Microsoft’s AI-powered governance tool is a genuine step forward for SharePoint admins. For IT leaders managing licences, storage costs, and the full Microsoft 365 estate, it’s the start of the conversation, not the end.
1. At a Glance
2. A new tool in the admin centre
Microsoft rolled out the SharePoint Admin Agent to general availability in August 2026. The idea is straightforward: instead of running manual reports, pulling PowerShell scripts, or clicking through dozens of site settings to find governance problems, administrators can ask questions in plain English and receive an analysis with guided remediation steps.
Ask “which sites have oversharing risks?” and the agent returns a ranked list of at-risk sites, the specific permission entries driving the risk, and a guided path to fix them. Ask “where is version history growing fastest?” and it surfaces the sites consuming disproportionate storage through uncapped versioning.
For SharePoint admins who have spent years battling governance backlogs with limited tooling, this is a meaningful improvement. The conversational interface removes friction from exploratory governance work. It is faster than scripting and more accessible than manual reporting.
But a governance conversation is not a governance system. And the Admin Agent, for all its utility, has meaningful boundaries that IT leaders need to understand before they conclude it replaces anything in their tooling stack.
3. What the Admin Agent actually covers
At general availability, the Admin Agent provides two primary skill areas: permissions governance and storage visibility. Both are admin-only, operating at the tenant level across SharePoint and OneDrive for Business.
On the permissions side, the agent can identify sites with oversharing risks, surface sites where external users hold edit access, flag sites sharing content with Everyone Except External Users, and show permission state reports at site and OneDrive level. It draws on SharePoint Advanced Management data to produce ranked risk lists and suggests remediation steps for each finding.
On storage, it shows which sites consume the most capacity, where version history is growing fastest, and how storage is distributed across the tenant. This gives admins a quick view of where storage pressure is building without needing to pull separate reports. Beyond those two skill areas, the Agent also surfaces entry points into SAM features: content management assessment for Copilot readiness, catalog management for site clustering, and lifecycle policies for inactive sites and ownership reviews. It works as a conversational layer across the broader SAM governance surface.
The Admin Agent analyses and recommends. It does not act without your approval. That design is deliberate, and it is the right call for governance. But it also means the Agent is a tool for finding problems, not a system for continuously preventing them.
One point worth emphasising: destructive actions remain entirely in the administrator’s hands. The Agent does not revoke permissions, remove sharing links, or delete content. Every remediation step requires the admin to review the recommendation and confirm each action individually. Microsoft has been clear that this is by design.
4. The licence reality nobody is advertising
The SharePoint Admin Agent requires either a Microsoft 365 Copilot licence or a SharePoint Advanced Management (SAM) add-on licence. Neither comes with standard Microsoft 365 Business or Enterprise base plans.
SAM costs $3 per user per month and must be purchased for every user in the organisation who is not already covered by a Copilot licence. An organisation of 1,000 users with 100 Copilot seats needs 900 SAM licences to be compliant, adding $2,700 per month before a single governance query is run in the Admin Agent.
This is not a theoretical compliance concern. Microsoft’s Product Terms are clear on per-user SAM licensing, and the gap between what account teams communicated at Ignite 2024 (“no barriers, tenant-level access”) and what the Product Terms actually require has been confirmed by Microsoft MVPs and independent licensing analysts. Organisations relying on informal guidance may be exposed at their next renewal.
Licence requirement: The SharePoint Admin Agent is not included in standard M365 Business Standard, E3, or E5 base plans. It requires M365 Copilot ($30/user/month) or SAM Plan 1 ($3/user/month per user across the organisation). Check your current licence coverage before expecting the Agent interface to appear in your admin centre.
5. Four things the Admin Agent does not cover
The Admin Agent is a genuine governance tool. It is also a SharePoint governance tool specifically, built on SAM data, scoped to admin workflows. Understanding what falls outside its scope is as important as knowing what it can do.
Licence management
The Admin Agent has no visibility into Microsoft 365 licence assignments. It cannot tell you which users have E5 licences and only use E3-level features, which accounts are inactive and still drawing licence costs, or what your actual licence consumption looks like versus what you are paying for. Licence right-sizing, forecasting, and renewal preparation sit entirely outside its scope.
For organisations running large or complex M365 estates, licence waste routinely runs at 15 to 30 percent of total spend. That is a significant cost exposure the Admin Agent does not address.
Storage cost optimisation
The Admin Agent shows you where storage is being consumed. It does not help you reduce what it costs. Identifying Redundant, Obsolete, and Trivial (ROT) data, archiving cold content to Azure Cool Storage, or modelling the financial impact of a storage clean-up are all beyond the tool’s current scope.
Seeing that a site is consuming 400 GB and acting on that information are two different problems. The Agent solves the first.
File-level granularity
The Admin Agent operates at site level. It can tell you that a SharePoint site has oversharing risks. It cannot tell you which specific files are overshared, who accessed them, or when the permission issue was introduced. For organisations that need file-level audit trails, detailed access reporting, or evidence-grade compliance records, site-level summaries are not sufficient.
The ShareMaster documentation on the Agent notes the same limit directly: “For that deeper level of detail… a full cross-site permissions export in Excel requires a deeper audit pass.”
Continuous automated enforcement
The Admin Agent is a reactive, conversational tool. You ask a question; it answers. Governance problems that recur, grow over time, or require ongoing policy enforcement still require structured automation. Lifecycle policies exist in SAM and can be triggered through the Agent’s guided flows, but the Agent itself does not run proactively or alert you when conditions change between queries.
A governance system maintains conditions continuously. A governance conversation surfaces what exists today.
6. How TeamsFox sits alongside the Admin Agent
The SharePoint Admin Agent and TeamsFox are not competing for the same role. The Agent is a Microsoft-native conversational layer for SharePoint governance queries. TeamsFox is a management platform that covers the full Microsoft 365 estate with continuous visibility, automated lifecycle governance, and financial optimisation across licences, storage, and usage.
Where the Admin Agent finds oversharing risks at site level, TeamsFox provides file-level granularity, persistent governance policies, and the audit-grade evidence trail that IT and compliance teams need when questions move beyond “which sites” to “which files, accessed by whom, under which permissions, changed when.”
Where the Admin Agent has no licence management capability, TeamsFox identifies unused and oversized licence assignments across the tenant, right-sizes those assignments before renewal season, and forecasts the financial impact of different licence configurations. Customers across 20+ countries have cut licence costs by an average of 30 percent through TeamsFox licence right-sizing.
Where the Admin Agent surfaces storage pressure, TeamsFox acts on it. ROT identification, Azure Cool Storage archiving, version history management, and storage cost modelling turn a visibility finding into a 40 percent storage cost reduction.
“Microsoft Provides Controls. We Provide Control.” The Admin Agent gives admins a way to ask governance questions. TeamsFox gives organisations a system that answers the governance question before it needs to be asked.
The practical picture for most IT leaders is this: if your organisation has SAM or Copilot licences and you haven’t explored the Admin Agent yet, it is worth turning on. It makes SharePoint governance queries faster and more accessible. It surfaces risks that might otherwise sit invisible in admin reports.
But it does not replace the need to manage your licence estate, reduce your storage costs, govern content at file level, or maintain continuous automated enforcement across a complex Microsoft 365 environment. Those remain the same problems they were before the Agent launched, and they require a different level of tooling.
Conclusion
The SharePoint Admin Agent represents Microsoft’s most significant step toward conversational governance in the admin centre. For SharePoint admins, it is a welcome addition. Natural-language queries, ranked risk lists, and guided remediation are genuinely useful tools for the day-to-day work of managing a large SharePoint tenant.
For IT leaders responsible for the full Microsoft 365 estate, the Agent is one piece of a larger governance picture. It covers SharePoint permissions and storage visibility for administrators who already have SAM or Copilot licences. It does not cover licences, cost optimisation, file-level audit, or continuous automated enforcement.
Understanding where the Admin Agent stops is as important as knowing what it starts. The organisations that treat it as a prompt for deeper governance work, rather than a conclusion, will be the ones who turn Microsoft’s new tool into lasting operational control.
TeamsFox works alongside the Admin Agent to cover what it doesn’t: licence right-sizing, storage cost reduction, file-level permissions intelligence, and tenant-wide visibility that runs continuously, not just when you remember to ask.
Frequently Asked Questions
Does the SharePoint Admin Agent require a Microsoft Copilot licence?
Yes. The Admin Agent requires either a Microsoft 365 Copilot licence or a SharePoint Advanced Management (SAM) Plan 1 add-on. It is not included in standard Microsoft 365 Business or Enterprise base plans. For organisations with partial Copilot rollouts, all non-Copilot users must hold a SAM licence at $3 per user per month to meet Microsoft’s compliance requirements.
Can the SharePoint Admin Agent automatically remove permissions or delete content?
No. The Admin Agent analyses conditions and recommends remediation steps, but every action requires explicit admin confirmation. It does not act autonomously. This is by design: Microsoft has been clear that destructive governance actions must remain under human control.
Does the SharePoint Admin Agent replace SharePoint Advanced Management?
No. The Admin Agent is built on top of SAM data. It is a conversational interface that surfaces SAM insights more accessibly. SAM itself remains the underlying governance layer. Having the Admin Agent does not mean you have SAM capabilities without the appropriate licence.
What does TeamsFox add that the Admin Agent does not cover?
TeamsFox adds licence management and right-sizing, storage cost optimisation through ROT identification and Azure Cool Storage archiving, file-level permissions granularity beyond site-level summaries, and continuous automated governance enforcement. These are areas the Admin Agent does not address regardless of your licence configuration.
About TeamsFox
TeamsFox is a Microsoft 365 management and optimisation platform trusted by organisations across 20+ countries in Europe, MENA, and Asia. We help IT leaders reduce licence costs, cut storage spend, govern content and permissions, and prepare Microsoft 365 tenants for AI adoption.
Our customers achieve an average 30% licence cost reduction, 60% admin time reduction, and 40% storage cost reduction. TeamsFox is available on Microsoft Azure Marketplace and is a Microsoft Solutions Partner for Digital & App Innovation and Data & AI.
See how TeamsFox completes your Microsoft 365 governance picture.