Microsoft 365 AI agent that assigns licenses

and hands over a leaver's mailbox from chat.

For admin work, yes. Microsoft folded the Office 365 brand into Microsoft 365, and the admin console is the Microsoft 365 admin center. Many teams still say Office 365, so an Office 365 AI agent and a Microsoft 365 AI agent point at the same tenant. If you are looking at Workativ's earlier Office 365 chatbot page, it covers the same service with a mailbox and distribution-list focus.

Microsoft 365 license assignment and removal, Copilot seat requests and reclaiming, shared mailbox permissions, distribution list and group membership, OneDrive access for managers, and a leaver checklist run in the right order. Sign-in problems such as resets and lockouts belong to the Entra ID side, and Workativ covers those on its Entra page.

A user asks for a license in Teams or Slack, the agent checks the plan and the pool, and the approver confirms in the thread. Workativ then assigns the license in Microsoft 365. Microsoft says assigning licenses takes at least a Groups Administrator, License Administrator or User Administrator role, and the agent runs under one of them. Rule-based licensing can stay with group-based licensing, and the agent handles the exceptions.

A Microsoft 365 Copilot license request records the use case and goes to an approver before a seat is assigned. Each month the agent can compare seat holders against Copilot activity from the usage report and audit log, then ask each manager whether to keep or release a flagged seat. Microsoft's usage report is thin on how heavily Copilot is used, so the activity window and the rule for flagging a seat are yours to set.

Microsoft's offboarding order is to block sign-in, save or hand over the mailbox, convert it to a shared mailbox or forward it, give someone access to OneDrive, then remove the license and delete the account. After a license is removed, mail, contacts and calendar are kept for 30 days and then deleted permanently. The agent runs Microsoft 365 offboarding in that order. Accounts synced from on-premises Active Directory have to be deleted in the local directory instead.

Shared mailboxes usually don't need one. Microsoft says an Exchange Online Plan 2 license is required when the mailbox holds more than 50 GB, uses in-place archiving, or is on litigation hold. New shared mailboxes also have sign-in blocked by default. A converted leaver mailbox is therefore often free to keep, which returns the seat to your pool.

Copilot helps people work with their own Microsoft 365 content, and its agents are built per task. The Workativ agent is an IT helpdesk agent: it performs license, mailbox and OneDrive changes with an approval trail, and it reaches systems outside Microsoft such as Jira or ServiceNow. Many tenants run both.

They split the work. The Entra ID agent handles sign-in: password resets, lockouts, Temporary Access Passes and group access. The Microsoft 365 agent handles what the account is entitled to once it exists: licenses, mailboxes, OneDrive and Copilot seats. You can start with either and add the other later.

Expect three to five days from start to live. The effort goes into registering the app with the Graph and Exchange Online permissions you approve, writing down license pools and approvers, and loading the handbook. License requests and the leaver checklist go live first, and Copilot seat control comes once usage data is flowing.

One role per kind of action. Licensing runs under License Administrator or User Administrator, mailbox actions need an Exchange admin role, and OneDrive access needs the role that governs SharePoint and OneDrive. Turn actions on one at a time, and give a role more reach only when the next action needs it. Directory-wide admin tasks are never run from chat.

Both platforms get the same actions and approval rules, so a manager in either can sign off. Workativ keeps its own record of each request, who approved it, what changed and when, and the Microsoft Purview audit log holds the matching Microsoft 365 entry. The Workativ record can also be sent to your SIEM.