Microsoft announced Agent 365 on March 9. General availability is May 1, 2026. The pricelist preview drops today.
If you haven’t started the conversation with your clients yet, you’re already late.
What Agent 365 Actually Does
Agent 365 is not a tool for building AI agents. That’s still Copilot Studio. Agent 365 is the governance layer that sits on top — think of it like Intune for devices, except instead of laptops, it’s managing the autonomous AI programs your clients are quietly deploying without telling you.
Three pillars: Observe, Govern, Secure.
Observe gives you a centralized Agent Registry with visibility into every agent running in the tenant, usage analytics, and risk signals. Today, most MSPs have zero visibility here. Microsoft’s own data shows tens of millions of agents appeared in the registry within two months of preview availability. Your clients already have agents running. You just can’t see them yet.
Govern is IT-controlled lifecycle management — activating, suspending, retiring agents, ownership controls, and policy-driven access through Entra Agent ID. This is where you establish who’s allowed to build agents and what happens when the employee who created one leaves the company.
Secure is where it connects to your existing security posture. Conditional Access for agents, DLP enforcement on agent interactions through Purview, and threat protection through Defender, including prompt injection detection and data exfiltration monitoring.
The Shadow AI Problem Is Already Here
Here’s the thing your typical Business Premium client doesn’t realize: their marketing coordinator can build an agent that reads SharePoint data and answers questions in Teams. Right now. No IT approval required. No audit log. No offboarding process.
The Pax8 Pulse survey just dropped data showing 62% of SMBs are already using AI. Of those, the majority have no governance strategy at all. IDC projects 1.3 billion AI agents in circulation by 2028.
You’ve solved shadow IT before. Unauthorized devices, unapproved cloud apps — you’ve got processes for all of it. This is the same problem with higher stakes. An unmanaged device can get lost. An unmanaged AI agent with permissions to read your client’s entire mailbox and SharePoint can exfiltrate six months of business data before anyone notices.
The Sales Conversation
This is actually a straightforward add if you position it right. Don’t lead with “AI governance.” Lead with questions your client can’t answer:
- What AI agents are running in your environment right now?
- Who owns them?
- What business data can they access?
- What happens when the person who built one leaves the company?
Watch their face. Most will realize they don’t know the answers. That’s your opening.
Agent 365 standalone is $15 per user per month through CSP. The per-user license covers all agents acting on behalf of that licensed user — no per-agent fees, no consumption charges for the governance layer. For a 50-seat Business Premium client, that’s $750/month, and you can layer your own managed service on top of the activation and ongoing governance work.
The Microsoft 365 E7 suite at $99/user/month bundles Agent 365 into a broader package that also includes E5-level security. If you have E5 clients already pushing toward Copilot, E7 is the natural conversation. If you’re working the Business Premium market, the $15 standalone is a clean upsell.
Where This Fits in Your Stack
You’re already managing identities through Entra. You’re already managing devices through Intune and probably Defender for Endpoint. Agents are the next category of managed assets, and Microsoft just handed you the same management infrastructure you already know.
The playbook is familiar: inventory first, govern second, secure third. With Agent 365, inventory can start before you fully implement identity-based governance. The Agent Registry gives you visibility even in a partial deployment. That means you can go to a client, run a quick tenant scan, show them what’s already there, and then sell the full governance service.
For MSPs who want to be first in their market: the window is April. May 1 is GA. The partners who have a packaged Agent 365 offering ready on launch day will be the ones getting the calls when clients start seeing “AI governance” on RFPs.
One Concern Worth Flagging
$15/user/month is real money at SMB scale. For a 25-seat firm, you’re asking for $375/month for something the client can’t directly see the value of. The governance benefit is mostly preventative — it’s protecting against a problem they don’t think they have yet.
This is a trust-based sale. You need clients who already believe you’re their strategic partner, not just their break-fix vendor. If that relationship isn’t there, Agent 365 will be a hard sell. If it is, this is exactly the kind of proactive service that reinforces why they pay you.
Position it alongside security posture reviews, not alongside helpdesk services. It belongs in the same conversation as Defender, Purview, and conditional access — not in the same column as RMM.
Monday Morning Checklist
- Pull your CSP roster and flag every Business Premium / Business Standard customer
- Build a one-page “AI Governance Assessment” that asks the four questions above
- Price out a 50-seat Agent 365 deployment including your activation hours
- Have that conversation before May 1
The clients who say yes before GA will feel smart when agent sprawl becomes a news story. The clients who say no today will call you in six months when something goes sideways.
Be the MSP that called it first.