Govern AI access and activity in your Microsoft 365
Governance for AI agents and assistants in Syskit Point is now generally available and fully supported for every tenant.
Every agent needs an owner, and every change needs a trail
AI agents are now part of everyday work in Microsoft 365. But when the people who built them leave, the agents keep running and stay shared. Nobody is accountable for what they can access.
This release is the first step in AI agent lifecycle governance. Point now keeps every agent owned and gives you a full record of what happens to your AI agents and assistants, all in one place.
Ownerless agents automation: set it once, keep every agent owned
Point already shows you ownerless agents and lets you delete, block, or reassign them. But you still had to decide on each agent by hand, and guess who should own it. Microsoft’s automatic reassignment covers only Agent Builder agents, and an admin has to approve each reassignment. Going further requires Agent 365 or E7 licenses.
Ownerless agents automation is Syskit Point’s first automation for non-human actors. It makes sure every AI agent in your tenant has an accountable owner, and puts that decision with the business, not IT.
How it works
On the Agents Inventory, the Ownerless agents section now includes a Set up automation option.
Pressing it opens a side panel where a new toggle lets you enable automation with a single click.
Point then runs one daily policy across both Copilot Studio and Agent Builder agents. For every ownerless agent, it assigns a new owner based on your choice:
- Previous owner’s manager: The agent goes to the manager of the person who left.
- Sponsor: The agent goes to its sponsor. This applies to Copilot Studio agents; Agent Builder agents always go to the previous owner’s manager.
New owners get one email per previous owner, listing all the agents they received. If there’s nobody to assign an agent to, it stays ownerless so you can resolve it manually. You stay in control.
Why it matters
- Accountability for every active agent: When someone leaves, their agents go to their manager or the agent’s sponsor.
- No more manual cleanup: Point acts automatically, so you don’t fix agents by hand.
- Ownership decided by the business: Managers can pass agents on to the right person, and owners keep the agents they still need.
- Full coverage, no extra license: Copilot Studio and Agent Builder agents are covered without Agent 365.
Ownerless agents automation is available on the Governance and Enterprise plans. Make sure you test it today!
Audit reports for AI agents and assistants: trace what changed and when
Knowing which agents, assistants, and other apps exist is only the first step. You also need to know what happens to them: who changes their configuration and what they actually do in your tenant.
Until now, that meant piecing together audit logs from several Microsoft admin centers. Activity tracking stopped at files, and showing auditors who changed an agent was slow and manual. Two new reports bring this into Point.
Configuration changes report
See who changed an agent’s or app’s configuration, what changed, and when. Spot unexpected changes early and trace each one back to the person who made it.
Activity report
Go beyond files and track AI interactions, sign-ins, and uploaded files. See what your agents and apps actually do, not just that they exist.
Why it matters
- Full trail of configuration changes: See who changed what on an agent or app, and when.
- Faster investigations: Trace a change or unusual activity back to who, what, and when, in one place.
- Audit-ready evidence: Show auditors and leadership what changed on your agents and apps and what they did.
What's next: Inactive agents automation
Now that every agent has an owner who can decide whether to keep it, the next step is removing the agents nobody uses.
With the upcoming Inactive agents automation, Point will delete unused agents after a grace period you set. During the grace period, the agent is either blocked or left as it is. Owners can optionally get an email with a Keep button that stops the countdown, and you’ll see how many agents were reassigned, blocked, deleted, and kept.