Restrict who can upload advanced agents and plugins to Microsoft 365 Copilot

Microsoft added a new setting to the Microsoft 365 admin center that controls who can upload advanced agent and plugin packages to Microsoft 365 Copilot. AI Administrators can allow uploads for all users, restrict them to specific users or Microsoft Entra ID groups, or block them entirely.

Timeline
  • Since 25 September 2026: The new admin setting is available in the Microsoft 365 admin center.
  • Starting 25 October 2026: Advanced package uploads remain allowed for all users unless administrators select a different option.


How does this affect your organization?

Microsoft added a new setting in the Microsoft 365 admin center to control who can upload advanced agents and plugins to Microsoft 365 Copilot and Cowork, including uploads from the Microsoft 365 Agents Toolkit.

To configure the new setting, open the Microsoft 365 admin center > Copilot > Settings > All settings > Advanced package uploads and select the preferred option.

New admin setting to control who can upload advanced agents and plugins to Microsoft 365 Copilot
New admin setting to control who can upload advanced agents and plugins to Microsoft 365 Copilot

This setting has no impact on basic package uploads. Basic packages include Declarative Agents with instructions only (no actions).
An advanced package uses either a Declarative Agent with actions or an MCP server. All other packages are considered basic. The setting applies only to packages uploaded by members of the organization and does not affect agents built by Microsoft or third parties.

AI administrators have until 25 October 2026 to choose their preferred configuration. If no configuration is selected, advanced package uploads remain allowed for all users, which matches the current behavior.

More information

Avatar photo

Tobias Asböck

Tobias is a Senior System Engineer with more than 10 years of professional experience with Microsoft 365 products such as SharePoint Online, SharePoint Premium, OneDrive for Business, Teams Collaboration, Entra ID, Information Protection, Universal Print, and Microsoft 365 Licensing. He also has 15+ years of experience planning, administering, and operating SharePoint Server environments. Tobias is a PowerShell Scripter with certifications for Microsoft 365 products. In his spare time, Tobias is busy with updates in the Microsoft 365 world or on the road with his road bike and other sports activities. If you have additional questions, please contact me via LinkedIn or [email protected].

Leave a Comment