Copilot Control System innovations in the Microsoft 365 Copilot Wave 2 Spring release
Today’s Microsoft 365 Copilot Wave 2 Spring release highlights new capabilities for the new era of human-agent collaboration. Teams are now empowered to address unique business needs by creating and customizing secure, enterprise-grade agents faster and more easily than ever—and as an IT pro you’re probably wondering how you’re going to manage that. We hear you, and are excited to share new capabilities in the Copilot Control System (CCS) to help IT administrators and security professionals start solving the challenges of cost management, security and governance, and lifecycle management so that you can effectively secure, measure, and manage the use of Microsoft 365 Copilot and agents to maximize their impact. Security & Governance Protecting your organization’s data from oversharing, data loss, and insider risks is crucial for effective agent deployment. Apps and agents in Microsoft Purview Data Security Posture Management for AI (public preview available June 2025) empowers administrators to identify and manage potential data security risks associated with agents. It allows them to understand any sensitive data accessed by agents, identify gaps in data security policies, and take actions to address those gaps—all from a single dashboard. Apps and agents in Data Security Posture Management for AI dashboard Admins can access comprehensive insights about a specific agent and see how the agent is protected by Purview data security policies. The detailed agent view indicates which policies are applied to the agent and provides the option for admins to create a policy directly from this view to address any coverage gaps. Here are some examples of insights related to coverage gaps: Alerts for risky agent interactions: Shows if the agent has received prompts containing sensitive data or risky information. Control inappropriate use of AI agents: Detect any inappropriate or unethical use of the agent. Block sensitive data from AI agent processing: Displays the confidentiality level of data the agent interacts with, providing an option to block certain levels from being accessed by the agent. Additional risk-related insights are also available from the detailed agent view, empowering admins with visibility to make informed decisions about how agents should interact with the organization’s data. AI agent details view Measurement & Reporting Copilot Analytics is our set of reporting capabilities designed to help organizations measure the impact of AI on their business. We’ve created a set of reports to understand agent usage and maximize their effectiveness: Reports for IT admins to help manage agents across the organization and leadership level reporting to assess agent productivity and impact. Understanding agent usage and consumption is fundamental to managing potential sprawl and associated costs. IT and AI admins need visibility into which agents people are using and how they’re being used to effectively manage agents. The Microsoft 365 admin center offers rich, built-in agent usage and consumption reporting that enable admins to monitor agent usage across their organization. Admins can review and understand overall agent usage in Microsoft 365 Copilot Chat including total active users, segmentation by Microsoft 365 Copilot licensed and unlicensed users, total active agents by publisher, and agent and user-level details. The new Message consumption report (targeted for public preview in May 2025) offers visibility into metered consumption of agents in Microsoft 365 Copilot Chat, including total messages consumed, cumulative and daily time series, and user and agent-level details. It provides visibility into how many agent messages are being consumed, helping you understand and manage associated costs. The Agent usage report (targeted for public preview in June 2025) gives admins the ability to review and understand overall agent usage in Microsoft 365 Copilot Chat including total active users, segmentation by Microsoft 365 Copilot licensed and unlicensed users, total active users and active agents by publisher, and agent and user-level details. agents report in the Microsoft 365 admin center Both the Message consumption report and Agent usage report provide powerful insights to inform IT decision making with regards to agent deployment and adoption. Complementing the tools available in Microsoft 365 admin center, the new Copilot Studio Agent Report (now available in public preview) in Viva Insights provides leaders and IT pros with a comprehensive view of Copilot Studio agent usage, performance, and value. In June 2025 we’re adding a new capability to this report to include customizable business impact reporting to correlate agent usage to your specific business metrics—for example, see how your support agents reduce ticket creation, or how your sales agents unlock bigger opportunities—giving you the ability to measure AI ROI within your organization. For more details on these reports, please visit our blog on agent reporting in Copilot Analytics. Management Controls The critical third step to addressing challenges of cost management and security is effective lifecycle management. Microsoft 365 admin center provides admins with the tools they need to manage agent deployment, enable, disable, or block agents for specific users or groups, and ensure that agents are used efficiently and in alignment with organizational needs. Today, agent management is available within Integrated apps and will soon be made available in a dedicated management pane within Copilot Control System. New updates to the agent inventory management layout and workflows (targeted for release in May CY2025) make it easier to see the critical information you need to manage your agent and connectors inventory. Agent management (available Q3 CY25) enables admins to easily make updates and changes to the list of users approved to create and use agents. Similarly, you can see any users who haven't been approved to use your team’s agents, and quickly decide if we want to grant them access or not. of Copilot settings in the Microsoft 365 admin center showing a control to enable/disable users or groups to install and create agents in Microsoft 365 Copilot Chat. With Shared Agent Inventory Management (targeted for release May CY2025) admins view reports and take additional actions on the insights, such as blocking or unblocking agents as appropriate. Admins can also export their agent inventory to CSV and manage agents via PowerShell. These latest capabilities equip IT administrators and security professionals with the tools you need to support your organization’s AI-powered transformation. We look forward to continuing to provide insights and controls across Copilot Control System that empower you to take informed actions and create a managed, trusted environment in which agent creators—and agent users—can thrive. To learn more about Copilot Control system, watch the demo or read the announcement blog.
