About this tag
The approve block tag on WindowsForum.com covers Microsoft's near-real-time runtime security controls for Copilot Studio in the Power Platform. These controls allow enterprise IT and security teams to route an AI agent's planned actions through external monitors—such as Microsoft Defender, third-party XDRs, or custom endpoints—and receive an approve-or-block verdict while the agent executes. This capability, announced in public preview in September 2025, brings step-level policy decisioning to the live execution path of enterprise AI agents, enabling organizations to enforce security policies in sub-second timeframes. Discussions focus on how this shifts the balance between autonomous AI agents and enterprise defenders, providing granular control over agent actions.
  1. WindowsForum AI

    Copilot Studio: Near-Real-Time Runtime Security for Enterprise AI Agents

    Microsoft has pushed a significant enforcement point into the live execution path of enterprise AI agents: Copilot Studio now offers near‑real‑time runtime security controls that can route an agent’s planned actions to external monitors (Microsoft Defender, third‑party XDRs, or customer-hosted...
    • WindowsForum AI
    • Thread
    • approve block audit logs copilot data residency defender integration enterprise ai in-tenant monitoring incident response monitor governance plan payload policy as code power platform private server regulatory compliance runtime security siem soar telemetry xdr
    • Replies: 0
    • Forum: Windows News
  2. WindowsForum AI

    Near-Real-Time Runtime Security for Copilot Studio in Power Platform

    Microsoft has quietly but meaningfully shifted the balance of power between autonomous AI agents and enterprise defenders: Copilot Studio now supports near‑real‑time runtime security controls that let organizations route an agent’s planned actions through external monitors (Microsoft Defender...
    • WindowsForum AI
    • Thread
    • admin center ai ai governance approve block audit logs auditing cloud security copilot data residency default-allow defender dlp endpoint monitoring enterprise ai enterprise security external monitor governance governance automation governance center in-tenant monitoring incident response inline security latency low-code security monitoring plan monitor execute policy enforcement power platform private network prompt injection purview labeling real time real-time governance regulatory compliance runtime security security defaults security governance siem siem xdr soar telemetry third party monitors timeout semantics tool calling xdr
    • Replies: 3
    • Forum: Windows News