Merge branch 'main' into patch-90

Author: kwekuako

.openpublishing.redirection.security.json

@@ -9359,6 +9359,31 @@
           "source_path": "Microsoft-365/security/microsoft-365-zero-trust.md",
           "redirect_url": "/security/zero-trust/microsoft-365-zero-trust",
           "redirect_document_id": false
+        },
+        {
+          "source_path": "Microsoft-365/security/security-posture-solution-overview.md",
+          "redirect_url": "/defender-xdr/microsoft-365-defender",
+          "redirect_document_id": false
+        },
+        {
+          "source_path": "Microsoft-365/security/strengthen-security-posture-configure-capabilities.md",
+          "redirect_url": "/defender-xdr/microsoft-365-defender",
+          "redirect_document_id": false
+        },
+        {
+          "source_path": "Microsoft-365/security/strengthen-security-posture-assess-protect.md",
+          "redirect_url": "/defender-xdr/microsoft-365-defender",
+          "redirect_document_id": false
+        },
+        {
+          "source_path": "Microsoft-365/security/strengthen-security-posture-investigate-improve.md",
+          "redirect_url": "/defender-xdr/microsoft-365-defender",
+          "redirect_document_id": false
+        },
+        {
+          "source_path": "Microsoft-365/security/strengthen-security-posture-track-maintain.md",
+          "redirect_url": "/defender-xdr/microsoft-365-defender",
+          "redirect_document_id": false
         }
    ]
  }

copilot/TOC.yml

@@ -461,6 +461,8 @@ items:
           href: cowork/get-started.md
         - name: Use Cowork
           href: cowork/use-cowork.md
+        - name: Best practices
+          href: cowork/best-practices.md
         - name: Common questions
           href: cowork/cowork-faq.md
         - name: Manage Cowork

copilot/connect-to-ai-subprocessor.md

@@ -49,6 +49,9 @@ In some regions, Anthropic’s models aren't available by default. For these reg
 
 In addition, Anthropic models aren't available in government clouds (GCC, GCC High, DoD) as there's no FedRAMP certification in place yet. They're also not available in other sovereign clouds. No toggle will be present for government or sovereign clouds.
 
+> [!NOTE]
+> On April 3, 2026, Microsoft introduced a new Microsoft 365 admin center setting **Copilot in M365 apps with Anthropic models** in EU/EFTA and UK to enable Anthropic as the default model for Copilot in Microsoft 365 apps. For more information, see [Copilot in Microsoft 365 apps with Anthropic models](copilot-anthropic-apps.md).
+
 ## Opt-in to use Anthropic's models
 
 If your organization is in a region that has Anthropic as a subprocessor set to **Off** by default, you can choose to opt in so Anthropic's models are available for your organization. You must be a member of the global administrator role to perform this task. For more information, see [About admin roles](https://learn.microsoft.com) and [Global administrator](/entra/identity/role-based-access-control/permissions-reference).

copilot/copilot-agent-store.md

@@ -4,7 +4,7 @@ f1.keywords:
 ms.author: erikre
 author: ErikRe
 manager: dansimp
-ms.date: 03/26/2026
+ms.date: 04/17/2026
 ms.update-cycle: 180-days
 audience: Admin
 ms.topic: concept-article
@@ -20,11 +20,12 @@ Agent Store is the central hub in Microsoft 365 Copilot where you can easily dis
 
 :::image type="content" source="media/copilot-agent-store/copilot-agent-store-01.png" alt-text="Screenshot the Agent Store in Microsoft 365 Copilot." lightbox="media/copilot-agent-store/copilot-agent-store-01.png":::
 
-There are three ways to include agents in your Agent Store environment:
+There are four ways to include agents in your Agent Store environment:
 
 1. Deploy prebuilt agents to Agent Store
 2. Create agents with Copilot Studio publish to Agent Store
 3. Bring agents from external platforms to Agent Store
+4. Integrate agent with the Agent 365 SDK
 
 ## Prerequisites
 
@@ -44,6 +45,7 @@ The following table summarizes the three common agent deployment methods.
 | [Deploy prebuilt agents](#deploy-prebuilt-agents) | Deploy agents from Microsoft and trusted partners. | Admin |
 | [Create and publish with Copilot Studio](#create-and-publish-copilot-studio-agents-built-by-your-organization) | Create custom agents using a natural language  authoring tool. | Maker/Admin |
 | [Bring agents from external platforms](#bring-agents-from-external-platforms) | Connect agents built on external platforms or custom code. | Developer/Admin |
+| [Integrate agent with the Agent 365 SDK](#integrate-your-agent-with-the-agent-365-sdk) | Integrate your agent with the Agent 365 SDK. | Developer/Admin |
 
 > [!NOTE]
 > Agents built using  Agent Store.
@@ -133,6 +135,14 @@ Use this method to bring agents built outside of Copilot Studio into Microsoft 3
 
 After approval, the agent is available to users in Agent Store within Microsoft 365 Copilot.
 
+## Integrate your agent with the Agent 365 SDK
+
+For organizations that have already built agents on other SDKs or platforms, including Copilot Studio, Azure AI Foundry, OpenAI Agents SDK, or custom code, the Microsoft Agent 365 SDK can add enterprise capabilities without a full rebuild.
+
+The Agent 365 SDK equips agents with Entra-backed identity, governed access to Microsoft 365 data through managed MCP servers, full observability, and the ability to receive and respond to notifications across Teams, Outlook, and Word, just like a human participant. Agents operate within an IT-approved blueprint system, meaning each agent instance inherits the compliance, governance, and security policies defined by the organization.
+
+Once completed, these Agent 365-enabled agents appear in the "Agents for your team" collection in the Agent Store. This pathway is ideal for organizations that want to bring agents into Copilot and Agent Store while ensuring they meet the same enterprise standards as any other agent in the catalog. 
+
 ## Related content
 
 - [Learn about Copilot Studio](/microsoft-copilot-studio/)

copilot/copilot-anthropic-apps.md

@@ -57,4 +57,4 @@ When Anthropic models are used in Copilot experiences in Word, Excel, or PowerPo
 3. Confirm the correct setting for your organization.
 
 > [!NOTE]
-> Support for Anthropic models in Microsoft 365 apps varies based on how the AI providers operating as Microsoft subprocessors setting is scoped in your organization. When the setting is enabled for **All users**, Anthropic model use in supported apps is unavailable and can't be changed. When the setting is scoped to **No users**, Enterprise, public sector, and EDU tenants have Anthropic model use in apps turned off by default but can enable it, while non‑Enterprise tenants have Anthropic model use turned on by default but can disable it. This allows admins to control whether Anthropic model processing can be flexibly routed within the EU. This setting applies only to Copilot experiences within supported apps and doesn't affect Anthropic model usage in other Microsoft 365 Copilot features or services. For more information, see [Flex routing (EU and EFTA)](/copilot/microsoft-365/copilot-flex-routing).
+> Support for Anthropic models in Microsoft 365 apps varies based on how the AI providers operating as Microsoft subprocessors setting is scoped in your organization. When the setting is enabled for **All users**, Anthropic model use in supported apps is unavailable and can't be changed. This setting applies only to Copilot experiences within supported apps and doesn't affect Anthropic model usage in other Microsoft 365 Copilot features or services.

copilot/copilot-flex-routing.md

@@ -34,9 +34,9 @@ Tenant administrators can change the flex routing setting at any time in the Mic
 
 ## Eligibility
 
-Flex routing is available for customers with a sign-up location in a country or region in the EU or EFTA. For more information, see [EU Data Boundary countries and datacenter locations](https://learn.microsoft.com/privacy/eudb/eu-data-boundary-learn#eu-data-boundary-countries-and-datacenter-locations).
+Flex routing is available for customers with a sign-up location in a country or region in the EU or EFTA. For more information, see [EU Data Boundary countries and datacenter locations](/privacy/eudb/eu-data-boundary-learn).
 
-Note that this setting will not be available for customers who have purchased multi-geo capabilities even if their tenant is listed as being in a country or region in the EU or EFTA. Customers can check their tenant’s country or region in the [Microsoft 365 admin center](https://learn.microsoft.com/microsoft-365/admin/manage/change-address-contact-and-more).
+Note that this setting will not be available for customers who have purchased multi-geo capabilities even if their tenant is listed as being in a country or region in the EU or EFTA. Customers can check their tenant’s country or region in the [Microsoft 365 admin center](/microsoft-365/admin/manage/change-address-contact-and-more).
 
 ## Set up flex routing
 
@@ -47,7 +47,7 @@ All tenant administrators are encouraged to check their tenant's flex routing se
 **Enable flex routing**
 
 1. Sign in to the Microsoft 365 admin center as an administrator assigned the [AI Administrator role](/entra/identity/role-based-access-control/permissions-reference).
-2. Go to **Copilot** -> **Settings** -> **Flexible inferencing during peak load periods**.
+2. Go to **Copilot** -> **Settings** -> **View all** -> **Flex routing during peak load periods**.
 3. Select **Allow flex routing during periods of peak load**.
     1. This setting allows LLM inferencing and the storage of associated pseudonymized data to occur outside the EU data boundary during periods of peak demand. Typically, these periods are limited in duration and do not run continuously.
 4. If you don’t want to allow flex routing, select **Do not allow flex routing**.
@@ -58,7 +58,7 @@ All tenant administrators are encouraged to check their tenant's flex routing se
 ### Why can't I see the flex routing setting in the Microsoft 365 admin center?
 
 The flex routing setting is only visible in the Microsoft 365 admin center for customers with a sign-up location in a country or region in the EU or EFTA.
-For more information, see [EU Data Boundary countries and datacenter locations](https://learn.microsoft.com/privacy/eudb/eu-data-boundary-learn#eu-data-boundary-countries-and-datacenter-locations). This setting is also not available for customers who have purchased multi-geo capabilities even if their tenant is listed as being in a country or region in the EU or EFTA. Customers can check their tenant’s country or region in the [Microsoft 365 admin center](https://learn.microsoft.com/microsoft-365/admin/manage/change-address-contact-and-more).
+For more information, see [EU Data Boundary countries and datacenter locations](/privacy/eudb/eu-data-boundary-learn). This setting is also not available for customers who have purchased multi-geo capabilities even if their tenant is listed as being in a country or region in the EU or EFTA. Customers can check their tenant’s country or region in the [Microsoft 365 admin center](/microsoft-365/admin/manage/change-address-contact-and-more).
 
 ### How does flex routing affect Microsoft’s EU data boundary commitments?
 

copilot/cowork/best-practices.md

@@ -0,0 +1,39 @@
+---
+title: Best practices for Cowork (Frontier)
+description: Learn best practices to work efficiently with Microsoft 365 Copilot Cowork.
+ms.date: 04/07/2026
+ms.topic: how-to
+author: leeclontz
+manager: KumarVivek
+ms.author: leeclontz
+ms.reviewer: angieandrews
+ms.service: microsoft-365-copilot
+ms.subservice: cowork
+ai-usage: ai-assisted
+ms.collection: bap-ai-copilot
+appliesto:
+- Microsoft 365 Copilot
+---
+
+# Best practices for Cowork (Frontier)
+
+[!INCLUDE [cowork-top-note](../includes/cowork-top-note.md)]
+[!INCLUDE [cowork-preview](../includes/cowork-preview.md)]
+
+To work efficiently with Microsoft 365 Copilot Cowork, give clear instructions. Use these best practices to help tasks complete smoothly, avoid duplicate actions, and improve the accuracy of results.
+
+## Work efficiently
+
+- **Be specific**: A request like "Email Sarah about the Q2 review tomorrow at 2pm" works better than "Send that email."
+- **Plan for task complexity**: Allow extra time for complex tasks like building a deck, research across multiple sources like email and Teams, or scheduling large meetings.
+- **Monitor progress during longer tasks**: Use the real-time progress indicators to track activity. If steps are updating, Cowork is actively processing your request. Retry only if progress stops for 60 or more seconds.
+- **Review before approving actions**: Before you send emails, post to Teams, or create calendar events, review previews for accuracy before you approve.
+- **Set up recurring tasks**: For tasks that you do frequently, just say "do this every morning," and Cowork sets it up automatically.
+
+## When things don't progress as expected
+
+|If you notice:  |Try this:  |
+|---------|---------|
+|"I couldn't access X" message  | The specific source was unavailable. Cowork tells you what it found versus what it couldn't reach. Try again in a few minutes.        |
+|Card or file doesn't appear initially  | Ask: "Where's my file?" Cowork locates and re-delivers it.     |
+|Totally stuck/No response  | Refresh the session and re-submit.     |

copilot/employee-self-service/TOC.yml

@@ -82,6 +82,12 @@ items:
           href: servicenow-hrsd-itsm.md
         - name: ServiceNow Live agent
           href: servicenow-live-agent.md
+
+- name: Extend Employee Self-Service agent
+  items:
+    - name: Invite a guest
+      href: facilities-lobby-invite-guest.md
+
 - name: Usage analytics
   href: usage-analytics.md
 - name: Review user feedback