MP.AIGOV.1002 Blocked package has an open pending install or consent request

Copilot AI Governance

Findings for how AI agents, agent identities, and the Copilot agent catalog are governed in Microsoft 365: sponsor/owner coverage, unused agents and tools, assignment-group ownership, broad Graph write permissions on agent identities, unclear agent and blueprint names, classic Copilot Studio servic…

By chadmcox · Version 0.7.1 · Published 11 Nov 2026

MP.AIGOV.1002 Blocked package has an open pending install or consent request

Severity: LowGraph

[!NOTE] Validated 2026-11-05 against a real Microsoft 365 test tenant (F7-licensed; the package catalog API was reachable with CopilotPackages.Read.All alone). The run correctly Passed: no blocked package had an open pending install or consent request. The requestStatus/ requestType field names matched the live schema.

Checks whether a package the tenant has blocked (isBlocked) still has an open pending install or consent request (requestStatus/requestType). A pending request against a blocked package means a user can still be waiting on, or an admin can still approve, an install the tenant already decided to block.

Remediation action

Cancel or deny the pending request for every blocked package found, and confirm with the requester why they were still able to request an install that was already blocked.

Copilot AI Governance

`MP.AIGOV.1002` Blocked package has an open pending install or consent request

Remediation action

Related links