Skill converted from mcp-deploy-manage-agents.prompt.md
This skill is a guidance document for deploying, managing, and governing MCP-based declarative agents within Microsoft 365 using the admin center. It solves the organizational challenge of distributing and controlling AI agents across a tenant — covering approval, publishing, assignment, and blocking — while meeting compliance and governance requirements. It was converted from a Copilot prompt and reads as an admin playbook rather than an executable tool.
The content classifies agent types (published by organization, shared by creator, Microsoft agents, external partner agents, and experimental frontier agents), enumerates required admin roles (AI Admin for full management, Global Reader for view-only) with least-privilege best practices, and walks through agent lifecycle actions: view, deploy, publish, block, and remove. It details deployment workflows for publishing to an organization, submitting via the Agent Store and Partner Center, and deploying organizational agents by scope (organization-wide, security groups, or individuals). It also covers the user experience of agent discovery and access control, governance and compliance topics (data access, API permissions, OAuth authentication, data residency, audit logs), MCP-specific management (validating MCP server URLs, authentication configuration, and imported tools), and per-agent and tenant-level settings.
It targets Microsoft 365 administrators, IT governance teams, and agent developers who need to ship declarative agents to an organization safely. Use cases include reviewing and approving a submitted agent, deploying an agent to a specific department, validating an MCP server's security before rollout, and auditing agent usage. The skill is purely informational — it describes admin-center procedures and security best practices and executes nothing itself — so it is low risk.
AI Admin provides full agent management capabilities, while Global Reader gives view-only access. The guidance recommends using the least-privileged role and limiting Global Administrator to emergency scenarios.
Two paths: submit to the Agent Store via Partner Center for validation and public availability, or deploy directly as an IT admin to all employees or selected users and security groups from the admin center.
That the MCP server URL is accessible, authentication configuration is secure, imported tools are appropriate, response data does not expose sensitive information, and the server follows security best practices.
Users can toggle admin-allowed agents on or off, add or remove them from their experience, and manage preferences, but they can only access agents the admin has permitted.
No. It is a governance and procedure guide describing how to deploy and manage agents through the Microsoft 365 admin center; it documents workflows rather than executing them.
Quick Setup:
.claude/skills/Repository
github/awesome-copilot