Microsoft is expanding the capabilities of the AI Administrator role in the Microsoft 365 admin center and Microsoft Entra to support the management of Agent 365.
Existing AI Administrators no longer need to involve a Global Administrator for additional day-to-day AI agent tasks. Users assigned the AI Administrator role can handle these tasks directly, making agent management more efficient while maintaining the appropriate level of oversight.
The AI Administrator role was introduced in November 2024.
This change does not directly impact end users, but it changes how agents are managed within a tenant, potentially affecting how those agents interact with organisational data and services.
With this update:
- AI Administrators can create, view, update, and delete agents.
- AI Administrators can manage agent credentials.
- AI Administrators can grant tenant-wide consent for apps and agents that request permissions, except for Microsoft Graph application permissions, which still require approval from a Privileged Role Administrator or Global Administrator.
- AI Administrators can view basic subscription information and see any agents flagged as potentially risky by Microsoft Entra Identity Protection for Agents.
- Agent management for AI Administrators is available through the Microsoft 365 admin center, Microsoft Entra, PowerShell, and APIs.
The rollout for the AI Administrator role update should be completed by late March 2026.
Organisations should review their current assignments for the AI Administrator role. Microsoft introduced additional Agent admin roles in November 2025, including Agent ID Administrator, Agent ID Developer, and Agent Registry Administrator, which grant fewer permissions than the AI Administrator role.
