Microsoft is adding a new tenant-level admin control in the Microsoft 365 admin center to manage who can create org-wide sharing links for user-built agents in Copilot Studio Lite. This update gives administrators granular governance to align agent-sharing permissions with organizational policies across Microsoft 365.
- This change applies to agents created through Copilot Studio Lite (formerly known as Copilot Studio Agent Builder). For example, it’s available at m365.cloud.microsoft/chat, in the Microsoft 365 Copilot desktop app, and in the Teams desktop client (via Copilot Chat).
- This change can also affect existing declarative agents that were previously shared with the entire organization.
Timeline
The rollout should be completed by late October 2025.
Impact on your organization
By default, all users with access to Copilot Studio Lite can share declarative agents with the entire organization. With this update, admins can now choose whether all users, no users, or specific users or groups are permitted to create org-wide sharing links for agents built in Copilot Studio Lite.
This change only affects who can create org-wide sharing links. Users can still share agents with specific people in the organization or keep them private.
A new section is available in the Microsoft 365 admin center › Copilot Settings › Data Access › Agents.
By default, all users with agent access can create org-wide sharing links. Any change to this setting should take effect within a few minutes.
The new restriction also applies to existing declarative agents that were previously shared with the entire organization. If unpermitted owners try to edit such an agent, they’ll see a notice sharing has been restricted by an administrator.
The owner must select an alternative sharing option before continuing.
If users attempt to open an agent that was previously shared with the organization, they’ll receive an error message like this:
We couldn’t find this app
You might not have access to this app. Please contact your IT admin for help.
