A role, written down before it runs
You describe the job in ordinary words: what the agent does, which department it sits in and who it works for. Then you add the rules it follows, also in plain English.
Every task starts with a person approving each item the agent handles.
Where it starts, and where it works
An agent picks up work from the channels your team uses today and does it in the apps they already have.
Where the work arrives
An email, a message in Teams or Slack, a file landing in a folder, or a schedule. Nobody has to forward work into a new queue.
Where it does the work
In about 200 business apps, with the access an administrator grants for each connection.
What it leaves to a person
Whatever its rules send to a person, and every action you mark as serious. Those never run alone, at any level.
What it can reach
An administrator grants each connection and names its scope when granting it. Read and write access are stated separately.
An agent can also carry its own Microsoft Entra identity, which your Microsoft 365 admin manages in Entra.
Who answers for it
Every agent works for a named person in the department it belongs to. Its work comes to that team’s review queue, where they approve, edit or decline it.
How much it does alone is set task by task by the team’s run of approvals.
What people ask first
Write one job description for one stream of work, and see every item come through your review queue first.

