mcp-deploy-manage-agents

---
mode: 'agent'
tools: ['changes', 'search/codebase', 'edit/editFiles', 'problems']
description: 'Deploy and manage MCP-based declarative agents in Microsoft 365 admin center with governance, assignments, and organizational distribution'
model: 'gpt-4.1'
tags: [mcp, m365-copilot, deployment, admin, agent-management, governance]
---

# Deploy and Manage MCP-Based Agents

Deploy, manage, and govern MCP-based declarative agents in Microsoft 365 using the admin center for organizational distribution and control.

## Agent Types

### Published by Organization
- Built with predefined instructions and actions
- Follow structured logic for predictable tasks
- Require admin approval and publishing process
- Support compliance and governance requirements

### Shared by Creator
- Created in Microsoft 365 Copilot Studio or Agent Builder
- Shared directly with specific users
- Enhanced functionality with search, actions, connectors, APIs
- Visible to admins in agent registry

### Microsoft Agents
- Developed and maintained by Microsoft
- Integrated with Microsoft 365 services
- Pre-approved and ready to use

### External Partner Agents
- Created by verified external developers/vendors
- Subject to admin approval and control
- Configurable availability and permissions

### Frontier Agents
- Experimental or advanced capabilities
- May require limited rollout or additional oversight
- Examples:
  - **App Builder agent**: Managed via M365 Copilot or Power Platform admin center
  - **Workflows agent**: Flow automation managed via Power Platform admin center

## Admin Roles and Permissions

### Required Roles
- **AI Admin**: Full agent management capabilities
- **Global Reader**: View-only access (no editing)

### Best Practices
- Use roles with fewest permissions
- Limit Global Administrator to emergency scenarios
- Follow principle of least privilege

## Agent Management in Microsoft 365 Admin Center

### Access Agent Management
1. Go to [Microsoft 365 admin center](https://admin.microsoft.com/)
2. Navigate to **Agents** page
3. View available, deployed, or blocked agents

### Available Actions

**View Agents**
- Filter by availability (available, deployed, blocked)
- Search for specific agents
- View agent details (name, creator, date, host products, status)

**Deploy Agents**
Options for distribution:
1. **Agent Store**: Submit to Partner Center for validation and public availability
2. **Organization Deployment**: IT admin deploys to all or selected employees

**Manage Agent Lifecycle**
- **Publish**: Make agent available to organization
- **Deploy**: Assign to specific users or groups
- **Block**: Prevent agent from being used
- **Remove**: Delete agent from organization

**Configure Access**
- Set availability for specific user groups
- Manage permissions per agent
- Control which agents appear in Copilot

## Deployment Workflows

### Publish to Organization

**For Agent Developers:**
1. Build agent with Microsoft 365 Agents Toolkit
2. Test thoroughly in development
3. Submit agent for approval
4. Wait for admin review

**For Admins:**
1. Review submitted agent in admin center
2. Validate compliance and security
3. Approve for organizational use
4. Configure deployment settings
5. Publish to selected users or organization-wide

### Deploy via Agent Store

**Developer Steps:**
1. Complete agent development and testing
2. Package agent for submission
3. Submit to Partner Center
4. Await validation process
5. Receive approval notification
6. Agent appears in Copilot store

**Admin Steps:**
1. Discover agents in Copilot store
2. Review agent details and permissions
3. Assign to organization or user groups
4. Monitor usage and feedback

### Deploy Organizational Agent

**Admin Deployment Options:**
```
Em toda a organização:
- Todos os funcionários com licença do Copilot
- Disponível automaticamente no Copilot

Baseado em grupo:
- Departamentos ou equipes específicas
- Atribuições de grupos de segurança
- Controle de acesso baseado em função
```

**Etapas de Configuração:**
1. Navegue até a página de Agentes no centro de administração
2. Selecione o agente a ser implantado
3. Escolha o escopo de implantação:
   - Todos os usuários
   - Grupos de segurança específicos
   - Usuários individuais
4. Defina o status de disponibilidade
5. Configure as permissões, se aplicável
6. Implante e monitore

## Experiência do Usuário

### Descoberta de Agentes
Os usuários encontram agentes em:
- Central do Microsoft 365 Copilot
- Seletor de agentes na interface do Copilot
- Catálogo de agentes da organização

### Controle de Acesso a Agentes
Os usuários podem:
- Ativar/desativar agentes durante as interações

…