Microsoft

Microsoft 365 Adds New Feature for Admins to Manage Link Creation Policies

Microsoft announced on August 20, 2025, a significant enhancement to its Microsoft 365 administrative capabilities with the introduction of new tenant-level controls for managing org-wide sharing links for user-built Copilot agents.

This feature, scheduled for general availability in mid-September 2025, represents a critical step forward in enterprise governance for AI-powered collaboration tools.

Enhanced Administrative Control

The new feature, identified as Message Center update MC1138797 and associated with Microsoft 365 Roadmap ID 500376, will provide IT administrators with granular control over who can create organization-wide sharing links for agents built using Microsoft Copilot Studio Agent Builder.

This capability addresses growing enterprise concerns about AI governance and data sharing policies within organizations.

Currently, Microsoft 365 environments operate with default sharing permissions that may not align with specific organizational security requirements.

The upcoming administrative control will enable IT teams to specify whether all users, no users, or only designated individuals and groups can create these sharing links, ensuring alignment with internal governance policies and collaboration frameworks.

Microsoft plans to begin the worldwide rollout in mid-September 2025, with completion expected by late September 2025.

Once available, administrators can access the new controls through a dedicated pathway in the Microsoft 365 admin center, specifically navigating to Copilot > Settings > Data access > Agents.

The implementation maintains backward compatibility by preserving existing default behaviors unless administrators actively customize the settings.

This approach ensures that organizations can transition smoothly without immediate disruption to current workflows while providing the flexibility to implement stricter controls as needed.

This development reflects Microsoft’s response to increasing enterprise demand for comprehensive AI governance tools.

As organizations rapidly adopt AI-powered solutions, the ability to control how AI agents are shared across the organization becomes crucial for maintaining data security and compliance standards.

The feature particularly benefits organizations with strict data sharing policies, regulated industries, or complex organizational structures where different departments may require varying levels of access control.

By providing tenant-level management capabilities, Microsoft enables IT administrators to create consistent policies that can be enforced across the entire organization.

Microsoft recommends that administrators review their organization’s existing sharing policies in preparation for this update.

While no immediate action is required, organizations should evaluate whether their current governance frameworks align with the new capabilities and plan any necessary policy adjustments.

The company has indicated that no specific compliance considerations have been identified for this feature, though organizations are advised to conduct their own reviews based on their specific regulatory requirements and internal security standards.

Find this News Interesting! Follow us on Google News, LinkedIn, and X to Get Instant Updates!

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago