The category now has a name. On October 27, 2026, Gartner published its first Magic Quadrant for AI Agent Management Platforms, and on November 3 Microsoft announced it was named a Leader. In the same announcement, Microsoft said Agent 365 is generally available and that more than 50 million agents have already been registered in it. For CIOs and CISOs, the question is no longer whether they need a way to manage AI agents, but which one to choose.
In this article, I’ll give you eight questions I recommend that you use when evaluating a proposed agent management platform, a simple way to score the answers, and what Microsoft offers today for each one.
Why this decision is different from buying another tool
An AI agent is not a user, an app, or a device, but it can behave like all three. It has an identity, reaches data, runs on laptops and in other clouds, and can act without anyone watching. A platform that only covers one of those layers leaves the others open. Microsoft’s position is that agents should be “managed with the same rigor you already apply to users, apps, and devices.” Whatever platform you choose, that is the right standard.
Agents also multiply faster than people. Microsoft is extending local agent discovery to 60 agent types, and connecting agents built on other platforms. Your inventory today will not be your inventory in six months.
The 8 questions
| Question | How to verify it in a pilot | Where Microsoft stands (November 2026) |
|---|---|---|
| 1. Does it start with identity? | Pick three agents and check that each one has its own identity, a named owner, and only the access its task needs | Microsoft Entra Agent ID. My colleague covered how it works in the AI Agent Identity blog post |
| 2. Does the registry see agents you did not build? | Register one agent from another cloud and one local agent installed by a developer, and verify that both appear with an owner | One Agent 365 registry, with integrations for Agentforce, Amazon Bedrock, Anthropic, Databricks, Google Gemini, and Google Vertex; OpenAI, ServiceNow, and Snowflake are planned |
| 3. Are permissions scoped to the task? | Ask the vendor to show an agent losing its access when its task ends | Dynamic Permissions: announced on October 19 (see our Agentic Insiders article) and again on November 5, still without an availability date |
| 4. Can it contain agents on devices? | Run a local agent on a pilot device and confirm what it can and cannot reach | Microsoft Execution Containers are now generally available on Windows. Defender discovery of local agents and their MCP configurations is generally available on Windows and macOS |
| 5. Does it protect the data agents reach? | Point an agent at a labeled test file and confirm that the label and the data loss prevention policy apply | Agent 365 extends Microsoft Purview to agents |
| 6. Can it detect and respond to agent threats? | Simulate a risky agent and time how long it takes to reach the SOC and be blocked | New Agent 365 Action Center: clean up inactive agents, reassign agents without an owner and block risky agents automatically |
| 7. Can you see cost and value? | Ask for a usage and cost report per agent for the pilot period | Cost management, task classification, and value calculation are in development |
| 8. Does it fit how you already operate? | Check whether your admins ran the whole pilot from the consoles they already use | Agent 365 extends Entra, Defender, Purview, Intune and the Microsoft 365 admin center. Generally available since November 3, in Microsoft 365 E7 or as an add-on to Microsoft 365 E5 |
How to score the answers
Give each question 0, 1 or 2 points, for any vendor, and be strict.
- 0: not available, or only on a slide.
- 1: in preview or on the roadmap. A roadmap item is a 1, not a 2.
- 2: generally available and in use in your organization.
Then read the total. Below 8, run a pilot before you scale any agent program. From 8 to 12, pilot with guardrails: named owners, approval for publishing and a monthly review. From 13 to 16, you are ready to scale. Score your own organization too: a platform can only score 2 when the capability is actually turned on. When we run this exercise with customers, question 2 usually scores lowest, because most organizations have never looked for agents outside Microsoft 365.
Note that, by this standard, several of Microsoft’s own answers are still a 1 today. That is not a reason to wait. It is a reason to decide now what you will require at general availability, and to test it in the meantime.
Score yourself before you score vendors. If you cannot yet answer the six questions in our leader’s agenda for AI agents, starting with which agents you have and who owns each one, begin there: no platform can fix a missing owner.
How our experts help
Our Agent 365 E-xperiences can run this scorecard with your team. The Architecture Design Session turns the eight answers into a design and a governance model, and the proof of concept tests them on your own scenarios before you commit.
Frequently asked questions
What is an AI agent management platform?
Software to discover, register, secure, govern, and monitor AI agents across an organization, including agents built on different platforms and agents running on employees’ devices.
Is Microsoft Agent 365 generally available?
Yes. Microsoft announced general availability on November 3, 2026. It is included in Microsoft 365 E7 and available as an add-on to Microsoft 365 E5.
Does Agent 365 manage agents that are not from Microsoft?
Yes, through its registry. Microsoft lists integrations with Agentforce, Amazon Bedrock, Anthropic, Databricks, Google Gemini and Google Vertex, and an SDK for open-source frameworks.
What changed since October?
Agent 365 became generally available, Microsoft Execution Containers and local agent discovery on macOS reached general availability, and Microsoft added the Action Center. Dynamic Permissions are still announced without a date.
Next step
Synergy Advisors experts can score your organization with these eight questions and show you which Agent 365 E-xperience fits your starting point. Join the Beyond the Agent webinar on Tuesday, November 17, at 2:00 p.m. ET, or find your Agent 365 E-xperience.
Sources
- Microsoft named a Leader in the 2026 Gartner Magic Quadrant for AI Agent Management Platforms Microsoft Security Blog, November 3, 2026
- What’s new in Microsoft Security: November 2026 Microsoft Security Blog, November 5, 2026
- Microsoft Execution Containers: policy-driven containment for AI agents Windows Developer Blog, October 7, 2026
- Agents are your newest insiders Microsoft Security Blog, October 19, 2026
- Microsoft Agent 365 Microsoft
