Copilot Chat. Disable Agent Creation, Allow Agent use

We are in the same situation. We want to enable the Jira Copilot integration\extensibility, but it seems it won't function unless we "Allow the following users access to Copilot agents".

If we assign the user to the control above, it also grants them the ability to "Create Agent" which we want to prevent.

Manage agents for Microsoft 365 Copilot in Integrated Apps - Microsoft 365 admin | Microsoft Learn

Admins can enable or disable Copilot extensibility for their org by using a setting on the Integrated apps page in the Microsoft 365 admin center. This setting lets admins control who can access agents in their organization.

To do this, follow these steps:

1. Go to Integrated apps in the Microsoft 365 admin center.
2. Select Available apps, and then the settings icon.
3. Find Allow the following users access to Copilot agents and choose your preferred setting.

The setting has three options:

• All Users This is the default option and it means that all users in the organization can access agents, subject to the existing app policies and user assignments.
• No Users This option means that no users in the organization can access agents, and the third party agents are disabled in the agents flyout. This option also hides agents from the list of Available and Deployed apps on the Integrated apps page.
• Specific Users This option lets you select specific users or groups in your organization to have access to agents. So while all or specific users in your organization may have permissions to install and use apps from the Available apps and Deployed apps lists, only the users or groups you select in this setting can use agents.