Administrator Downloads
Download role-specific checklists to track your implementation progress. Each Excel file contains the controls relevant to your role with status tracking columns.
Offline deliverables: This repository ships web documentation + Excel templates only. We do not publish a Word/PDF document bundle. (Organizations may export pages to PDF for internal audit packages as needed.)
Role-Specific Checklists
Role names below use the framework's canonical short naming. See the Administrator Role Catalog for definitions and accepted aliases.
Naming note: Download filenames and link titles retain the published "Administrator Checklist" artifact naming for link stability, while the Target Role column uses the framework's canonical short role names.
| Download | Target Role | Description |
|---|---|---|
| Entra Administrator Checklist | Entra Global Admin | Identity controls: Conditional Access, roles, identity governance |
| Power Platform Administrator Checklist | Power Platform Admin | PPAC controls: Environments, Groups, Routing, Copilot Hub |
| Purview Administrator Checklist | Purview Compliance Admin | Purview controls: DLP, DSPM for AI, Audit, eDiscovery |
| SharePoint Administrator Checklist | SharePoint Admin | SharePoint governance controls: access, retention, external sharing |
| Compliance Officer Checklist | Compliance Officer | Regulatory mappings and audit evidence tracking |
| Governance Maturity Dashboard | AI Governance Lead | All 78 controls with status tracking and pillar-level summary aggregation |
Checklist Format
Each Excel checklist includes:
| Column | Description |
|---|---|
| Control ID | Control identifier (e.g., 1.11, 2.15) |
| Control Name | Full control name |
| Status | Dropdown: Not Started, In Progress, Completed, N/A |
| Notes | Free text for your implementation notes |
| Due Date | Optional target completion date |
How to Use
- Download the checklist for your role
- Review the controls assigned to you
- Update status as you implement each control
- Add notes about your specific configuration
- Share progress with the AI Governance Lead
Which Checklist Should I Download?
| If you are responsible for... | Download this checklist |
|---|---|
| Microsoft Entra | Entra Administrator |
| Power Platform Admin Center | Power Platform Admin |
| Microsoft Purview | Purview Compliance Admin |
| SharePoint Online | SharePoint Admin |
| Regulatory compliance / Audits | Compliance Officer |
| Overall governance program | Governance Maturity Dashboard |
Tip: The Governance Maturity Dashboard is useful for tracking overall progress across all roles and presenting to leadership.
Complementary tool: The Governance Readiness Assessment generates personalized remediation roadmaps with role and phase assignments that align with these checklists. Run the assessment first to identify your priority controls, then use the role-specific checklists to track implementation progress.
Control Assignments by Role
The lists below mirror the control coverage currently shipped in each role workbook.
Entra Global Admin
- 1.11 Conditional Access and Phishing-Resistant MFA
- 1.12 Insider Risk Detection and Response
- 1.18 Application-Level Authorization and Role-Based Access Control (RBAC)
- 2.26 Entra Agent ID — Identity Governance for Agents
- 3.1 Agent Inventory and Metadata Management (Agent ID section)
Power Platform Admin
- 1.29 Global Secure Access: Network Controls for Microsoft Copilot Studio Agents
- 2.1 Managed Environments
- 2.2 Environment Groups and Tier Classification
- 2.15 Environment Routing and Auto-Provisioning
- 2.16 RAG Source Integrity Validation
- 2.17 Multi-Agent Orchestration Limits
- 3.7 PPAC Security Posture Assessment
- 3.8 Copilot Hub
Purview Compliance Admin
- 1.5 Data Loss Prevention (DLP) and Sensitivity Labels
- 1.6 Microsoft Purview: DSPM for AI
- 1.7 Comprehensive Audit Logging and Compliance
- 1.9 Data Retention and Deletion Policies
- 1.10 Communication Compliance Monitoring
- 1.19 eDiscovery for Agent Interactions
- 1.22 Information Barriers for AI Agents
SharePoint Admin
- 4.1 SharePoint Information Access Governance (IAG) / Restricted Content Discovery
- 4.2 Site Access Reviews and Certification
- 4.3 Site and Document Retention Management
- 4.4 Guest and External User Access Controls
- 4.5 SharePoint Security and Compliance Monitoring
- 4.6 Grounding Scope Governance
- 4.7 Microsoft 365 Copilot Data Governance
- 4.8 Item-Level Permission Scanning for Agent Knowledge Sources
- 4.9 Embedded File Content Governance
Compliance Officer
- 1.7 Comprehensive Audit Logging and Compliance
- 1.19 eDiscovery for Agent Interactions
- 1.22 Information Barriers for AI Agents
- 2.6 Model Risk Management (Alignment with OCC Bulletin 2026-13 (formerly OCC 2011-12) / Fed SR 26-2 (formerly SR 11-7))
- 2.11 Bias Testing and Fairness Assessment
- 2.12 Supervision and Oversight (FINRA Rule 3110)
- 2.13 Documentation and Record Keeping
- 2.18 Automated Conflict of Interest Testing
- 2.19 Customer AI Disclosure and Transparency
- 2.21 AI Marketing Claims and Substantiation
- 3.3 Compliance and Regulatory Reporting
- 3.10 Hallucination Feedback Loop
FSI Agent Governance Framework v1.6.2 - May 2026