0 breach•Real-Time Threat Response•AI-Powered Security•Microsoft 365 Security•Data Protection•0 breach•Real-Time Threat Response•AI-Powered Security•Microsoft 365 Security•Data Protection•

Microsoft 365 administrators need to decide, by 25 October 2026, who in their organization may upload advanced Copilot agents and plugins. Advanced uploads stay enabled for everyone by default, so doing nothing keeps today’s behaviour, but leaving the choice to the default means nobody has deliberately decided who can bring agents with actions into your tenant.

What is the Microsoft 365 Copilot advanced package upload setting?

It is a new Copilot control in the Microsoft 365 admin center that determines who can upload advanced agents and plugins. Microsoft announced it in Message Center item MC1472007. The control became available from 25 September 2026, and rollout is expected to finish by the end of October.

An advanced package is an upload that contains a declarative agent with actions, or a declarative agent connected to an MCP server. Every other upload is a basic package, and basic uploads are not affected.

Key facts at a glance

Deadline: choose your setting before 25 October 2026.
Default: advanced uploads remain enabled unless you select no users, specific users, or specific groups.
Options: all users, no users, specific users, or specific Microsoft Entra ID groups.
Scope: applies to packages uploaded by users after the control is available, not to agents built by Microsoft or third parties.
Not affected: basic package uploads.

Does this give Copilot access to all your company data?

No. The setting does not widen what Copilot can read. It controls who can introduce advanced agents and plugins into the tenant. That matters because advanced agents can take actions and connect to enterprise systems, so an agent added without an owner, a review or an access boundary can create governance and security exposure.

How do you restrict who can upload advanced Copilot agents?

Sign in to the Microsoft 365 admin center as an administrator who manages Copilot settings.
Open the Copilot settings and find Advanced package uploads.
Choose all users, no users, specific users or specific Microsoft Entra ID groups.
Create a dedicated Entra ID group for approved agent publishers, so access is easy to audit.
Document the owner, the approval process and the review steps, and brief your help desk.

What is the safest starting point?

Start with least privilege: allow a small, approved group, review each advanced agent before deployment, and align every implementation with your Microsoft 365 security, identity and data-governance policies. The goal is not to slow AI adoption. It is to introduce it securely, intentionally and with accountability.

Frequently asked questions

What happens if I do nothing before 25 October?

Advanced uploads stay enabled by default, so existing behaviour continues. The risk is a missed decision, not a service outage.

What is the difference between advanced and basic Copilot packages?

Advanced packages include a declarative agent with actions or an MCP server connection. All other packages are basic and are not affected by this setting.

Can I allow only specific teams to upload advanced agents?

Yes. You can allow selected users or specific Microsoft Entra ID groups, or turn advanced uploads off for everyone.

Does this setting change what data Copilot can access?

No. It controls who can upload advanced agents and plugins. Data access is still governed by your existing permissions, sensitivity labels and compliance policies.

Is your Microsoft 365 tenant ready?

TEKNOLOGIIA helps organizations in Lebanon and the GCC modernize, secure and govern their Microsoft environments. Our Tekno365 specialists can review your Copilot and AI governance controls, assess your Microsoft 365 security posture, and give you a prioritized roadmap for secure adoption.

Book a Microsoft 365 security and governance assessment or contact our team.

Frequently Asked Questions – FAQs:

To help you better understand this topic and how it applies to your organization, we have answered some of the most frequently asked questions below:

What is a declarative agent in Microsoft 365 Copilot? A declarative agent is a custom Copilot assistant defined by instructions, knowledge sources and, optionally, actions. It becomes an “advanced” package when it includes actions or connects to an MCP server.
What is an MCP server in Copilot? An MCP (Model Context Protocol) server lets an agent connect to external tools and data sources. Agents that use one fall under the advanced-upload control.
Why restrict advanced uploads if they stay on by default? Advanced agents can take actions in connected systems. Choosing who may upload them gives each agent an owner and a review step before it reaches your tenant.