Copilot Agent Inventory¶

Foundation system-of-record for Copilot Studio and Agent Builder agents — three-layer tenant-wide discovery (Azure Resource Graph, per-environment Dataverse, PPAC reconciliation) feeding a canonical eight-entity governance store keyed on fsi_copilotagent.

Mapped Controls¶

1.2, 1.7, 2.1, 2.13

Prerequisites¶

Role	Requirement
`power-platform-admin`	Power Platform Admin (or Dynamics 365 admin) for tenant-wide environment enumeration and Dataverse bot/botcomponent reads, plus the fsi publisher prefix in the governance environment.
`security-admin`	Security Admin to provision the least-privilege scanner service principal and store its secret in Key Vault via managed identity.

Verification¶

Run discover_agents.py and confirm the scanner writes one row per discovered agent to fsi_copilotagent and one row per detected feature to fsi_caiagentfeature.

Documentation¶

Document
Architecture
Dataverse Schema
Flow Configuration
Governance Platform Composition
Prerequisites

View source on GitHub { .md-button }