Disabling Agent Creation for End Users with Copilot for Microsoft 365

You may need to manage this through more than one Copilot control, because access to published agents and the ability to create agents are separate admin concerns. I would first create a small security group for approved agent builders, then check the Microsoft 365 admin center Copilot settings for any tenant controls related to agent creation, sharing, or Agent Builder availability. Keep Copilot Studio licensing disabled for general users, but also verify whether the M365 Copilot app has a separate creation policy in your tenant rollout ring. If your admin center only exposes agent access and sharing controls, open a Microsoft support ticket and ask specifically for the Agent Builder creation control status in your tenant. Include screenshots of the available Copilot settings so support does not answer for a UI you do not have yet.