Microsoft Copilot
Take control of SharePoint agents
A SharePoint agent is only as safe as the site it reads. Rencore lists the SharePoint agents in your tenant next to the sites and knowledge they use, and governs those sites with the same policies, owners and reviews as the rest of SharePoint.
SharePoint agents grow where no central team is looking
Gartner's research on SharePoint agents describes a feature that is easy to start and hard to oversee. These are the questions that follow.
Who creates them
Agents come from the sites people already work in, so the list grows site by site, outside any central inventory.
What they read
An agent answers from the files on its site. Overshared, unlabeled or stale content turns into answers for whoever asks.
Who can change them
An agent is defined by a file on its site, so its instructions and sources depend on who holds edit rights there.
Who sees the list
Microsoft's tenant reporting for agents is written for administrators, while site owners decide what each agent reads.
What Rencore sees and does for SharePoint agents
SharePoint agents, next to the sites they read
Rencore inventories SharePoint agents in the same place as the Copilot Studio agents and the SharePoint estate, with the sites and knowledge each agent uses.
- SharePoint agents in the AI & Agents inventory
- The sites and knowledge each agent uses
- Site collections without an owner
- External sharing across the SharePoint estate
Labels and sharing, fixed before an agent reads them
An agent answers at the permissions of whoever asks, from the content of its site. Policies over the sites find what should not be there yet, and route the fix to the owner.
- Site collections without a sensitivity label
- Files shared with external users
- Site collections owned by external users
Stale sites out of the agent's reach
Outdated content becomes confident answers. A policy finds the SharePoint sites nobody has opened in 90 days, so the owner can keep or archive them before an agent keeps reading from them.
- Site collections last used more than 90 days ago
- The owner of each site, or none
- Storage held by sites nobody opens
Where this coverage stops
What Rencore does for SharePoint agents, and what stays with Microsoft.
No restricted content discovery
Keeping a site out of Copilot is a SharePoint Advanced Management control. Rencore has no equivalent and finds the sites that need it.
Microsoft's identity layer stays Microsoft's
Entra Agent ID, Conditional Access, data loss prevention and threat protection for agents are Microsoft's. SharePoint agents get no Agent ID, which Rencore does not change.
File-level detail is an add-on
File-level metadata and permissions need the Files & Folders add-on.
No runtime inspection
Rencore does not sit in the path of prompts and does not block them as they are sent.
AI & Agents
Claude Enterprise
Inventory Claude Enterprise users, projects and token spend, joined to Microsoft 365 identity. Metadata only.
View the Claude Enterprise connectorPreviewChatGPT Enterprise
Inventory ChatGPT Enterprise custom GPTs, projects and connectors, with sharing joined to Microsoft 365 identity.
View the ChatGPT Enterprise connectorCopilot Studio
Inventory Copilot Studio agents with owner, status and environment, flag stale, ownerless and open agents, and route the cleanup to their owners.
View the Copilot Studio connectorSharePoint agents questions, answered
What counts as a SharePoint agent?
An agent built on the content of SharePoint sites, the "chat with your documents" experience of Microsoft 365 Copilot. Rencore lists these agents with the sites and knowledge they use. Agents built in Copilot Studio are covered by their own connector.
Why govern the sites and not only the agents?
Because an agent answers from the content of its sites, at the permissions of whoever asks. A site with no owner, no sensitivity label or stale files becomes an answer. The same policies, owners and reviews that govern a SharePoint site govern what its agents read.
Does Microsoft already cover SharePoint agents?
Only in part, and Rencore complements it. SharePoint Advanced Management, included when at least one user holds a Microsoft 365 Copilot license, brings site ownership and inactive-site policies, site access reviews and restricted content discovery. It covers SharePoint and OneDrive, and it has no lifecycle for the agents themselves. Agent 365 lists SharePoint agents in its inventory but gives them no Agent ID, so Entra, Purview and Defender controls do not reach them.
Rencore adds one inventory across SharePoint, Teams and the other agents, custom policies, and owner decisions in Microsoft Teams. For a lockdown of what Copilot may read, use restricted content discovery in SharePoint Advanced Management.
How is SharePoint agents coverage licensed?
It is included in the AI & Agents module, the optional paid module on the Premium and Enterprise plans, alongside the Microsoft Copilot and agent coverage. There is no separate add-on for SharePoint agents. The pricing page has the full plan comparison.