Maester Packs
LowScript packFree

Copilot AI Governance

Findings for how AI agents, agent identities, and the Copilot agent catalog are governed in Microsoft 365: sponsor/owner coverage, unused agents and tools, assignment-group ownership, broad Graph write permissions on agent identities, unclear agent and blueprint names, classic Copilot Studio servic…

By chadmcox · Version 0.7.1 · Published 11 Nov 2026

What it checks #

29 tests across:

  • Entra ID Entra ID 29

Connect #

PowerShell 
Connect-Maester

Run #

PowerShell 
Invoke-Maester -Pack AIGOV

App-only #

The publisher has not said whether the pack runs app-only.

Microsoft Graph permissions (14)
  • Application.Read.All
  • Directory.Read.All
  • Reports.Read.All
  • CopilotPackages.Read.All
  • CopilotCostManagement-Policy.Read.All
  • CopilotCostManagement-Assignment.Read.All
  • Group.Read.All
  • Policy.Read.All
  • IdentityRiskyAgent.Read.All
  • User.Read.All
  • GroupMember.Read.All
  • AuditLog.Read.All
  • Organization.Read.All
  • ExternalConnection.Read.All
Install 
Install-MtPack chadmcox/maester-ai-governance-pack/pack

Assumes Maester is installed. New to Maester? Get started.

Next: connect and run
Connect 
Connect-Maester
Run 
Invoke-Maester -Pack AIGOV