惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Martin Fowler
Martin Fowler
V
Visual Studio Blog
有赞技术团队
有赞技术团队
T
Tailwind CSS Blog
B
Blog
I
InfoQ
博客园 - 三生石上(FineUI控件)
阮一峰的网络日志
阮一峰的网络日志
F
Fortinet All Blogs
H
Help Net Security
博客园 - Franky
宝玉的分享
宝玉的分享
博客园 - 司徒正美
C
Check Point Blog
G
Google Developers Blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Jina AI
Jina AI
T
The Blog of Author Tim Ferriss
MongoDB | Blog
MongoDB | Blog
云风的 BLOG
云风的 BLOG
A
About on SuperTechFans
罗磊的独立博客
大猫的无限游戏
大猫的无限游戏
IT之家
IT之家

Help Net Security

Police arrest 10 suspected members of Black Axe cybercrime gang ShinyHunters claims it stole 1.4 million records from Udemy Sevii unveils Cyber Swarm Defense Mode to stop AI-driven attacks at scale Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research Cequence Agent Personas bring granular control and governance to enterprise AI agents NowSecure MARI gives enterprises evidence-based visibility into third-party mobile app risk The metrics killing your SOC, and what to use instead US state privacy fines reached $3.425 billion in 2025 Canada’s first SMS blaster case leads to three arrests Linux storage management tool Stratis 3.9.0 adds online encryption and cache-less pool startup TLS Connect gives SMBs a right-sized automated tool to manage TLS certificates Aptori expands its platform with autonomous offensive testing to reduce security bottlenecks Your IAM was built for humans, AI agents don’t care The AI criminal mastermind is already hiring on gig platforms 25 open-source cybersecurity tools that don’t care about your budget Product showcase: LuLu reveals unauthorized outbound connections from Mac apps Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach Users advised to drop passwords and make room for passkeys - Help Net Security Indirect prompt injection is taking hold in the wild - Help Net Security Compromised everyday devices power Chinese cyber espionage operations - Help Net Security New Cisco firewall malware can only be killed by pulling the plug - Help Net Security Meta is overhauling how you sign in, manage settings, and protect your accounts - Help Net Security Ubuntu 26.04 LTS delivers memory-safe system tools and live patching for Arm servers - Help Net Security OpenAI’s GPT-5.5 is out with expanded cybersecurity safeguards - Help Net Security AI is speeding up nation-state cyber programs - Help Net Security A study of 1,000 Android apps finds a privacy policy logging gap - Help Net Security IT spending to hit $6.31 trillion record, thanks to AI - Help Net Security Where AI in CI/CD is working for engineering teams - Help Net Security With AI's help, North Korean hackers stumbled into a near-undetectable attack - Help Net Security Hacker with a special interest in breaching sports institutions ends behind bars - Help Net Security
Microsoft turns Copilot Studio into an AI agent control c...
Anamarija Po · 2026-05-14 · via Help Net Security

The Microsoft Copilot Studio April 2026 updates improve visibility and governance for admins and expand workflow capabilities for managing agents.

Copilot surfaces agent status in the authoring experience, giving admins insight into each agent’s security and protection posture. Customers can identify issues such as authentication gaps or policy impacts and investigate them at the source.

Analytics Viewer role

Insights can be shared through the generally available Analytics Viewer role, which grants access to the Analytics page for a specific agent. Users assigned this role can view the agent’s Analytics page and metrics, and open the agent directly from the Analytics page. They cannot edit or share the agent or access topics, actions, settings, testing tools, or publishing features.

Copilot Studio security updates

Analytics Viewer (Source: Microsoft)

The role allows analysts and stakeholders to monitor agent performance securely without affecting agent behavior. It separates responsibilities between admins who manage agents and analysts who review performance insights. Teams can access performance metrics directly, reduce the need to export and distribute analytics data manually, maintain governance over production agents, and support faster data-driven decision-making.

“The Analytics Viewer role allows us to provide meaningful performance insights to business and operational stakeholders while maintaining strict production governance. It cleanly separates operational visibility from agent configuration and publishing rights,” Mohamed Arhab, Solution Architect, City of Montreal, said.

Track agent status and security posture

Agent 365, now generally available, acts as a control plane for observing, governing, and securing AI agents and their interactions, including Microsoft AI agents and those from ecosystem partners, through existing admin and security workflows.

Copilot Studio customers can manage agents with shared policies, security controls, and lifecycle oversight.

Organizations can use Agent 365 to oversee AI systems acting on behalf of users through delegated access or operating independently within defined scopes and permissions.

Turn workflows into AI-powered automation systems

Workflows are step-by-step automation processes in Copilot Studio that complete actions or tasks in a deterministic way. These updates expand workflow capabilities with AI-powered reasoning, centralized governance, and secure-by-design tools.

By embedding Copilot Studio agents through agent nodes, workflows can delegate reasoning, decision-making, or content generation at any step in the process. Customers can also add and configure AI actions to understand requests, route work, and generate content dynamically.

Using sample inputs to test individual steps, teams can validate behavior earlier, debug more efficiently, and refine workflows before deployment.

Extend workflows through secure integrations

To scale automation without introducing new risks, workflows can connect to a broader ecosystem of tools, including model context protocol (MCP) server tools, now in preview. MCP support allows agent workflows to discover and invoke MCP-compliant tools and knowledge as workflow steps while remaining within Microsoft security, permission, and compliance boundaries. This allows workflows to execute tasks while involving users in governed review and approval processes.

“We’ve also introduced a centralized, admin-controlled environment for Workflows Agent. This makes it easier to apply data loss prevention (DLP) policies consistently and maintain visibility across automation, so workflows remain compliant by design as they scale,” Nitasha Chopra, VP & COO, Microsoft Copilot Studio, explained.

Integrate business apps into agents

Acting on agent-generated insights often requires switching tools, recreating context, or handing off work across systems. Generally available support for apps in agents helps close that gap, reducing friction and allowing teams to review data, update records, approve requests, or create assets in place. This helps teams move faster from planning to execution.

Apps in agents bring together Microsoft and partner applications so agents can take action in systems that firms already use. Experiences are built and orchestrated in Copilot Studio, where companies can define how agents interact with apps, data, and workflows to support business processes. These generally available capabilities help teams shift agents from informational tools to operational systems.

Additional updates

Microsoft introduced updates to improve agent evaluation, automation, orchestration, and collaboration in Copilot Studio and Work IQ.

New evaluation features allow teams to generate test cases from analytics, simulate multi-turn interactions, and automate evaluations through APIs and connectors. Organizations can turn user conversations into test sets and run evaluations programmatically to measure agent quality at scale.

Custom metrics for outcome-based measurement allow companies to track business-specific goals such as resolution rates and conversions instead of relying only on usage data.

Microsoft also made the Work IQ API publicly available in preview, enabling developers to bring Copilot’s organizational context, memory, and signals into custom agents and workflows without managing raw data or complex integrations.

Work IQ now supports agent-to-agent communication, allowing agents to collaborate, delegate tasks, and maintain shared context between workflows.

In addition, GPT-5.5 Thinking is available in Copilot Studio early release cycle environments as GPT-5.5 Reasoning. The model is also rolling out across Microsoft 365 Copilot applications, including Copilot Chat, Word, Excel, and PowerPoint.

The expanded agent usage estimator now includes Dynamics 365 agents such as Sales Qualification Agent and Customer Service Agent. Firms can forecast Copilot credit consumption for Copilot Studio and Dynamics 365 scenarios in one place, helping them model usage more accurately and avoid unexpected costs when scaling deployments.

Microsoft said the latest admin updates are designed to reduce bottlenecks, improve decision-making, and simplify large-scale agent deployments.

Download: The IT and security field guide to AI adoption