Agent 365 has launched as generally available on May 1, 2026. Do a review of the product documentation for updates and modify the site contents to align with the latest information.
https://learn.microsoft.com/en-us/microsoft-agent-365/overview
Introduction
Microsoft Agent 365 is moving to general availability (GA) on May 1, 2026. GA indicates that Agent 365 is ready for enterprise production use, with clearer licensing boundaries, improved governance, and predictable support. This release incorporates customer feedback from the Frontier program while continuing to provide a dedicated path for early access to preview capabilities.
When this will happen
General Availability (Worldwide): May 1, 2026
How this affects your organization
Who is affected
Microsoft 365 tenants currently enrolled in the Agent 365 Frontier program
Admins managing Agent 365 through:
Microsoft 365 admin center
Microsoft Entra
Microsoft Defender
Microsoft Purview
Microsoft Intune
Organizations planning to evaluate or deploy Agent 365 in production
What will happen
Agent 365 GA experience
Trial and paid Agent 365 licenses now represent the GA, enterprise-ready experience.
Agent 365 licenses are available as:
A standalone SKU
Part of Microsoft 365 E7
GA licenses are available across all commercial channels. Information about EDU, Charity, and Government SKUs will be shared later.
Frontier program
Frontier continues to provide early access to preview features.
Frontier and preview features are clearly labeled in-product as Preview or Frontier.
Frontier is not intended for production deployment and does not include SLAs.
Workload-specific details
Microsoft 365 admin center
No functional changes at GA.
Preview and Frontier features remain clearly tagged.
Microsoft Entra
Agent-related Identity Governance features (such as access packages and lifecycle workflows for agent sponsor maintenance) require an Agent 365 license to continue use.
Existing use of Conditional Access and Identity Protection for agents continues without change.
Network Control for agents (for example, prompt injection protection, threat intelligence filtering, shadow AI detection, web and URL filtering, and network file filtering) requires an Agent 365 license.
Network Control on local endpoint devices continues to work if the Global Secure Access client is installed. Learn more about installing the Global Secure Access client for Windows.
Microsoft Defender
Agent protection features remain in preview for Defender for Cloud Apps and Defender for Cloud.
Copilot Studio AI security posture, real-time protection, and investigation capabilities will require an Agent 365 license when each feature reaches GA in a future release.
Microsoft Purview
Frontier participants retain access to Purview capabilities for agents, including:
AI Observability
Data Loss Prevention
Insider Risk Management
Communication Compliance
Compliance Manager
Data Lifecycle Management
eDiscovery
After the Frontier program ends, Purview coverage for all agents managed in Agent 365 will require an Agent 365 license.
Microsoft Intune
Frontier customers licensed with Intune can discover Windows devices running OpenClaw via a new Agent 365 Shadow AI page in the Microsoft 365 admin center.
Admins can apply policies to block common OpenClaw execution methods and link to the Intune admin center for advanced controls.
What you can do to prepare
No action is required to remain enrolled in the Frontier program.
Important to note:
Frontier access continues automatically at GA.
A temporary interruption to Frontier access (up to 48 hours) may occur during the transition.
Frontier does not include production SLAs or support guarantees.
If you plan to use Agent 365 in production:
Start an Agent 365 trial or purchase a paid license.
Review which workloads and features in your tenant require Agent 365 licensing.
To opt out of the Frontier program:
Sign in to the Microsoft 365 admin center.
Go to Copilot > Settings > Copilot Frontier.
Set access to No access.
Share this update with your security, compliance, and helpdesk teams to set expectations about GA versus preview experiences.
Learn more:
Microsoft Agent 365 Licensing FAQ page has also been published: https://www.microsoft.com/licensing/faqs/122
Q: How is Agent 365 licensed—per user or per agent—and how does the licensing model differ between Microsoft 365 E7 and Agent 365 standalone?
Agent 365 is licensed per user, whether purchased as part of Microsoft 365 E7 or as a standalone offering.
Agents do not require their own licenses. Licensing aligns to how agents are used - across both delegated access and own access flows and is tied to the user associated with the agent (e.g. user, owner, sponsor, or manager).
In all cases, licensing is assigned per user.
Q: What is the business model and pricing structure for Agent 365, including pay-as-you-go and consumption-based options?
Agent 365 is available in the ME7 license with list price $99/user/mo. It can also be available standalone license with list price at $15/user/mo.
There are no consumption-based costs for Agent 365 yet. All interactions of a user’s agents (including agents using delegated access and own access) will be managed under the per user license.
Q: Which users in our organization should we license for Agent 365?
An Agent 365 license is recommended for all users who interact with, manage, or sponsor Agent 365–managed agents (i.e., agents registered in the Agent 365 control plane).
We recommend broad coverage to support compliance and scale, including:
Users interacting with agents
Agent owners, sponsors, and managers
Microsoft 365 Copilot users
Teams expanding beyond initial pilots into broader agent adoption
A license is required for users who interact with, manage, or sponsor agents that use Agent 365 premium capabilities. If unlicensed users benefit from these capabilities, the organization may be out of compliance.
Microsoft recognizes that this guidance can be difficult to operationalize today, as there is limited visibility into user-level agent interactions during policy configuration. We are continuing to improve visibility, tracking, and the overall licensing experience.
Q: If we already have Microsoft 365 Copilot, do we still need Agent 365 for full protection and compliance for agents?
Yes. Microsoft 365 Copilot provides AI capabilities to end-users, but Agent 365 is needed in addition to M365 Copilot to ensure all agents (beyond Copilot) are managed, governed and secured.
Think of it this way: Copilot is about what AI can do; Agent 365 is about controlling what AI is allowed to do.
Q: If Agent 365 is a per-user license that covers all agents a user touches, can a single licensed sponsor manage a fleet of 1,000+ A2A or A2T agents manage a fleet of 1,000+ agents?
Yes, a single licensed user can manage a large number of agents, including at fleet scale.
There is no fixed cap in the licensing model on the number of agents a licensed user can oversee.
However, standard service protections and usage limits may apply to ensure platform stability and fair usage.
Q: Do we need Microsoft 365 E7 to use Agent 365?
No, Microsoft 365 ME7 is not needed for using Agent 365, which can be purchased as a standalone add-on ($15 per user month). However, Microsoft 365 E7 provides the most complete Agent 365 experience for scaling agents securely across an organization.
Q: Does Microsoft 365 E7 include Agent 365?
Yes, Agent 365 is available as part of Microsoft 365 E7 and is also offered as a standalone per‑user subscription, subject to applicable licensing terms and availability at GA. Agent 365 is not included in M365 E3/E5 licenses.
Q: Do we need a Microsoft 365 E3 or Microsoft 365 E5 license as a prerequisite to use Agent 365 to govern and secure agentic artificial intelligence (AI) workloads?
No, there is no licensing pre-req for Agent 365. However, some security capabilities are limited without appropriate E3 or E5 licenses, including:
Label-based data security capabilities, including label honoring, label inheritance, label-based DLP, will require grounding data to be labeled, which requires OE3+ licenses for Microsoft 365 data or Purview pay-as-you-go for non-M365 data.
Conditional Access and Identity Protection for agents in a delegated access flow are evaluated against a user’s identity token, hence a user must be licensed with Microsoft 365 E3 for Conditional Access and Microsoft 365 E5 for Identity Protection for these features to work for their delegated access flows.
Advanced threat hunting and investigation for agents depend on log data, which is currently captured via Office connectors in Microsoft Defender for Cloud Apps (MDA). As a result, a user must have a license that includes MDA or these capabilities to function.
Q: If we are currently on Microsoft 365 E3, does an Agent 365 license grant us E5-level Microsoft Purview or Microsoft Defender capabilities?
No. An Agent 365 license does not grant E5-level security features to a user or elevate their seat's capabilities. It provides no additional user security value, meaning it does not upgrade the underlying human user's identity or access rights to premium security tools.
Q: Which Agent 365 capabilities are included with Microsoft 365, and which require an Agent 365 license?
Some Agent 365 capabilities are included with a Microsoft 365 plan and available at the tenant level, including:
Agent Identity
Agent Registry
Basic agent usage insights
Shadow AI detection
Admin agent governance actions (publish, deploy, block, delete, approve, reassign, manage user access, pin, etc.)
Audit logs and eDiscovery for agent activity
Block unsanctioned, shadow AI agents
Other capabilities require an Agent 365 licenses:
Observability:
Advanced agent usage insights
Agent Map
Registry sync
Graph API
Governance
Agent Identity Governance
Lifecycle management for agents
Automate agent lifecycle actions
Tool controls for agents
Policy templates for agents
Data Lifecyle Management for agent data and interactions
Communication Compliance for agents
Security
Data Security Posture Management for agents
Insider Risk Management for agents
Agents inherit and honor data sensitivity labels
Data loss prevention for agents
Conditional access and identity protection for agents
Secure Access Service Edge (SASE) for agents
Device compliance for agent conditional access
Policy controlled environment for agents runtime
Agent Security Posture Management
Threat Detection and Blocking for agents
Threat Hunting and Investigation for agents
Q: Does Microsoft 365 E7 (including Agent 365) meet European Union (EU) Data Boundary requirements?
Yes. Microsoft 365 E7, including Agent 365, is designed to align with Microsoft’s EU Data Boundary commitments.
As with other Microsoft commercial offerings, customers will have options available both with and without Microsoft Teams in accordance with Microsoft’s commitments in the EU.
Q: Do we pay extra for security when we register Microsoft Foundry agent in Agent 365?
No. Agent 365 does not differentiate between agents built in Microsoft Foundry or Copilot Studio. Since the license is assigned to the user, the security and governance capabilities are included at no additional cost, regardless of which platform was used to create the agent.
Q: What are the key principles to understand Agent 365 licensing?
Principle 1: Agent 365 is licensed per-user for every agent. We recommend licensing all users of agents
Agent 365 is licensed per user, covering agents that users interact with, manage, or sponsor across both delegated access and own access.
A single Agent 365 license covers all agents associated with that user; agents themselves are not licensed. Licensing is tied to the user benefiting from or responsible for the agent’s actions.
An Agent 365 license is recommended for all users who interact with, manage, or sponsor agents, to ensure consistent governance and protection as adoption scales.
A license is required only for users who interact with, manage, or sponsor agents that use Agent 365 premium capabilities.
Principle 2: Licensing is contractually enforced – same as today for ME5
If an agent is tied to an unlicensed user, the activity is not entitled to A365 protections. This creates an out of compliance scenario.
As with other Microsoft services, users cannot access or benefit from functionality they are not licensed for under the Microsoft Universal License Terms.
Multiplexing, the pooling services to reduce the number of required licenses, is not permitted.
Principle 3: Microsoft Cloud subscription customers get basic capabilities. Licensed users are entitled to premium capabilities.
All Microsoft Cloud subscription customers receive foundational Agent 365 capabilities at no additional cost, including agent identity, inventory visibility, basic usage insights, and core admin governance actions.
Premium capabilities such as advanced usage analytics, agent governance policies, security posture management, threat detection, and data security controls—require an Agent 365 license.
This tiered model allows organizations to start governing agents immediately, while enabling deeper observability, governance, and security controls as adoption scales.
An Agent 365 license is required for users who need premium capabilities; foundational capabilities included with Microsoft Cloud subscriptions do not require additional licensing.
Principle 4: Agent 365 covers a range of agent types (both 1P and 3P) though some feature availability may vary.
Agent 365 provides a unified observability, governance, and framework that applies to both first-party Microsoft agents and ecosystem partner agents operating within the tenant.
Core capabilities – such as agent identity, registry visibility, and admin governance apply broadly across agent types, ensuring consistent management regardless of origin.
Premium capabilities may vary in depth or availability depending on the agent type, platform, or level of integration.
Organizations can sync agents from external platforms into the Agent 365 registry, extending visibility and governance to ecosystem partner agents across their environment.
Q: If Agent 365 governs agents rather than people, why is it licensed per user?
Agent 365 is licensed per user because every agent is associated with a person in some capacity, whether interacting with the agent or serving as its owner, sponsor, or manager.
This per-user model is familiar and predictable, helping organizations plan, budget, and scale their agent adoption.
Q: What counts toward our Agent 365 licensing needs—blueprints, agents, or agent instances?
Blueprints, agents, and agent instances are not licensed separately. They do not count as individual licensing units.
A single licensed user can create, manage, and use multiple blueprints, agents, and agent instances.
There are no additional per-agent or per-instance charges within Agent 365.
Q: Is Windows 365 for Agents included in Agent 365 or bundled with other Microsoft products?
No. Windows 365 for Agents is not included in Agent 365 and is not bundled with other Microsoft products like Copilot Studio.
It is a standalone offering that integrates with Agent 365 and other services, but must be purchased separately.
Agent 365 provides the governance layer for agents, while Windows 365 for Agents provides the runtime environment when needed, so customers can choose to use them together based on their scenarios.
Q: How is Windows 365 for Agents sold with Agent 365?
Windows 365 for Agents and Agent 365 are offered as separate but complementary products.
Agent 365 is licensed per user (either standalone or as part of Microsoft 365 E7), while Windows 365 for Agents is billed based on usage.
Customers typically use Agent 365 to govern agents across their environment and add Windows 365 for Agents when those agents need a full desktop or browser-based runtime environment to complete tasks.
Q: How is Windows 365 for Agents billed?
Windows 365 for Agents is billed on a pay-as-you-go basis, based on hourly usage.
Customers are charged $0.40 per VM per hour, and the cost appears as a separate line item in billing.
This model allows organizations to scale usage up or down depending on demand, so they only pay for the compute resources when agents are actively running.
Q: If I don’t have an Agent 365 license, can I still use Data Security Posture Management (DSPM) and AI Observability?
Yes. You can use DSPM and AI Observability without an Agent 365 license. However, to see agent-specific insights in DSPM and AI Observability, you need Agent 365 or Microsoft 365 E7. If you don’t have Agent 365 or Microsoft 365 E7, you can still view non-agent insights, but you won’t see agent-related insights.
Agent 365 has launched as generally available on May 1, 2026. Do a review of the product documentation for updates and modify the site contents to align with the latest information.
https://learn.microsoft.com/en-us/microsoft-agent-365/overview
M365 Message Center message contents is below: https://admin.cloud.microsoft/?ref=MessageCenter/:/messages/MC1296867
Introduction
Microsoft Agent 365 is moving to general availability (GA) on May 1, 2026. GA indicates that Agent 365 is ready for enterprise production use, with clearer licensing boundaries, improved governance, and predictable support. This release incorporates customer feedback from the Frontier program while continuing to provide a dedicated path for early access to preview capabilities.
When this will happen
General Availability (Worldwide): May 1, 2026
How this affects your organization
Who is affected
Microsoft 365 tenants currently enrolled in the Agent 365 Frontier program
Admins managing Agent 365 through:
Microsoft 365 admin center
Microsoft Entra
Microsoft Defender
Microsoft Purview
Microsoft Intune
Organizations planning to evaluate or deploy Agent 365 in production
What will happen
Agent 365 GA experience
Trial and paid Agent 365 licenses now represent the GA, enterprise-ready experience.
Agent 365 licenses are available as:
A standalone SKU
Part of Microsoft 365 E7
GA licenses are available across all commercial channels. Information about EDU, Charity, and Government SKUs will be shared later.
Frontier program
Frontier continues to provide early access to preview features.
Frontier and preview features are clearly labeled in-product as Preview or Frontier.
Frontier is not intended for production deployment and does not include SLAs.
Workload-specific details
Microsoft 365 admin center
No functional changes at GA.
Preview and Frontier features remain clearly tagged.
Microsoft Entra
Agent-related Identity Governance features (such as access packages and lifecycle workflows for agent sponsor maintenance) require an Agent 365 license to continue use.
Existing use of Conditional Access and Identity Protection for agents continues without change.
Network Control for agents (for example, prompt injection protection, threat intelligence filtering, shadow AI detection, web and URL filtering, and network file filtering) requires an Agent 365 license.
Network Control on local endpoint devices continues to work if the Global Secure Access client is installed. Learn more about installing the Global Secure Access client for Windows.
Microsoft Defender
Agent protection features remain in preview for Defender for Cloud Apps and Defender for Cloud.
Copilot Studio AI security posture, real-time protection, and investigation capabilities will require an Agent 365 license when each feature reaches GA in a future release.
Microsoft Purview
Frontier participants retain access to Purview capabilities for agents, including:
AI Observability
Data Loss Prevention
Insider Risk Management
Communication Compliance
Compliance Manager
Data Lifecycle Management
eDiscovery
After the Frontier program ends, Purview coverage for all agents managed in Agent 365 will require an Agent 365 license.
Microsoft Intune
Frontier customers licensed with Intune can discover Windows devices running OpenClaw via a new Agent 365 Shadow AI page in the Microsoft 365 admin center.
Admins can apply policies to block common OpenClaw execution methods and link to the Intune admin center for advanced controls.
What you can do to prepare
No action is required to remain enrolled in the Frontier program.
Important to note:
Frontier access continues automatically at GA.
A temporary interruption to Frontier access (up to 48 hours) may occur during the transition.
Frontier does not include production SLAs or support guarantees.
If you plan to use Agent 365 in production:
Start an Agent 365 trial or purchase a paid license.
Review which workloads and features in your tenant require Agent 365 licensing.
To opt out of the Frontier program:
Sign in to the Microsoft 365 admin center.
Go to Copilot > Settings > Copilot Frontier.
Set access to No access.
Share this update with your security, compliance, and helpdesk teams to set expectations about GA versus preview experiences.
Learn more:
Get started with Microsoft Agent 365 | Microsoft Learn
Install the Global Secure Access client for Windows | Global Secure Access | Microsoft Entra | Microsoft Learn
Microsoft Agent 365: The Control Plane for Agents
Monitor agents with Microsoft Defender | Microsoft Agent 365 | Microsoft Learn
Protect agent identities with Microsoft Entra | Microsoft Agent 365 | Microsoft Learn
Start an Agent 365 trial
Use Microsoft Purview to manage data security & compliance for Microsoft Agent 365 | Microsoft Purview | Microsoft Learn
Microsoft Agent 365 Licensing FAQ page has also been published: https://www.microsoft.com/licensing/faqs/122
Q: How is Agent 365 licensed—per user or per agent—and how does the licensing model differ between Microsoft 365 E7 and Agent 365 standalone?
Agent 365 is licensed per user, whether purchased as part of Microsoft 365 E7 or as a standalone offering.
Agents do not require their own licenses. Licensing aligns to how agents are used - across both delegated access and own access flows and is tied to the user associated with the agent (e.g. user, owner, sponsor, or manager).
In all cases, licensing is assigned per user.
Q: What is the business model and pricing structure for Agent 365, including pay-as-you-go and consumption-based options?
Agent 365 is available in the ME7 license with list price $99/user/mo. It can also be available standalone license with list price at $15/user/mo.
There are no consumption-based costs for Agent 365 yet. All interactions of a user’s agents (including agents using delegated access and own access) will be managed under the per user license.
Q: Which users in our organization should we license for Agent 365?
An Agent 365 license is recommended for all users who interact with, manage, or sponsor Agent 365–managed agents (i.e., agents registered in the Agent 365 control plane).
We recommend broad coverage to support compliance and scale, including:
Users interacting with agents
Agent owners, sponsors, and managers
Microsoft 365 Copilot users
Teams expanding beyond initial pilots into broader agent adoption
A license is required for users who interact with, manage, or sponsor agents that use Agent 365 premium capabilities. If unlicensed users benefit from these capabilities, the organization may be out of compliance.
Microsoft recognizes that this guidance can be difficult to operationalize today, as there is limited visibility into user-level agent interactions during policy configuration. We are continuing to improve visibility, tracking, and the overall licensing experience.
Q: If we already have Microsoft 365 Copilot, do we still need Agent 365 for full protection and compliance for agents?
Yes. Microsoft 365 Copilot provides AI capabilities to end-users, but Agent 365 is needed in addition to M365 Copilot to ensure all agents (beyond Copilot) are managed, governed and secured.
Think of it this way: Copilot is about what AI can do; Agent 365 is about controlling what AI is allowed to do.
Q: If Agent 365 is a per-user license that covers all agents a user touches, can a single licensed sponsor manage a fleet of 1,000+ A2A or A2T agents manage a fleet of 1,000+ agents?
Yes, a single licensed user can manage a large number of agents, including at fleet scale.
There is no fixed cap in the licensing model on the number of agents a licensed user can oversee.
However, standard service protections and usage limits may apply to ensure platform stability and fair usage.
Q: Do we need Microsoft 365 E7 to use Agent 365?
No, Microsoft 365 ME7 is not needed for using Agent 365, which can be purchased as a standalone add-on ($15 per user month). However, Microsoft 365 E7 provides the most complete Agent 365 experience for scaling agents securely across an organization.
Q: Does Microsoft 365 E7 include Agent 365?
Yes, Agent 365 is available as part of Microsoft 365 E7 and is also offered as a standalone per‑user subscription, subject to applicable licensing terms and availability at GA. Agent 365 is not included in M365 E3/E5 licenses.
Q: Do we need a Microsoft 365 E3 or Microsoft 365 E5 license as a prerequisite to use Agent 365 to govern and secure agentic artificial intelligence (AI) workloads?
No, there is no licensing pre-req for Agent 365. However, some security capabilities are limited without appropriate E3 or E5 licenses, including:
Label-based data security capabilities, including label honoring, label inheritance, label-based DLP, will require grounding data to be labeled, which requires OE3+ licenses for Microsoft 365 data or Purview pay-as-you-go for non-M365 data.
Conditional Access and Identity Protection for agents in a delegated access flow are evaluated against a user’s identity token, hence a user must be licensed with Microsoft 365 E3 for Conditional Access and Microsoft 365 E5 for Identity Protection for these features to work for their delegated access flows.
Advanced threat hunting and investigation for agents depend on log data, which is currently captured via Office connectors in Microsoft Defender for Cloud Apps (MDA). As a result, a user must have a license that includes MDA or these capabilities to function.
Q: If we are currently on Microsoft 365 E3, does an Agent 365 license grant us E5-level Microsoft Purview or Microsoft Defender capabilities?
No. An Agent 365 license does not grant E5-level security features to a user or elevate their seat's capabilities. It provides no additional user security value, meaning it does not upgrade the underlying human user's identity or access rights to premium security tools.
Q: Which Agent 365 capabilities are included with Microsoft 365, and which require an Agent 365 license?
Some Agent 365 capabilities are included with a Microsoft 365 plan and available at the tenant level, including:
Agent Identity
Agent Registry
Basic agent usage insights
Shadow AI detection
Admin agent governance actions (publish, deploy, block, delete, approve, reassign, manage user access, pin, etc.)
Audit logs and eDiscovery for agent activity
Block unsanctioned, shadow AI agents
Other capabilities require an Agent 365 licenses:
Observability:
Advanced agent usage insights
Agent Map
Registry sync
Graph API
Governance
Agent Identity Governance
Lifecycle management for agents
Automate agent lifecycle actions
Tool controls for agents
Policy templates for agents
Data Lifecyle Management for agent data and interactions
Communication Compliance for agents
Security
Data Security Posture Management for agents
Insider Risk Management for agents
Agents inherit and honor data sensitivity labels
Data loss prevention for agents
Conditional access and identity protection for agents
Secure Access Service Edge (SASE) for agents
Device compliance for agent conditional access
Policy controlled environment for agents runtime
Agent Security Posture Management
Threat Detection and Blocking for agents
Threat Hunting and Investigation for agents
Q: Does Microsoft 365 E7 (including Agent 365) meet European Union (EU) Data Boundary requirements?
Yes. Microsoft 365 E7, including Agent 365, is designed to align with Microsoft’s EU Data Boundary commitments.
As with other Microsoft commercial offerings, customers will have options available both with and without Microsoft Teams in accordance with Microsoft’s commitments in the EU.
Q: Do we pay extra for security when we register Microsoft Foundry agent in Agent 365?
No. Agent 365 does not differentiate between agents built in Microsoft Foundry or Copilot Studio. Since the license is assigned to the user, the security and governance capabilities are included at no additional cost, regardless of which platform was used to create the agent.
Q: What are the key principles to understand Agent 365 licensing?
Principle 1: Agent 365 is licensed per-user for every agent. We recommend licensing all users of agents
Agent 365 is licensed per user, covering agents that users interact with, manage, or sponsor across both delegated access and own access.
A single Agent 365 license covers all agents associated with that user; agents themselves are not licensed. Licensing is tied to the user benefiting from or responsible for the agent’s actions.
An Agent 365 license is recommended for all users who interact with, manage, or sponsor agents, to ensure consistent governance and protection as adoption scales.
A license is required only for users who interact with, manage, or sponsor agents that use Agent 365 premium capabilities.
Principle 2: Licensing is contractually enforced – same as today for ME5
If an agent is tied to an unlicensed user, the activity is not entitled to A365 protections. This creates an out of compliance scenario.
As with other Microsoft services, users cannot access or benefit from functionality they are not licensed for under the Microsoft Universal License Terms.
Multiplexing, the pooling services to reduce the number of required licenses, is not permitted.
Principle 3: Microsoft Cloud subscription customers get basic capabilities. Licensed users are entitled to premium capabilities.
All Microsoft Cloud subscription customers receive foundational Agent 365 capabilities at no additional cost, including agent identity, inventory visibility, basic usage insights, and core admin governance actions.
Premium capabilities such as advanced usage analytics, agent governance policies, security posture management, threat detection, and data security controls—require an Agent 365 license.
This tiered model allows organizations to start governing agents immediately, while enabling deeper observability, governance, and security controls as adoption scales.
An Agent 365 license is required for users who need premium capabilities; foundational capabilities included with Microsoft Cloud subscriptions do not require additional licensing.
Principle 4: Agent 365 covers a range of agent types (both 1P and 3P) though some feature availability may vary.
Agent 365 provides a unified observability, governance, and framework that applies to both first-party Microsoft agents and ecosystem partner agents operating within the tenant.
Core capabilities – such as agent identity, registry visibility, and admin governance apply broadly across agent types, ensuring consistent management regardless of origin.
Premium capabilities may vary in depth or availability depending on the agent type, platform, or level of integration.
Organizations can sync agents from external platforms into the Agent 365 registry, extending visibility and governance to ecosystem partner agents across their environment.
Q: If Agent 365 governs agents rather than people, why is it licensed per user?
Agent 365 is licensed per user because every agent is associated with a person in some capacity, whether interacting with the agent or serving as its owner, sponsor, or manager.
This per-user model is familiar and predictable, helping organizations plan, budget, and scale their agent adoption.
Q: What counts toward our Agent 365 licensing needs—blueprints, agents, or agent instances?
Blueprints, agents, and agent instances are not licensed separately. They do not count as individual licensing units.
A single licensed user can create, manage, and use multiple blueprints, agents, and agent instances.
There are no additional per-agent or per-instance charges within Agent 365.
Q: Is Windows 365 for Agents included in Agent 365 or bundled with other Microsoft products?
No. Windows 365 for Agents is not included in Agent 365 and is not bundled with other Microsoft products like Copilot Studio.
It is a standalone offering that integrates with Agent 365 and other services, but must be purchased separately.
Agent 365 provides the governance layer for agents, while Windows 365 for Agents provides the runtime environment when needed, so customers can choose to use them together based on their scenarios.
Q: How is Windows 365 for Agents sold with Agent 365?
Windows 365 for Agents and Agent 365 are offered as separate but complementary products.
Agent 365 is licensed per user (either standalone or as part of Microsoft 365 E7), while Windows 365 for Agents is billed based on usage.
Customers typically use Agent 365 to govern agents across their environment and add Windows 365 for Agents when those agents need a full desktop or browser-based runtime environment to complete tasks.
Q: How is Windows 365 for Agents billed?
Windows 365 for Agents is billed on a pay-as-you-go basis, based on hourly usage.
Customers are charged $0.40 per VM per hour, and the cost appears as a separate line item in billing.
This model allows organizations to scale usage up or down depending on demand, so they only pay for the compute resources when agents are actively running.
Q: If I don’t have an Agent 365 license, can I still use Data Security Posture Management (DSPM) and AI Observability?
Yes. You can use DSPM and AI Observability without an Agent 365 license. However, to see agent-specific insights in DSPM and AI Observability, you need Agent 365 or Microsoft 365 E7. If you don’t have Agent 365 or Microsoft 365 E7, you can still view non-agent insights, but you won’t see agent-related insights.