Microsoft just gave the enterprise AI agent market its first dedicated control plane. Microsoft Agent 365 launched on May 1 at $15 per user per month as a standalone product, and Microsoft also bundled it into a new $99 per user per month “E7 Frontier Suite” alongside Microsoft 365 E5, Copilot, and Entra Suite. The product is Microsoft’s bet that enterprises need a single management surface for the agents they build, buy, and deploy — and Microsoft wants to own that surface the way it owns Active Directory for identity.
What’s actually new
Agent 365 is not a new agent or a new model. It is a management plane — an enterprise console that registers, secures, monitors, governs, and bills for AI agents the company runs, regardless of who built those agents. The agents themselves can come from Microsoft Copilot, from third-party platforms like Salesforce Agentforce or ServiceNow’s AI Agents, from custom builds on Azure AI Foundry, or from open-source frameworks. The control plane is the layer above all of them.
The capability set covers five domains. Identity: each agent gets a unique identity in Entra Agent ID, with role-based access, conditional access policies, and full audit logs. Security: agents inherit the enterprise’s DLP, threat protection, and Purview compliance posture; their actions flow through Microsoft Defender XDR. Governance: a single console shows every agent the enterprise runs, what data it touches, what tools it can call, and what it has done. Cost: per-agent and per-user billing rolls into a single dashboard, with budget alerts and per-department chargeback. Observability: full trace logs of agent actions, decisions, and outcomes, accessible to SOC and compliance teams.
The pricing model has two SKUs. Agent 365 standalone is $15 per user per month and covers the management plane for any agents that user interacts with. The E7 Frontier Suite at $99 per user per month bundles Microsoft 365 E5 ($57/user), Copilot ($30/user), Agent 365 ($15/user), and Entra Suite (~$12/user) into one SKU at a meaningful discount. Microsoft’s pitch: large enterprises buying all four already would save 15-25% by moving to E7 Frontier.
The integration story is the part Microsoft is most aggressive about. Agent 365 works with agents from Salesforce Agentforce, ServiceNow AI Agent Studio, Workday Illuminate, SAP Joule, Oracle agents, and any agent built on the OpenAI Agents SDK, Anthropic Claude Agent SDK, or Google Vertex Agent Engine. Microsoft is explicitly positioning Agent 365 as a Switzerland for enterprise agent management — register your agent regardless of source, manage it from one console.
The Entra Agent ID component is the architectural foundation. Each agent gets a service-principal-style identity in Microsoft Entra (the renamed Azure AD). Conditional access policies, RBAC, and audit logging all extend to agent identities just as they extend to human users. This is the discipline that lets agents operate at scale inside regulated industries: a financial services firm can prove to regulators that every agent action was authenticated, authorized, and audited.
Why it matters
- Enterprise agent procurement just got a default platform. Before Agent 365, an enterprise running 30 agents across multiple vendors had to manage each independently. Now there’s a single console.
- The cost-attribution problem becomes solvable. Enterprise CFOs have been asking “what is AI actually costing us across all these vendors?” — Agent 365’s billing dashboard answers that question.
- The compliance angle is real. EU AI Act, NIST AI RMF, SOC 2, ISO 42001 all imply agent inventory, audit trails, and human oversight. Agent 365 ships that compliance posture as a product.
- Switzerland positioning is competitive against the model labs. OpenAI, Anthropic, and Google all want enterprises to standardize on their respective agent platforms. Microsoft is betting the management plane matters more than the agent runtime.
- The E7 Frontier Suite price anchors enterprise AI economics. $99 per user per month is now the reference price for “full Microsoft AI stack.” Competitors will benchmark against it.
- Independent agent vendors get a distribution channel. Sierra, Decagon, 11x, Artisan, and similar can integrate with Agent 365 and inherit Microsoft’s enterprise reach.
How to use it today
If your organization already runs Microsoft 365 E3 or E5, Agent 365 is an add-on you can enable through the Microsoft 365 admin center. Smaller teams without Microsoft 365 can buy Agent 365 standalone, but the value compounds when it sits alongside the rest of the Microsoft enterprise stack.
- Enable Agent 365 in the Microsoft 365 admin center. Navigate to Billing → Purchase services → search “Agent 365.” Add it to the existing subscription or as a standalone.
- Configure Entra Agent ID. In the Entra admin portal, enable agent identities. Existing agents you’ve already deployed will surface in the inventory once they authenticate with Entra.
- Register your existing agents. Each agent (Copilot Studio, Agentforce, custom-built, third-party) gets registered with its source, capabilities, and the user populations it serves. The inventory is the foundation for everything else.
- Set conditional access policies. Decide which agents can access which data, which actions require elevation, and which require human approval. Most enterprises start with conservative policies and loosen over time.
- Wire up Microsoft Purview. Agent activity flows into Purview for compliance reporting, DLP enforcement, and eDiscovery. This is the audit-trail discipline most regulated enterprises require.
- Set up budgets and chargeback. Per-department, per-team, or per-agent budgets in the cost dashboard. Alerts fire when consumption climbs unexpectedly.
- Build the first agent on Agent 365’s native runtime. If you don’t already have agents, the integrated Copilot Studio path is the easiest start.
For developers building agents that need to register with Agent 365, the SDK call is short. The agent declares its capabilities, its required permissions, and the user populations it serves, then registers via Microsoft Graph.
from msgraph import GraphServiceClient
from msgraph.generated.models.agent_registration import AgentRegistration
graph = GraphServiceClient(credentials=credentials, scopes=['Agent.ReadWrite.All'])
registration = AgentRegistration(
display_name="Customer Support Triage Agent",
description="Reads inbound support tickets and routes by priority + topic",
source_platform="Custom (Anthropic Claude Agent SDK)",
capabilities=["read_email", "classify_text", "create_ticket"],
required_data_access=["mail.read.shared", "tickets.read", "tickets.write"],
served_user_populations=["support-team-tier-2"],
requires_human_approval_for=["refund_above_500_usd", "policy_exception"],
)
await graph.agents.registrations.post(registration)
Once registered, the agent’s actions appear in the Agent 365 console with full traceability. Microsoft Defender XDR begins monitoring the agent’s behavior. Purview captures any data the agent touches. The compliance posture is operational from day one.
How it compares
The enterprise agent management category was empty as a product category until early 2026. Several vendors are competing now. The table below summarizes the contenders as of mid-May.
| Product | Vendor | Pricing | Strength | Verdict |
|---|---|---|---|---|
| Agent 365 | Microsoft | $15/user/mo standalone; $99 in E7 | Native Microsoft 365 + Entra + Purview | Default for Microsoft-anchored enterprises |
| Salesforce Agentforce Studio | Salesforce | Bundled with Service Cloud | Native Salesforce CRM integration | Default if you live in Salesforce |
| ServiceNow AI Agent Studio | ServiceNow | Bundled with Now Assist | IT service mgmt + workflows | Default for IT-led agent programs |
| Google Agent Engine | Per-token + seat | Native Gemini + Workspace | Strong for Workspace shops | |
| AWS Bedrock Agents | AWS | Per token + infrastructure | Multi-model, AWS-anchored | Strong for AWS-anchored builds |
| Anthropic Managed Agents | Anthropic | Per-token + session fee | Frontier model quality, dreaming | Strong for Anthropic-first stacks |
| OpenAI Agents Platform | OpenAI | Per-token + enterprise license | Native ChatGPT, Operator integration | Strong for OpenAI-anchored stacks |
The competitive read: Microsoft is the only vendor positioning the management plane as the central product rather than as a feature of a model platform. That bet is the strategic asymmetry. If enterprises actually adopt the agnostic management plane, Microsoft wins broadly. If enterprises gravitate toward vertical integration with their preferred model lab, the lab platforms win their respective territories.
What’s next
Three threads to watch over the next ninety days. First, the actual integration depth with non-Microsoft agent platforms. Microsoft has announced partnerships with Salesforce, ServiceNow, Workday, and SAP, but whether agents from those platforms light up cleanly in Agent 365 without integration friction is the operational question that will determine adoption. Second, the third-party developer ecosystem. Microsoft will need to ship SDKs, documentation, and certification programs for independent agent vendors. Third, the customer announcements. Microsoft will be aggressive about referenceable customers; expect named Fortune 500 deployments at the next ignite-style event.
The longer arc is that enterprise AI is becoming an identity, governance, and cost-management problem more than a model-capability problem. The model labs solve the capability problem. The management plane vendors (Microsoft Agent 365, eventually Salesforce, AWS, and Google) solve the operational problem. Enterprises will pay for both. The bigger market over the next five years is the operational layer because every enterprise needs it regardless of model preferences.
Frequently Asked Questions
Do I need Microsoft 365 to use Agent 365?
No, but the value compounds when it sits alongside Microsoft 365. The standalone $15/user/month tier works without Microsoft 365 for organizations that just want the management plane. The E7 Frontier Suite at $99/user/month bundles everything.
Can Agent 365 manage agents that don’t run on Microsoft infrastructure?
Yes. Microsoft has explicitly positioned Agent 365 as agnostic to the underlying agent runtime. Agents from Salesforce, ServiceNow, AWS, Google, Anthropic, OpenAI, and custom builds can all register and be managed centrally. The integration depth varies by partner but the architectural goal is universal.
What’s the difference between Agent 365 and Copilot Studio?
Copilot Studio is Microsoft’s tool for building agents. Agent 365 is Microsoft’s tool for managing agents (regardless of who built them). The two are complementary: build in Copilot Studio, manage in Agent 365. You can use Agent 365 without ever touching Copilot Studio if your agents come from other platforms.
How does this affect compliance and audit?
Agent 365 integrates with Microsoft Purview, so agent activity flows into the same compliance pipeline as user activity. eDiscovery, data loss prevention, retention policies, and audit logs all extend to agents. For EU AI Act, NIST AI RMF, ISO 42001, and SOC 2 compliance work, this is a substantial simplification compared to managing each agent platform independently.
What if I’m already on Salesforce Agentforce or a different platform?
Continue using your platform for building and running agents. Agent 365 layers on top for management. The point of Agent 365’s agnostic positioning is that you don’t have to migrate; you just register your existing agents.
What does the $15/user really cover?
Per-user pricing means the cost scales with the number of employees who interact with agents (consumers, in Microsoft’s terms), not the number of agents themselves. A 1,000-employee company pays $15,000/month for Agent 365 standalone. Per-agent compute costs (token usage) are billed separately by the platform providing the agent.