Skip to content

Published AI agents should not be dormant

Why This Matters

Unused or dormant AI agents connected to Copilot Studio can introduce security and governance risks. Agents that are no longer actively maintained may contain outdated configurations, exposed data connections, or permissions that no longer align with your organization's current policies. Regular review and cleanup of these agents prevents potential data leaks and reduces the attack surface for unauthorized access.

What Aether365 Checks

Aether365 scans all published Copilot Studio agents in your Microsoft 365 tenant and identifies those that have not been modified or republished within a configurable threshold, defaulting to 180 days. This check appears in the Aether365 dashboard under the microsoft-365 service category.

Microsoft references

Was this page helpful?