Maester Copilot AI Governance
Findings for how AI agents, agent identities, and the Copilot agent catalog are governed in Microsoft 365: sponsor/owner coverage, unused agents and tools, assignment-group ownership, broad Graph write permissions on agent identities, unclear agent and blueprint names, classic Copilot Studio servic…
Risk: Low
Text files only, and every scan passed.
Scanned 11 Nov 2026 at commit a2eb252. Digest sha256:0f8a56a444baeb8f9b944dc6d4ccab3e661ece020760b41538f029a4f63e72da.
Pin this version
Add this entry to maester-packs.lock.json so Maester installs exactly the commit that was scanned.
maester-packs.lock.json entry
{ "Id": "chadmcox.ai-governance", "Source": "chadmcox/maester-ai-governance-pack/pack", "Version": "0.7.1", "Commit": "a2eb252be1e7d4ecb5c538ed0b5cb68c4c2493b6", "Digest": "sha256:0f8a56a444baeb8f9b944dc6d4ccab3e661ece020760b41538f029a4f63e72da"}What it reaches
- Services
- Graph
- Microsoft Graph scopes
- Application.Read.All, Directory.Read.All, Reports.Read.All, CopilotPackages.Read.All, CopilotCostManagement-Policy.Read.All, CopilotCostManagement-Assignment.Read.All, Group.Read.All, Policy.Read.All, IdentityRiskyAgent.Read.All, User.Read.All, GroupMember.Read.All, AuditLog.Read.All, Organization.Read.All, ExternalConnection.Read.All
- Tenant writes
- None
- Network hosts
- None
- PowerShell modules
- None
Scan findings
The scan found nothing to review.
Install
Install-MtPack chadmcox/maester-ai-governance-pack/packAssumes Maester is installed. New to Maester? Get started.
Next: connect and run
Connect
Connect-Maester Run
Invoke-Maester -Pack AIGOV