Microsoft 365 Copilot: New AI Reader role for Agent 365 (read-only access)

Introduction

We are introducing the AI Reader role for Agent 365 in Microsoft 365 Copilot. This role provides read-only access to agent usage, health, and configuration without requiring Global Administrator permissions. It enables administrators to monitor and report on Agent 365 while maintaining separation of duties and preventing configuration changes.

When this will happen

General Availability (Worldwide): We will begin rolling out this feature in early May 2026 and expect to complete by early May 2026.

How this affects your organization

Who is affected

• Microsoft 365 tenants using Agent 365
• Users assigned the AI Reader role
• Administrators who manage role assignments for Agent 365

What will happen

• A new AI Reader role will be available in the Microsoft 365 admin center.
• Users assigned this role can view agent usage, health, and configuration.
• Users assigned this role cannot make changes or perform administrative actions.
• The AI Reader role is not assigned by default and must be explicitly assigned.
• Existing roles, permissions, and policies are not changed.
• There is no impact to user workflows.

What you can do to prepare

No action is required if your organization does not need read-only visibility into Agent 365.

If you plan to use this role:

• Identify users who need read-only visibility, monitoring, or reporting access without administrative privileges.
• Assign the AI Reader role to those users.

To manage role assignments:

1. Sign in to the Microsoft 365 admin center using a Global Administrator or User Administrator account.
2. Go to Roles > Role assignments.
3. Select AI Reader.
4. Review current assignments and add or remove users as needed.

Learn more: About administrator roles in the Microsoft 365 admin center | Microsoft 365 admin center | Microsoft 365 | Microsoft Learn 

Compliance considerations