Event details
Is it possible to enable Agents but disable Agent creation to all users (enable scoped users)?? The goal is to mitigate Agent sprawl. Thank You
MicrosoftThanks for your question! Agent creation and agent usage are currently coupled under a single tenant‑level control. In the Microsoft 365 admin center, under Agents > Settings > User Access, AI admins or Global admins can scope who can use agents, but there is no supported way to allow users to run agents while separately blocking them from creating agents under the same control.
What you can do to mitigate sprawl today:
Scope agent enablement to specific users or groups
Restrict org‑wide sharing
Govern agent lifecycle centrally via the Agent 365 registry
By any chance is this in development? I believe many org's would like to control (scoped users) to create agents by providing with proper basic training and understanding of Agents.
- Samer_Baroudi
At this time, we haven’t communicated any plans to support agent creation controls that are scoped independently from agent usage. That said, we’re actively investing in ways to help organizations scale agent management more effectively, including expanded Graph API support and conditions‑based rules that enable more flexible, policy‑driven governance across agents.
We’re listening closely to feedback like this, and scenarios around scoped enablement and responsible rollout are top of mind. Please keep the feedback coming because it directly informs how we prioritize and evolve these capabilities.
