Yes, in A365 you can apply access packages policies when onboarding agents, so they start secure. This policy will define when agents access to resources expire. 

Agent 365 has governance capabilities to help organizations regularly confirm that agents are still needed, owned, and safe to use. Orgs can require sponsors or owners to periodically review and verify their agents, and Identity Governance features can help manage reviews, expiration, and ownership requirements. Today, they're handled manually, but we plan to add more automated capabilities over time.

A365 provides full lifecycle management and governance for agents, including onboarding, monitoring, suspension, and retirement. Today, lifecycle actions are admin-controlled to ensure accountability and auditability. Thank you for this feedback for A365 to evolve towards policy-driven lifecycle automation, we will definitely take it into consideration.