Summary
On October 15, 2026, Microsoft began previewing agent accounts and shared business-process memory in Copilot Studio through its Frontier early-access program. Agent accounts give an agent its own Entra credentials so it acts as a distinct participant in Microsoft 365, while shared memory pools knowledge across everyone who works with the agent. During the preview, shared memory has no per-user privacy boundary and cannot be turned off.
What changed
Copilot Studio added, in preview: agent accounts that grant an agent dedicated Entra identity to operate in Microsoft 365 as its own participant, and shared memory that keeps work and personal facts in one store serving all users of the agent, with no opt-out and no privacy boundary between users during the preview.
Why it matters
Giving agents first-class organizational identity reframes them as persistent digital teammates and reshapes access control and auditing, but the no-opt-out, no-privacy-boundary shared memory surfaces a real governance and data-exposure risk enterprises must weigh before adoption.
Evidence excerpt
Any files or chats you share can be summarized and included in the agent's responses to any user, even users without permissions to the files or chats and regardless of sensitivity label.