Disabling Agent Creation for End Users with Copilot for Microsoft 365

I would like to clarify the same governance requirement, specifically for Microsoft’s prebuilt agents. Enabling users to access these agents also appears to make Agent Builder available. Is there a supported way to let a selected group use only prebuilt Microsoft agents, such as Researcher and Analyst, while preventing those users from creating new agents in Agent Builder within Microsoft 365 Copilot?
Several replies mention a separate creation control, while others cannot find it. Could Microsoft confirm the current setting and any licensing or rollout prerequisites? Does allowing only agents built by Microsoft also prevent personal agent creation, or does it only restrict which agents users can install? Restricting sharing alone would not address the creation requirement.
In the governance approach I document with PALO Framework (https://paloframework.org/PALO_AIGovernance.html), I distinguish permission to use an agent from authority to create and publish one. The aim here is an approved agent inventory with clear ownership, traceability and ongoing monitoring, while retaining access to Microsoft’s predefined agents.