SharePoint Showcase: From Chaos to AI-Ready with the SharePoint Admin Agent

By: Sesha Mani and Sophia Peng

The way governance gets done continues to evolve. Across organizations, agents are no longer a sidebar conversation; they are showing up in everyday work, reasoning over content, and stretching how IT thinks about permissions, lifecycle, and recovery. At the Microsoft 365 Community Conference, nearly every demo this year landed on the same grounding question from CISOs and admins alike: "What will it reason over, and how do we stay in control?"

That question is exactly what the SharePoint Admin Agent was built to answer. In this month's SharePoint Showcase, we're spotlighting Microsoft's first-party AI assistant for managing your digital estate, along with the six-step Content Governance Journey it powers, designed to take a tenant from chaos to AI-ready through a practical governance journey.

 

Meet the SharePoint Admin Agent

As the content backbone of Microsoft 365, powering Teams, OneDrive, Loop, Copilot, Copilot Cowork, and a growing ecosystem of agents, SharePoint sits at the center of content governance. Permissions, lifecycle, resilience, and relevance now span users, apps, and AI agents. Managing that surface with portals and PowerShell alone doesn't scale.

The SharePoint Admin Agent brings these capabilities together in one simple conversational experience. Admins can ask questions in natural language, gain actionable insights, and take meaningful action without switching portals or writing scripts. Behind the scenes, it's powered by SharePoint Advanced Management (SAM), the foundation for Copilot-native governance, and aligned to the 3Rs framework: Readiness, Relevance, and Resiliency.

Because the SharePoint Admin Agent is a declarative agent, you aren't locked into a single surface. You can summon it from the SharePoint admin center, the Microsoft 365 admin center, Microsoft Teams, or directly inside chat, all gated by role-based access so only the right people can see admin-level insights and take admin-level actions.

 

The Content Governance Journey: a practical path to AI-readiness

We've mapped governance into a practical, six-step path that helps move a tenant from "I don't know where to start" to AI-readiness: Assess, Structure, Lifecycle, Oversharing, Access, and Resiliency. The agent rides along through every step, surfacing insights, recommending actions, and helping admins execute.

1. Assess content state

• Status: Generally Available

Step one is the easy button. From the Advanced Management page in the SharePoint admin center, a single click kicks off a tenant-wide scan across SharePoint sites OneDrive’s, and tenant settings, with no manual data pulls or cross-referencing reports. The assessment returns a prioritized map of your content risks across Site Lifecycle, Oversharing, and Storage, with recommended next steps for each issue.

From there, you can ask the agent to go deeper, for example: “Which sites were last accessed by external users?” or “What policy should I create next?”

The agent reasons over your tenant signals and recommends actions you can take in place.

2. Control content structure with Catalog Management

• Status: Built-in grouping: Generally Available · Custom catalogs: Public Preview

Many admins find it hard to answer questions like “which sites belong to Finance, and is Finance oversharing more than Sales?” Catalog Management makes that kind of grouping straightforward. Out of the box, your sites are grouped by region, department, and user type using built-in Microsoft 365 metadata, so you can target policies, reports, access reviews, and Copilot rollout with precision, department by department or region by region.

And because organizations are unique, custom catalog creation is rolling out now: build site groups by direct CSV upload, by custom site properties, or by Entra ID extension attributes, for example, an "Executive Leadership" group that's excluded from certain lifecycle notifications. This structure gives the system a stronger foundation for more precise insights and recommendations, and it sets the stage for deeper anomaly detection over time.

Storage runways, growth trends, and ranked cleanup opportunities all become more precise the moment you give the agent the coordinates of your organization.

3. Control content lifecycle

• Status: Generally Available

Insights without ongoing automation drift back into chaos. Lifecycle skill turns inactive site management into an always-on system: a five-minute wizard lets you scope a policy (start with North America, or Finance, or just executive sites), set inactivity thresholds, choose who gets notified, and customize the message that lands in site owners' inboxes.

Run the policy in simulation mode to preview which sites would be flagged before any notifications go out, then flip to active to let it run automatically every month. Ask the agent "Identify sites with low activity owned by Sales and Marketing" and it returns a ranked table in seconds, with recommendations like "Archive these top 10 sites to free up 5 TB," and a one-step path to create the policy that prevents the same buildup next quarter.

4. Control content oversharing

• Status: SAM Admin role: Generally Available · EEEU at file/folder: Private Preview

Oversharing is one of the first questions organizations want to answer as they prepare content for Copilot. Most enterprise oversharing traces back to five common causes: site privacy set to public, default sharing set to "Everyone," broken permission inheritance, the "Everyone Except External Users" (EEEU) group, and content without sensitivity labels. To make those root causes visible at scale, Data Access Governance (DAG) reports give you a tenant-wide permission view, supporting up to one million sites, with insights into root causes and built-in mitigation actions.

New in this wave: file-level reporting, starting with content shared via Everyone groups. Because file-level visibility is sensitive (a report can reveal what an executive is working on), we're introducing a new SharePoint Advanced Management Admin role, the SAM Admin, that grants the right people the right view without expanding broader tenant rights.

These reports are available in SAM today, while file-level integration with the agent is still to come. In the meantime, the agent can help admins identify overshared sites and answer broader governance questions, while the new reports provide deeper file-level visibility where needed.

5. Control content access

• Status: Generally Available

Site Access Reviews help you delegate access reviews to the people closest to the content, site owners, while you maintain tenant-level visibility. The agent can help admins identify where reviews are needed and guide next steps.  Site owners get a clear, branded email and a focused view that shows only the files and folders presenting an oversharing risk, not the entire site. Pair this with Restricted Access Control (RAC) and Restricted Content Discovery (RCD), both honored by Copilot and both delegable to site admins, to keep sensitive content out of AI reasoning until access is right.

6. Plan for resiliency

• Status: Microsoft Baseline Security Mode GA · Microsoft 365 Backup GA - Multi-Geo Skill: Private Preview

Resiliency is the part of the journey that's easy to skip, and the part that matters most when something goes wrong. The agent is already connected to more than 60 tenant settings spanning sharing, storage, and permissions, so you can ask, "Is Microsoft Baseline Security Mode enabled in my tenant?" or "Where can I optimize sharing?" without digging through admin centers.

If recovery is needed, the agent helps you locate restore points across SharePoint and OneDrive from your Microsoft 365 Backup, and because recovery is high-stakes, the agent guides you step by step rather than acting on its own. Sign-up for Recovery Skill Private Preview.

New this month: the Multi-Geo Skill (Private Preview), starting with move-status tracking. Ask the agent about the status of user or content moves at the geo or user level, with no more hunting through reports for an update. More Multi-Geo capabilities, including initiating moves, are on the roadmap. Interested? Sign-up for Private Preview.

Designed with admins in the loop

One of the most important design principles behind the SharePoint Admin Agent is what it won't do. Ask it to delete overshared sites and it will say no. The agent is built to analyze, recommend, and take safe actions, but destructive operations like deleting content or removing sites stay in the admin's hands, with full context. By design, you can stay in control with the agent.

That's also why the new SAM Admin role exists: file-level insight is powerful, and the people who use it should be the ones who own it. The combination of conversational reasoning, a layered policy framework (RAC, RCD, inactive site policy, catalog management, and more), and clear role boundaries gives admins a governance posture that matches the pace of agent adoption: discover, decide, and act, without leaving the admin center.

 

What's next

The journey doesn't stop here. In the second half of 2026, expect deeper anomaly detection and notifications in the Storage skill, cross-skill queries that chain insights across permissions, lifecycle, and storage, the ability to control the agent's tone and temperament, and voice-driven tasks. A new Assess Progress capability will let admins track tenant readiness over time, and the Multi-Geo skill is set to expand from status tracking into initiating moves. Site owners will get their own governance hub, and we'll continue extending agent governance, including agent access insights, so the agentic estate stays as well-governed as the content beneath it.

Governance is the grounding question, and the strategic enabler

The real unlock is control. Instead of treating Copilot rollout as a tenant-wide switch, admins can roll out department by department or region by region. Take Finance as an example: scope inactive-site and ownership policies to that catalog, run the DAG permission report for the same set of sites, initiate Site Access Reviews with site owners, apply Restricted Content Discovery where labels or access aren't yet in place, and then enable Copilot for Finance with confidence. Repeat for the next group.

The SharePoint Admin Agent, together with the broader SAM portfolio, is how we’re meeting admins where they are: managing a rapidly expanding digital estate with conversational tools that make readiness, relevance, and resiliency something you can act on in real time, not just plan for. Open the SharePoint admin center, start the assessment, and let the agent show you how quickly focused governance can drive progress.

Learn more

• Microsoft 365 Copilot readiness and resiliency with SharePoint and M365 Backup/Archive
• Introducing SharePoint Admin Agent: Governing and securing SharePoint in the agentic era
• AI Security & Admin Innovation in Microsoft 365 — Microsoft 365 Community Conference demos
• SharePoint Advanced Management (SAM) overview
• Microsoft 365 Backup

 

Stay tuned every month for the SharePoint Showcase, where we share updates, best practices, and real-world examples of how SharePoint helps teams move faster, work smarter, and stay in control as AI reshapes work.