Start free trial

Rencore and Microsoft Agent 365

Microsoft Agent 365 gives Microsoft's AI agents an identity, access policies and runtime protection. Rencore governs those agents together with the Teams, sites, apps and flows they work with, each with an owner, a policy, a lifecycle and a cost. The two work together.

  • MAPAL
  • bam
  • Ville de Luxembourg
  • WACKER
  • GRUNDFOS
  • AMGEN
  • Lufthansa
  • Sunrise
  • Swiss Life
  • Bacardi
  • Universitätsspital Basel
  • Amadeus
  • DATEV
  • Pfizer
At a glance

Agent 365 secures the agent.
Rencore governs the estate around it.

Verdict: Keep Agent 365 for agent identity, Conditional Access and runtime protection. Add Rencore to give every agent, and the workspaces, apps and flows it works with, an owner, a lifecycle and a cost, including agents built before Entra Agent ID existed.

Updated 26 September 2026. For CIOs, heads of digital workplace and IT governance leads.

Agent 365 + Rencore

16 Microsoft services governed +2 AI services beyond Microsoft

Best for: Enterprises scaling Copilot agents that need owners, lifecycle and cost across the whole Microsoft 365 estate

  • Every agent in one inventory, whenever it was built
  • Agents governed with the sites, apps and flows they use
  • Owner reviews and approvals in Microsoft Teams

Microsoft Agent 365

3 Microsoft services governed

Best for: Agent identity, access policies and runtime protection for Microsoft agents

  • Entra Agent ID and Conditional Access for agents
  • Purview data loss prevention and Defender threat protection
  • Governs agents in Copilot, Copilot Studio, SharePoint and Foundry
Side by side

Rencore and Microsoft Agent 365 compared

  • Yes
  • Partial
  • On the roadmap
  • No
Rencore and Microsoft Agent 365 compared
Capability Agent 365 + Rencore Microsoft Agent 365
Digital Workplace
Microsoft 365 Tenant-wide: users, groups, licences, apps, Purview sensitivity labels and more Agent 365 + Rencore: Yes Microsoft Agent 365: No
Microsoft Teams Agent 365 + Rencore: Yes Microsoft Agent 365: No
SharePoint Agent 365 + Rencore: Yes Microsoft Agent 365: No
OneDrive Agent 365 + Rencore: Yes Microsoft Agent 365: No
Exchange Online Agent 365 + Rencore: Yes Microsoft Agent 365: No
Planner Agent 365 + Rencore: Yes Microsoft Agent 365: No
Viva Engage Agent 365 + Rencore: Yes Microsoft Agent 365: No
Entra ID Agent 365 + Rencore: Yes Microsoft Agent 365: No
AI & Agents
Microsoft 365 Copilot Agent 365 + Rencore: Yes Microsoft Agent 365: Yes Copilot agents such as Researcher and Analyst
Copilot Studio agents Agent 365 + Rencore: Yes Microsoft Agent 365: Yes Agents built before Entra Agent ID must be recreated
SharePoint agents Agent 365 + Rencore: Yes Microsoft Agent 365: Partial Inventory only, no Agent ID
Azure Agent 365 + Rencore: Yes Microsoft Agent 365: Yes Foundry agents; older ones must be recreated
Copilot Cowork Agent 365 + Rencore: On the roadmap Microsoft Agent 365: No
Agent Builder Agent 365 + Rencore: On the roadmap Microsoft Agent 365: Partial Inventory only, no Agent ID
Agent 365 Agent 365 + Rencore: On the roadmap Microsoft Agent 365: The product itself
Claude Enterprise With the Microsoft 365 data it works with Agent 365 + Rencore: On the roadmap In preview Microsoft Agent 365: No
ChatGPT Enterprise With the Microsoft 365 data it works with Agent 365 + Rencore: On the roadmap Coming soon Microsoft Agent 365: No
Apps, Automation and BI
Power Apps Agent 365 + Rencore: Yes Microsoft Agent 365: No
Power Automate Agent 365 + Rencore: Yes Microsoft Agent 365: No
Power BI Agent 365 + Rencore: Yes Microsoft Agent 365: No
Microsoft Fabric Agent 365 + Rencore: Yes Microsoft Agent 365: No
How you take control
Agent inventory Agent 365 + Rencore: Yes With the sites, apps and knowledge each agent uses Microsoft Agent 365: Yes
Ownerless and inactive agents Agent 365 + Rencore: Yes Policies for no owner, no activity and unpublished agents Microsoft Agent 365: Partial Reassign ownerless agents
Automated policies with remediation Agent 365 + Rencore: Yes 150+ in-depth built-in policies, plus custom automations Microsoft Agent 365: Partial Reuses Purview, Defender and Entra policies
Owner reviews and approvals Agent 365 + Rencore: Yes Recurring, run by owners in Microsoft Teams Microsoft Agent 365: Partial Admin approvals; reports for admins only
Lifecycle for the Teams, sites, apps and flows agents work with Agent 365 + Rencore: Yes Microsoft Agent 365: No
Licence and cost attribution by team Agent 365 + Rencore: Yes Microsoft Agent 365: No
Scale and trust
One place to set policy Agent 365 + Rencore: Yes One policy engine for every object Microsoft Agent 365: Partial Admin center, plus Purview, Defender and Entra
What you license Agent 365 + Rencore: Priced by module A fraction of the Agent 365 licence per user Microsoft Agent 365: USD 15 per user per month Or Microsoft 365 E7. Inventory is included in E3 and E5
Where Agent 365 leads
Entra Agent ID and Conditional Access for agents Agent 365 + Rencore: No Microsoft Agent 365: Yes
Data loss prevention and threat protection for agents Agent 365 + Rencore: No Microsoft Agent 365: Yes With Purview and Defender
Their gap, our answer

What Agent 365 leaves open, and what Rencore adds

  1. Older agents fall outside most policies

    Copilot Studio and Foundry agents built before Entra Agent ID must be recreated to fall under most Agent 365 policies, and SharePoint agents get no Agent ID at all.

    Every agent, whenever it was built

    Rencore inventories Copilot Studio and SharePoint agents with owner and activity, including the ones citizen developers built last year.

  2. The agent without its estate

    Agent 365 governs the agent. It does not own the Team, site, app or flow the agent works with, or what happens when that owner leaves.

    Agents governed with their data

    Rencore links each agent to the sites and knowledge it reads, and applies the same ownership and lifecycle policies to all of them.

  3. No cost view

    The Agent 365 licence governs agents. It does not attribute Copilot or Microsoft 365 spend to the teams that use them.

    Cost with an owner

    Reclaim unused Copilot licences and attribute Microsoft 365 spend to the teams and owners behind it.

  4. A licence for every user

    Enforcing Agent 365 policies needs an Agent 365 licence for every user who works with a governed agent, a number that grows with every rollout.

    One licence, not one per user

    Rencore needs a single Agent 365 licence to bring Agent Builder agents into view. Copilot Studio and Foundry agents need none, and the rest runs on your E3 licences.

Microsoft’s tenant-level reporting tools (SharePoint Advanced Management, SharePoint Admin Agent and Agent 365) are limited to administrative access and lack the specific, actionable insights that site owners need.

Gartner Gartner, Close the AI Agent Governance Gap in Microsoft SharePoint With 5 Practical Steps (Melinda Morales), May 2026

Where Agent 365 leads, and how the two work together

Agent 365 is the Microsoft control plane for agents. It gives each agent an Entra Agent ID, applies Conditional Access, and brings Purview data loss prevention and Defender threat protection to agent activity. Rencore does not replicate any of it.

Rencore works on everything around the agent: who owns it, which sites and knowledge it reads, whether anyone still uses it, and what it costs. It routes those decisions to owners in Microsoft Teams, across the same estate as your Teams, sites, apps and flows.

Built for regulated, multinational estates

Rencore Governance is developed in Germany by an independent vendor. Your workspace data is stored in the Azure region you choose, with Germany and Switzerland among the options, and Multi-Geo tenants are supported.

Rencore is certified to ISO/IEC 27001:2022 and ISO/IEC 27017 and holds a SOC 2 Type 2 report. The certificate and reports are in the Rencore Trust Center.

Royal BAM, with 20,000 employees, estimates it saves around €80k a year by freeing its IT admin team for the work that counts. Read the story.

Frequently asked questions

Which Microsoft services does Rencore govern that Microsoft Agent 365 does not?

Rencore governs 16 Microsoft services today, each in one inventory with an owner, a policy and a lifecycle. Microsoft Agent 365 fully covers Microsoft 365 Copilot, Copilot Studio agents and Azure, and covers SharePoint agents in part. Only Rencore governs Microsoft 365, Microsoft Teams, SharePoint, OneDrive, Exchange Online, Planner, Viva Engage, Entra ID, Power Apps, Power Automate, Power BI and Microsoft Fabric.

Does Rencore replace Microsoft Agent 365?

No. Agent 365 gives Microsoft agents an identity, access policies and runtime protection. Rencore governs those agents together with the workspaces, apps and flows they work with, with owners, lifecycle and cost. Enterprises scaling agents use both.

Which agents does Agent 365 not fully cover?

Copilot Studio and Foundry agents built before Entra Agent ID must be recreated to come under most Agent 365 policies, and SharePoint agents do not receive an Agent ID, so they appear in the inventory without the Entra, Purview and Defender controls. Rencore inventories and governs these agents with the same policies as the rest.

Do I need an Agent 365 licence for every user?

The agent registry and inventory are included with Microsoft 365 E3 and E5. Enforcing Agent 365 policies needs the Agent 365 licence at USD 15 per user per month, or Microsoft 365 E7, and Microsoft asks that users who interact with a governed agent are licensed. Rencore is priced by module per Microsoft 365 user, at a fraction of the Agent 365 licence. It does not need an Agent 365 licence per user: a single Agent 365 licence brings Agent Builder agents into Rencore, and Copilot Studio and Foundry agents need none.

What do analysts say about Agent 365?

Gartner's March 2026 First Take calls Agent 365 a promising work in progress with a premium price tag, and advises organisations to evaluate third-party governance tools alongside it. Rencore's view is the same: Agent 365 is a sound baseline for Microsoft agents, and governance of the wider estate sits above it.

Does Rencore govern Agent 365 itself?

Governing the agents registered in Agent 365 is on the Rencore roadmap. Today Rencore governs Microsoft 365 Copilot, Copilot Studio agents, SharePoint agents and Azure alongside the rest of the Microsoft 365 estate.

Does Rencore govern AI beyond Microsoft?

Yes. Rencore extends its AI & Agents governance beyond Microsoft: Claude Enterprise is in preview and ChatGPT Enterprise is coming soon. They are governed in the same place as your Microsoft 365 estate and connected to the Microsoft 365 data they work with, rather than in a separate tool. Microsoft 365 and Copilot remain the generally available core of the platform.

How is Rencore deployed and priced?

Rencore Governance is SaaS, developed in Germany by an independent vendor. Each workspace's data is stored and processed in the Azure region the customer picks, one of five regions including Germany and Switzerland, and Multi-Geo tenants are supported. Rencore is priced by module, Digital Workplace, Apps, Automation and BI, and AI & Agents, so you pay for the scope you govern, and you can start with a 14-day free trial. Availability is contractual: 99.9% under the SaaS Agreement, with live service status at status.rencore.com.

See your own estate side by side

Connect a tenant and see every workspace, app, flow and agent with its owner, its reach and its cost. Free for 14 days.