CISO
CIO
Enterprise Architect
Industry relevance
Financial Services
Healthcare
Government
MAY 5, 2026
Microsoft's 2026 Work Trend Index reports active agents on Microsoft 365 grew 15x year-over-year, rising to 18x in large enterprises. No standard governance baseline keeps pace with this rate.
Microsoft's 2026 Work Trend Index Annual Report, published May 5, 2026, includes the first WTI telemetry on AI agent volume. Active agents on Microsoft 365 grew 15x year-over-year across all customer segments, rising to 18x in large enterprises. This is the first time Microsoft has disclosed agent volume scale as part of its annual workforce research.
GOVERNANCE IMPLICATION
A 15x annual growth rate in active agents on Microsoft 365 is the operational definition of Agent Sprawl, now documented by Microsoft's own telemetry. Large enterprises at 18x face a compounding accumulation problem: agents provisioned faster than policies can be written, permissions granted without lifecycle controls, and no authoritative inventory of what agents are running or what they can access. The Accountability Assumption holds that someone must answer when an agent acts incorrectly. At this rate of growth, organizations cannot identify who provisioned an agent, let alone who remains accountable for its ongoing actions.
SCENARIO
A regulated financial services firm deploys Copilot Studio across 2,000 knowledge workers over six months. No central registry tracks which agents were created, what permissions they hold, or whether any remain active. By year end, hundreds of agents are running across SharePoint, Teams, and email with no policy governing their lifecycle or access scope.
THE GOVERNANCE QUESTION
As active agents multiply 15x in a single year, what authorization, lifecycle, and inventory controls exist to prevent unchecked accumulation of agent access across enterprise systems?
CONTROL GAP
No enterprise-wide agent inventory requirement. No mandatory authorization workflow before agent deployment. No automatic deprovisioning when employee roles change or agents become inactive.
REGULATORY RELEVANCE
NIST Ai RMF
DORA
ISO 42001
PRIMARY SOURCE
2026 Work Trend Index Annual Report
Microsoft WorkLab
May 5, 2026
Read the primary source →(opens in new tab)CONTINUE READING
MAY 11, 2026
AgentsMicrosoft Copilot Studio published April 2026 feature updates on May 11, 2026, authored by Nitasha Chopra, VP and COO of Copilot Studio. Key releases include the Analytics Viewer role reaching GA providing read-only access to agent analytics separated from configuration rights; agent nodes embeddable directly into workflows to delegate AI reasoning within deterministic automation; MCP server-enabled tools in preview for external system connectivity within workflows; and a centralized admin-controlled DLP-enforced environment for the Workflows Agent. The post also confirms Microsoft Agent 365 is now generally available as the centralized control plane for agents.
MAY 1, 2026
AgentsMicrosoft's May 1, 2026 What's New in Agent 365 announcement introduced registry sync, allowing organizations to connect the Agent 365 registry to external agent platforms. Initial preview connections include Amazon Web Services and Google Cloud, with additional partner platforms planned. When connected, agents built on those platforms appear in the Agent 365 unified registry with governance actions including agent deletion available directly from the registry interface. Without registry sync connections configured, Agent 365 shows only Microsoft-hosted agents.
MAY 1, 2026
AgentsMicrosoft's May 1, 2026 What's New in Agent 365 announcement introduced a Shadow AI page within Agent 365, enabled by Microsoft Defender and Microsoft Intune. The page identifies local agent activity on Windows devices: agents installed directly on company machines outside IT and security visibility. These local agents can read files, execute code, and act on behalf of users without touching managed cloud services, and were previously invisible to the Agent 365 registry. The Shadow AI page is the first native Microsoft control surface for detecting this category of ungoverned agent.