AI Agent Inventory
The question it answers: Which AI agents exist in the tenant, who built and owns them, and which ones have an owner who left or is disabled?
Every AI agent in the tenant in one list: who built it, who owns it, where it lives and whether it is published. Agents are merged when two sources describe the same one (for example a Copilot Studio agent that also has an Entra agent identity and a catalogue entry). Agents whose owner has left or is disabled come first. Nobody maintains them, yet they may keep running and keep their access to data.
At a glance
Section titled “At a glance”| Where in the app | Tenant › Teams Voice, Power Platform & Copilot › AI Agent Inventory |
| Workload | Tenant |
| Kind | Table · dashboard tile |
| Data | Read from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed). |
| Licence | Microsoft Agent 365 for the Copilot catalogue. Copilot Studio / Agent Builder agents come from the Power Platform inventory (no extra licence). |
| Report id (API and MCP) | tenant.collaboration.ai-agent-inventory |
Columns
Section titled “Columns”| Column | Key | Type |
|---|---|---|
| Status | Severity | Status |
| Agent | Name | Link |
| Source | Source | Text |
| Also listed in | AlsoListedIn | Text |
| Kind | Kind | Text |
| Creator | Creator | Link |
| Owner | Owner | Link |
| Owner status | OwnerStatus | Text |
| Sponsors | Sponsors | Text |
| State | State | Text |
| Location | Location | Text |
| Created | Created | Date |
| Published / changed | LastChanged | Date |
| Finding | Finding | Text |
Filters
Section titled “Filters”| Filter | Key (API) | On when the page opens |
|---|---|---|
| Hide agents built by Microsoft | hide-microsoft | Yes |
| Only agents that need attention | attention | No |
What it needs
Section titled “What it needs”Licence: Microsoft Agent 365 for the Copilot catalogue. Copilot Studio / Agent Builder agents come from the Power Platform inventory (no extra licence).
Application permissions on the IntensiveReports app registration (all permissions):
| Permission | API | What it allows | Note |
|---|---|---|---|
CopilotPackages.Read.All | Microsoft Graph | Read all packages information | Copilot catalogue |
AgentIdentity.Read.All | Microsoft Graph | Read all agent identities | Entra Agent ID |
Application.Read.All | Microsoft Graph | Read all applications | Entra Agent ID |
User.Read.All | Microsoft Graph | Read all users’ full profiles | creator and owner names, cached |
User-LifeCycleInfo.Read.All | Microsoft Graph | Read all users’ lifecycle information | with |
User.Read.All | Microsoft Graph | Read all users’ full profiles | with |
Roles and other setup:
- Azure RBAC Reader at Tenant Root (Foundry, Resource Graph)
- Azure AI User on Foundry projects (unpublished Foundry agents)
- Entra role Global Reader or AI Reader (Power Platform inventory)
Data sources it reads
POST management.azure.com/providers/Microsoft.ResourceGraph/resources (PowerPlatformResources: microsoft.copilotstudio/agents)GET /v1.0/copilot/admin/catalog/packagesGET /v1.0/servicePrincipals/microsoft.graph.agentIdentity + owners / sponsors ($batch)POST management.azure.com/providers/Microsoft.ResourceGraph/resources (Foundry projects)GET {project endpoint}/agents?api-version=v1 (Foundry data plane)GET .../projects/{p}/applications, POST .../applications/{a}/listAgents (ARM, 2026-01-15-preview)GET /v1.0/users (cached)
Through the API and MCP
Section titled “Through the API and MCP”GET /ir-api/v1/reports/tenant.collaboration.ai-agent-inventory?size=100GET /ir-api/v1/reports/tenant.collaboration.ai-agent-inventory?filter=hide-microsoftAn AI assistant reads it with the MCP tool get_report and the id tenant.collaboration.ai-agent-inventory. The client needs the Read grant for Tenant. See Using the API.