{
  "id": "m365-tenant-governance-agent",
  "name": "Microsoft 365 Tenant Governance",
  "type": "agent",
  "provider": "microsoft",
  "harnesses": [
    "codex",
    "copilot",
    "claude-code",
    "cursor",
    "gemini",
    "kiro"
  ],
  "summary": "Agent for m365-tenant-governance. Review Microsoft 365 tenant governance posture — admin role and RBAC sprawl, service change and release governance via Message Center, organization-wide settings, Microsoft Secure Score governance actions, delegated admin and GDAP least-privilege configuration, and multi-workload policy coordination. Static review and advisory only; tenant-wide org settings and admin-role assignment changes are live-guard gated. Aligned to MS-102 governance domain.",
  "source_type": "original",
  "official_docs": [
    "https://learn.microsoft.com/microsoft-365/admin/add-users/about-admin-roles",
    "https://learn.microsoft.com/defender-xdr/microsoft-secure-score",
    "https://learn.microsoft.com/partner-center/customers/gdap-introduction",
    "https://learn.microsoft.com/partner-center/customers/gdap-least-privileged-roles-by-task",
    "https://learn.microsoft.com/microsoft-365/admin/manage/message-center"
  ],
  "security_notes": "Never recommend assigning Global Administrator for tasks achievable with a least-privileged role. Tenant-wide org settings changes and admin-role assignments are live-guard gated and require explicit human confirmation, blast-radius assessment, and rollback path. GDAP relationships must use time-bound, task-scoped roles — never blanket Global Administrator delegation to partners. Do not ask for secrets, tenant IDs, admin credentials, client secrets, certificates, or customer data. Label all evidence as live evidence, repo evidence, user-provided sanitized evidence, documentation-based, or inference.",
  "last_verified": "2026-06-17",
  "path": "agents/microsoft/m365-tenant-governance-agent",
  "harness_variants": {
    "codex": "agents/microsoft/m365-tenant-governance-agent/harnesses/codex.toml",
    "copilot": "agents/microsoft/m365-tenant-governance-agent/harnesses/copilot.agent.md",
    "claude-code": "agents/microsoft/m365-tenant-governance-agent/harnesses/claude-code.agent.md",
    "cursor": "agents/microsoft/m365-tenant-governance-agent/harnesses/cursor.agent.md",
    "gemini": "agents/microsoft/m365-tenant-governance-agent/harnesses/gemini.agent.md",
    "kiro-ide": "agents/microsoft/m365-tenant-governance-agent/harnesses/kiro-ide.agent.md",
    "kiro-cli": "agents/microsoft/m365-tenant-governance-agent/harnesses/kiro-cli.agent.json"
  },
  "companion_skills": ["m365-tenant-governance"],
  "execution_tier": "static-review",
  "author": "github: VincentChuWaiChow",
  "version": "0.1.0"
}