Microsoft Copilot Agent Policy Let Any Users Access AI Agents

Shortly after the May 2025 rollout of 107 Copilot Agents in Microsoft 365 tenants, security specialists discovered that the “Data Access” restriction meant to block agent availability is being ignored.  Key Takeaways1. The “NoUsersCanAccessAgent” policy is bypassed, leaving some Copilot Agents installable.2. Manual per-agent PowerShell revocations add overhead and risk.3. Mitigate by auditing inventories, enforcing […]

The post Microsoft Copilot Agent Policy Let Any Users Access AI Agents appeared first on Cyber Security News.