Appendix C: Tenant Checks

Each check names one place to look, what Microsoft documents, and what changes if the tenant disagrees. Run them in a reference tenant first, then in the tenant under review; each is look-only.

#	Where to look	Microsoft documents	If the tenant disagrees
1	Copilot Chat, as a user granted Agent Builder access: the New agent entry, and inside the builder any Share option or Actions section	Agent Builder present; sharing "isn't available" in GCC High; no actions in Agent Builder in any cloud	Share present: the sharing controls move from the watch list into configuration. Actions present: a connector review.
2	Copilot Studio (GCC High), on a test agent: the Channels page, for a Teams and Microsoft 365 Copilot entry; and Microsoft 365 admin center, Agents, All agents, Requests, for Copilot Studio submissions	"Copilot Agents extend M365" and the Teams and M365 Copilot channel are No in GCC High	Copilot Studio agents can reach Copilot: that build path gains the channel and its own requirements.
3	A SharePoint site (GCC High): an agents entry in the site or library command bar	SharePoint agents "Not currently available" in GCC High	A second user build path exists; add it to the user-access requirement and to audit.
4	Microsoft 365 admin center, Agents, Settings: which of User access, Sharing, Agent and plugin access, Agent management rules, and Security templates appear	User access, Sharing, and management rules ship with Microsoft 365; policy templates and the Apply a template rule are Agent 365 features, and Agent 365 has no GCC High column	Templates present: Agent 365 governance exists in GCC High.
5	Entra admin center (GCC High), Conditional Access, Policies, New policy, Assignments: whether the picker reads Users, agents or workload identities and offers Agents with All agent identities; under Conditions, an Agent risk entry	Conditional Access for agent identities requires Agent 365 or Microsoft 365 E7; Agent 365 has no GCC High column	Entra agent identities and Conditional Access for agents exist in GCC High.
6	Agent Builder Configure tab: an upload option for embedded files	Unsupported in GCC; silent on GCC High	The embedded-file rules apply: the highest label gates installation through the EXTRACT right; add them to the reading-gate test.
7	An agent grounded on a Restricted Content Discovery site: whether that site's files appear in responses	Silent	If they appear, Restricted Content Discovery does not protect agent knowledge.
8	Defender portal (GCC High), Threat Explorer: the detection technology filter, for Prompt injection protection; and the alerts queue after an injection test, for jailbreak classifier alerts	Defender for Office 365 Plan 2 detection at mail flow, and classifier alerts in the Defender portal; neither page names GCC High	Confirms the upstream and detection layers. Absence leaves the injection requirement resting on architecture and the egress gate alone.
9	An Agent Builder agent's Configure tab: the Create documents, charts, and code setting, and whether it can be turned off. Then ask the agent to chart a short list of numbers	Code interpreter is always enabled in Agent Builder; in GCC High it needs a Microsoft 365 Copilot license	If the agent runs code, the sandbox limits apply. If the builder can turn the setting off, add that to the builder guidance.
10	Power Platform admin center (GCC High), Manage, Environments, an environment, Settings, Product, Features: the Copilot Studio agents section, for Control maker credential options	The control exists; no cloud is named	Confirms the maker-credential guardrail. Absence leaves makers able to run tools on their own credentials.
11	Microsoft 365 admin center, Agents, All agents: an Add agent action that uploads an agent package	An administrator publishes a coded agent by uploading its package; Microsoft's pages disagree on Agents Toolkit support for GCC High	Confirms the route to users for pro-code agents.
12	Purview (GCC High), Audit: Copilot Studio activities in the Activities list	Audit logging for Copilot Studio lists a tenant that is not a FedRAMP tenant as a prerequisite	If the activities are listed, changes to Copilot Studio agents are audited in GCC High.