Integrations
Microsoft 365 AI agent integration for SharePoint, Outlook and Teams
A Microsoft 365 AI agent integration connects an agent to the documents in SharePoint, the customer mail in Outlook and the conversations in Teams through the Microsoft Graph API. Below we cover what that agent does for service and inside sales, how it differs from Microsoft 365 Copilot, how SharePoint permissions are respected and what it costs.
Short answer
Yes. Microsoft 365 connects to an AI agent through Microsoft Graph, the official API for SharePoint, Outlook and Teams. The agent works with the permissions of the signed-in user, so nobody sees more than they can see in SharePoint today. Microsoft 365 Copilot helps one user inside Microsoft 365; a BeeManaged agent combines those sources with your ERP, CRM and customer channels, with approval for every change.
What is a Microsoft 365 AI agent integration?
It is a connection through Microsoft Graph, the single API for Microsoft 365, that lets an AI agent search documents in SharePoint, read requests in shared Outlook mailboxes and, where you allow it, prepare actions such as a task or ticket. The agent answers employees in plain language, with the source document attached.
Microsoft Graph exposes one endpoint for Outlook and Exchange, SharePoint, OneDrive, Teams, Planner and the users in Microsoft Entra ID. An agent that speaks Graph therefore reaches the whole Microsoft 365 tenant, but only within the rights it has been given.
In a manufacturing company that mostly means three sources: the product documentation and manuals in SharePoint, the service and sales mail in Outlook, and the project discussions in Teams. The agent combines those with order data from your ERP and customer data from your CRM.
Sources
- Microsoft Learn: Microsoft Graph overview (learn.microsoft.com)
What does Microsoft 365 Copilot do, and what doesn't it?
Microsoft 365 Copilot is a licence per user that brings AI into Word, Outlook, Teams and Copilot Chat. It only shows data that user already has at least view permission on, and prompts are not used to train the models. It does not talk to your customers, does not read your ERP and does not run a process across systems.
Copilot is a strong choice for individual productivity: summarising a thread, drafting a reply, finding a document. The questions it does not answer are the ones that cross a system boundary: what did this customer order, what is the stock, what did we promise in the last service ticket. That is where a BeeManaged agent starts.
- Price: €26.00 per user per month on an annual subscription, excluding VAT (Microsoft Netherlands, October 2026; $30.00 in the US). A qualifying Microsoft 365 plan is required on top, such as Business Standard, Business Premium, E3 or E5.
- Copilot Business is the variant for organisations up to 300 users, also on an annual commitment.
- Permissions: Copilot surfaces only content the individual user can access in SharePoint, Outlook and Teams. Prompts, responses and data from Microsoft Graph are not used to train the foundation models.
- EU: for EU customers Copilot is an EU Data Boundary service; EU traffic stays within the boundary.
- A Microsoft 365 Copilot licence also covers agents built in Copilot Studio when employees use them inside Microsoft 365, Teams or SharePoint.
Sources
- Microsoft Learn: data, privacy and security for Microsoft 365 Copilot (learn.microsoft.com)
- Microsoft Learn: licence options for Microsoft Copilot (learn.microsoft.com)
- Microsoft: Copilot plans and pricing (enterprise) (microsoft.com)
- Microsoft Nederland: Copilot-abonnementen en prijzen (microsoft.com)
Is there an official SharePoint MCP server or Microsoft 365 MCP server?
Yes, in two forms. Work IQ MCP is Microsoft's generally available MCP server for Microsoft 365, with generic tools to read, create and update items in mail, calendar, Teams, SharePoint and OneDrive. The older workload-specific servers for SharePoint, Mail, Teams and OneDrive are in preview and, according to Microsoft, not meant for production or new projects (October 2026).
- Work IQ MCP: one endpoint, authentication through Microsoft Entra ID, tools such as fetch, create_entity, update_entity and do_action on resource paths like /me/messages. Part of the Work IQ API.
- Work IQ in Copilot Studio is a preview and read-only unless an administrator turns on write operations in the Microsoft 365 admin center.
- Administrators govern which MCP servers and tools are allowed under Agents and Tools in the Microsoft 365 admin center.
- An MCP server arranges the connection, not the process: who may ask what, which actions need approval and who monitors the result remain your decisions.
Sources
- Microsoft Learn: Work IQ MCP overview (learn.microsoft.com)
- Microsoft Learn: MCP server options in Agent 365 (learn.microsoft.com)
- Microsoft Learn: Work IQ (preview) in Copilot Studio (learn.microsoft.com)
Microsoft 365 Copilot, a self-service connector or a managed agent: which fits?
Use Microsoft 365 Copilot for personal productivity inside Microsoft 365. Use a self-service MCP connector when individual users want to query SharePoint or Outlook from their own AI assistant. Choose a managed agent when a team or your customers need Microsoft 365 content combined with ERP, CRM and service data, with approval and management.
| The vendor's own AI | Self-service MCP connector | Managed agent from BeeManaged | |
|---|---|---|---|
| Who it is for | One user in Word, Outlook, Teams and Copilot Chat | Individual users with their own AI assistant | Service, inside sales and customers |
| Systems | Microsoft 365 only | Microsoft 365, via Work IQ MCP | Microsoft 365 plus ERP, CRM, service desk, website and WhatsApp |
| Permissions | The user's own permissions | The user's own permissions | The user's permissions for employees; a limited app identity for customer processes |
| Write actions | Drafts the user sends | Read-only unless an admin enables writes | Through an approval queue |
| Management | Microsoft | You | BeeManaged, with monitoring and audit log |
| Cost | €26.00 per user per month plus a Microsoft 365 plan | Included in licences or per credit | From €0.35 per conversation; internal agents priced in consultation |
What does a SharePoint AI agent do for service and inside sales?
Mostly it finds and reads what people now search for by hand: the right manual, the latest version of a drawing, the email in which a customer reported a fault. It answers with the source, turns requests into tasks after approval and gives management answers in the dashboard. Four examples below.
| Process | Question | What the agent reads or does | What comes back |
|---|---|---|---|
| Product documentation for service | Engineer: how do I reset this controller after an error code? | Searches the manuals and service bulletins in SharePoint the engineer may see | The steps, with a link to the document and page |
| Email to task or ticket | Shared mailbox: a customer asks for a repair visit | Reads the mail, finds the customer and installation, prepares a ticket or Planner task | Created after approval, with a reply draft |
| Answers for inside sales | Inside sales: which coating do we advise for outdoor use? | Reads product sheets in SharePoint and the ERP item data | An answer with the SharePoint source and current item |
| Management questions | Director: which fault types came in by email this month? | Combines classified mail from the shared mailbox with ticket data | A table in the dashboard, with the underlying mails |
How do we handle SharePoint permissions?
By letting the agent work on behalf of the user. Microsoft Graph has delegated permissions, where the app acts for a signed-in user and can never see more than that user, and application permissions, where the app has its own identity and sees everything the permission covers. For employee-facing agents we use delegated permissions, so SharePoint rights apply automatically.
- Delegated: the effective rights are the intersection of what the app was granted and what the user may see. An engineer only finds manuals in libraries they can already open.
- Application permissions are needed for processes without a signed-in user, such as a customer agent reading a shared mailbox. Only a Global Administrator or Privileged Role Administrator can consent to them.
- For those cases we use Selected permissions such as Sites.Selected: the administrator grants the app access to specific SharePoint sites or libraries only, with a read or write role, instead of to the whole tenant.
- Least privilege is Microsoft's own recommendation: delegated where possible, application permissions only for the sites a process needs.
Sources
- Microsoft Learn: overview of Microsoft Graph permissions (learn.microsoft.com)
- Microsoft Learn: Selected permissions in OneDrive and SharePoint (learn.microsoft.com)
Which data leaves Microsoft 365?
Only the fragments the agent needs for one answer: the passages from a document, the fields from an email, the item from your ERP. They are processed in the EU, under business terms, and not used to train models. Nothing is copied into a separate search index unless you ask for it, and every question and action is logged.
- The agent fetches content live through Microsoft Graph at the moment of the question, within the user's or app's permissions.
- Answers include the source, so an employee can open the document in SharePoint and check it.
- Write actions, such as a ticket, a task or a reply, wait in the approval queue of app.beemanaged.com until a colleague approves them.
- A standard data processing agreement covers the agent; your Microsoft 365 administrator can revoke the app registration at any time.
Can the agent work in Microsoft Teams?
Employees use the internal agent in the dashboard of app.beemanaged.com today. We do not offer Microsoft Teams as a channel at the moment. The agent can read Teams channels and chats through Microsoft Graph as a source, with the same permission rules, if a process needs it.
If your team lives in Teams and wants to build its own agents there, Copilot Studio is the Microsoft route; our guide on Copilot Studio versus a managed agent compares the two.
How does the Microsoft Graph API connection work technically?
The agent is registered as an application in your Microsoft Entra ID tenant. Your administrator consents to the Microsoft Graph permissions it needs, employees sign in with their own Microsoft account for delegated access, and the agent calls the single Graph endpoint for SharePoint, Outlook and Teams. Rights are read-only by default; writes go through the approval queue.
- Registration: an app registration in Entra ID with the permissions listed per process; consent by your administrator, revocable at any time.
- Delegated permissions for employees, so SharePoint rights apply; Selected permissions on specific sites for processes without a signed-in user (as of October 2026).
- Microsoft Graph follows the naming pattern resource.operation.constraint, such as Sites.Read.All or Mail.Read; we request the least privileged permission per task.
- EU hosting for agents and data, models under business terms, no training on your data, standard data processing agreement.
Sources
- Microsoft Learn: Microsoft Graph permissions overview (learn.microsoft.com)
- Microsoft Learn: Microsoft Graph overview (learn.microsoft.com)
How we set it up, in four steps
01
Choose one process
For example product documentation for the service desk, with the SharePoint libraries that count as the source.
02
Connect read-only
Your administrator consents to the app registration; we test with real questions from your engineers.
03
Go live with approval
Tasks, tickets and replies wait in the approval queue until a colleague approves.
04
Monitor and improve
Conversation review, audit log and a monthly report, then the next process, such as the shared service mailbox.
Pricing for a Microsoft 365 agent
Internal agents on SharePoint, Outlook and Teams are custom work, priced in consultation after an intake. Customer-facing agents cost from €0.35 per conversation. Setup is quoted up front (development €175 per hour), monitoring and the dashboard cost €250 per month, and a consultation package is €1,750. Your Microsoft 365 licences stay as they are; no Microsoft 365 Copilot licence is needed for the agent.
When don't you need BeeManaged for Microsoft 365?
If your team only wants help with its own documents and mail, Microsoft 365 Copilot is the shorter route. If one person wants to query SharePoint from their own AI assistant, Work IQ MCP covers it. BeeManaged makes sense when service, inside sales or customers need Microsoft 365 content combined with ERP, CRM and ticket data, with approval and management.
Updated · As of October 2026 · Author Roy Rutten, AI architecture and development
Frequently asked questions
What is the difference with Microsoft 365 Copilot?
Copilot helps one licensed user inside Microsoft 365 and only sees what that user sees. A BeeManaged agent combines SharePoint, Outlook and Teams with your ERP, CRM and service desk, serves teams and customers, and runs with an approval queue, audit log and monitoring.
Can the agent work in Teams?
Not as a channel at the moment: employees use the agent in app.beemanaged.com. Teams content can be a source through Microsoft Graph, within the same permission rules.
How do you handle SharePoint permissions?
Employees use the agent with delegated permissions, so it can never see more than they can. For processes without a signed-in user we use Selected permissions, which give the app access to specific sites only.
Which data leaves Microsoft 365?
Only the fragments needed for one answer, fetched live through Microsoft Graph, processed in the EU and not used for training. Everything is logged, and write actions wait for approval.
What does it cost?
Internal agents are custom work, priced in consultation. Customer-facing agents cost from €0.35 per conversation, setup is quoted up front and monitoring with the dashboard costs €250 per month. Microsoft 365 Copilot is a separate Microsoft licence at €26.00 per user per month (October 2026) and is not required for the agent.
Does this work with on-premises SharePoint Server?
Microsoft Graph covers SharePoint Online. For SharePoint Server on your own servers we check the available API and the secure connection with your IT partner, as with other on-premise software.
Want to know what an agent can do with your SharePoint and Outlook?
Plan a conversation. We look at one process with you and tell you whether Microsoft 365 Copilot, a self-service connector or a managed agent fits best.