controls are on, and our experts configure them:

  • Copilot Studio
  • Entra Agent ID
  • Microsoft Purview Audit
  • Agent 365
  • Managed Environments

Preview in the free Core

Risky published agents

The service that closes these findingsCopilot Studio and agent governance

Questions about this module

Is Agent governance included in the platform licence?

Yes. All 11 core modules, Agent governance included, come with one platform licence per tenant per year. There are no per-user fees. Extension modules are added separately.

How often does The Governor check agent governance?

Every week. The scan runs inside your own tenant, measures all 34 checks again and shows what closed, what is still open and what came back since the last scan.

Which Microsoft services does it work with?

Copilot Studio, Entra Agent ID, Microsoft Purview Audit, Agent 365, Managed Environments. The Governor checks that they are switched on and configured, and Ustrema consultants set them up when they are not.

Sources

The primary documentation and law this page relies on. Each link opens the original source.