Latest / Microsoft 365 Roadmap Rundown / Phishing and malicious QR-code detection and DLP for Microsoft Cowork starts rolling out
Transcript
- 00;00;00;05 - 00;00;07;25 Sam Attackers adapt, you know. Traditional URL filters have gotten incredibly good at blocking malicious text links. So what did the attackers do? 00;00;07;27 - 00;00;09;08 Alex They shifted to QR codes. 00;00;09;09 - 00;00;20;22 Sam Exactly. They started embedding those malicious URLs inside QR codes in chat messages. Your standard security filter just sees an image file, basically just a bunch of pixels and lets it right through. 00;00;20;25 - 00;00;27;12 Alex So this new update actively analyzes the destination embedded inside that QR code image before you can even scan it. 00;00;27;14 - 00;00;32;03 Sam Spot on. 00;00;32;05 - 00;00;34;06 Speaker 3 Welcome to the Roadmap Rundown. 00;00;34;07 - 00;00;41;02 Speaker 4 The podcast that keeps you up to speed on what's new, what's changing, and what's coming next across Microsoft 365. 00;00;41;04 - 00;00;45;24 Speaker 3 Let's get into it. 00;00;45;26 - 00;00;48;26 Alex Imagine a new employee starts your company tomorrow morning. 00;00;49;01 - 00;00;49;18 Sam Okay. 00;00;49;21 - 00;00;57;14 Alex They get a security badge, a corporate email address, and immediate access to your highly sensitive financial records. 00;00;57;16 - 00;01;00;04 Sam That sounds like a disaster waiting to happen, right? 00;01;00;05 - 00;01;03;10 Alex But the catch is, they aren't human. 00;01;03;12 - 00;01;04;15 Sam I see where you're going with this. 00;01;04;17 - 00;01;14;13 Alex Yeah. Today we are looking at a reality where AI agents are officially getting their own enterprise identities and what that actually means for your infrastructure. 00;01;14;18 - 00;01;17;05 Sam It's a completely new world for it. 00;01;17;07 - 00;01;35;29 Alex Welcome to this week's roadmap Rundown. If you're joining us, our mission for this session is simple. We sift through a massive stack of Microsoft 365 roadmap, updates the actual source material to decode exactly what changed. Why it matters, and the critical takeaways for your organization. 00;01;36;02 - 00;01;47;11 Sam And you know, this week's material is fundamentally about that shift you just mentioned. We are looking at major security expansions, foundational AI frameworks, and some critical administration updates. 00;01;47;14 - 00;01;49;04 Alex It's basically setting up the guardrails. 00;01;49;05 - 00;01;55;08 Sam Exactly. Setting the rules of the road before this new digital workforce takes over the heavy lifting in our daily operations. 00;01;55;08 - 00;02;02;26 Alex Which brings us right into our first section, top stories. We are focusing on the biggest, most immediate foundational shifts in Microsoft 365, right. 00;02;02;27 - 00;02;06;22 Sam Heavily centering on security and this new reality of AI agents. 00;02;06;27 - 00;02;15;14 Alex Let's start with Microsoft Teams. So coming in November 2026, teams is rolling out near real time malicious QR code detection. 00;02;15;18 - 00;02;21;09 Sam Alongside AI powered phishing detection, specifically targeting external first contact chats. 00;02;21;12 - 00;02;39;19 Alex Okay, let's unpack this. It's kind of like having a digital bouncer that doesn't just check a visitor's ID at the front door, right, but actually follows them inside to see exactly where they are trying to take you. But if it's scanning our chats in real time, does this mean Microsoft is reading our private conversations? 00;02;39;20 - 00;02;54;11 Sam Well, it's the immediate question everyone has. And to understand it, we really have to look at the why and the how behind the update. Okay. Attackers adapt. You know, traditional URL filters have gotten incredibly good at blocking malicious text links. So what did the attackers do? 00;02;54;13 - 00;02;55;23 Alex They shifted to QR codes. 00;02;55;25 - 00;03;07;10 Sam Exactly. They started embedding those malicious URLs inside QR codes in chat messages. Your standard security filter just sees an image file, basically just a bunch of pixels and lets it right through. Oh. 00;03;07;12 - 00;03;14;00 Alex So this new update actively analyzes the destination embedded inside that QR code image before you can even scan it. 00;03;14;03 - 00;03;15;11 Sam Spot on. 00;03;15;13 - 00;03;23;02 Alex Because once you hold your phone up to the screen to scan a code from a quote unquote vendor, you've completely bypassed the desktop security. 00;03;23;04 - 00;03;35;25 Sam Yeah, it's a huge blind spot. And as for the AI powered phishing detection, it uses the context of the conversation to spot social engineering like someone impersonating a CEO asking for a sudden wire transfer. 00;03;35;27 - 00;03;38;10 Alex But again, is it reading my data? 00;03;38;13 - 00;03;50;21 Sam Microsoft is explicitly clear here. This capability uses conversation context strictly for security protection. It flags the suspicious activity without compromising or extracting the privacy of the underlying data. 00;03;50;23 - 00;03;55;17 Alex So it's an automated security boundary, not a data mining operation. 00;03;55;19 - 00;03;56;17 Sam Exactly. 00;03;56;19 - 00;04;02;00 Alex You can't protect what you can't understand. But you also don't want the security guard reading your diary. 00;04;02;03 - 00;04;03;06 Sam Exactly. 00;04;03;08 - 00;04;17;26 Alex Speaking of protecting data, let's talk about Microsoft Purview by October 2026. There is a rollout of a single data loss prevention, or DLP, policy that spans both Microsoft 365, Copilot and Microsoft work. 00;04;17;28 - 00;04;25;23 Sam Yeah, and this is a big deal. If you label a knowledge source as sensitive, this policy prevents the AI from using it. 00;04;25;25 - 00;04;30;19 Alex It even blocks prompts containing sensitive info from ever hitting Bing for a web search. Right? 00;04;30;20 - 00;04;51;16 Sam It does. The mechanism here is what's really important, because previously, securing AI interactions felt like playing a whack a mole across a dozen different applications. Totally. By tying copilot and coworker under one purview, DLP umbrella data security admins don't just have a dashboard, they have a master valve. 00;04;51;19 - 00;04;55;28 Alex A master valve. Instead of running to ten different rooms to shut off the water during a leak. 00;04;55;29 - 00;05;09;24 Sam Precisely. Exactly. If a user tries to ask the AI to summarize an internal, highly confidential financial document and inadvertently allows that prompt to query the public web for context, this unified DLP policy just stops it cold. 00;05;09;27 - 00;05;23;00 Alex The prompt never leaves the tenant, right? Which saves us from our own accidental data leaks. Now let's get back to that wild concept from the beginning of the discussion. Enterprise controls for autonomous agents. 00;05;23;03 - 00;05;23;29 Sam Oh, yeah. 00;05;24;02 - 00;05;38;01 Alex The roadmap details dedicated Microsoft entry agent identities, least privileged dataverse roles, and agent flows that can pause and wait for a human to approve them. Giving an algorithm an employee badge is quite a leap. 00;05;38;04 - 00;05;48;25 Sam It is a massive leap, but it's fundamentally about traceability. I mean, we are officially treating AI agents as digital employees. They get their own entry identities, their own security badges. 00;05;49;02 - 00;05;51;08 Alex Which means they show up in the audit logs. 00;05;51;14 - 00;06;07;24 Sam Exactly. Think about it. If an agent goes into Dataverse to update a customer's billing record, the log no longer just vaguely says a system process did it right. It logs that this specific agent with this specific ID made the change governed by its restricted security role. 00;06;08;00 - 00;06;10;29 Alex It. What about that human in the loop? Pause. 00;06;11;01 - 00;06;21;01 Sam That's the ultimate compliance safety net. The agent can do 99% of the heavy lifting, gathering data, drafting the invoice, queuing up the system. But then the workflow pauses. 00;06;21;08 - 00;06;26;01 Alex So a human still has to physically review it and stamp the final approval before it executes. 00;06;26;07 - 00;06;27;10 Sam You got it. 00;06;27;12 - 00;06;30;14 Alex I can see auditors breathing a huge sigh of relief over that. 00;06;30;15 - 00;06;31;26 Sam Oh, absolutely. 00;06;31;28 - 00;06;42;23 Alex To help the human employees out, by January 2027, Copilot search is arriving in SharePoint and OneDrive. We're talking natural language search with AI generated summaries. 00;06;42;29 - 00;06;47;19 Sam Plus actual source references and a seamless handoff directly into copilot. 00;06;47;25 - 00;06;50;14 Alex It transforms search entirely, doesn't it? 00;06;50;20 - 00;07;03;13 Sam It really does. You move away from typing exact file names and just hoping for a match to asking something like synthesize the timeline for project X based on all our shared files, and it does the reading for you. 00;07;03;16 - 00;07;09;14 Alex But, you know, giving agents their own identity badges and giving humans better search is really just laying the groundwork. 00;07;09;18 - 00;07;10;08 Sam True. 00;07;10;11 - 00;07;22;03 Alex To see what these newly badged agents are actually going to do all day. We need to look at the workflows. So let's move to our next section, The Rundown. We have 12 distinct workflow and capability updates here. 00;07;22;06 - 00;07;23;12 Sam That's a lot to get through. 00;07;23;13 - 00;07;40;03 Alex It is. And instead of just reading you a list, we've synthesized them by theme. Let's start with theme A smarter, wider agents. Copilot studio agents are getting the ability to browse the web natively using something called the GitHub Copilot harness. 00;07;40;05 - 00;07;41;18 Sam Which is fascinating. 00;07;41;21 - 00;07;50;13 Alex Plus, they can finally process Microsoft Purview Information Protection or MPP label documents end to end. Let's break those down. 00;07;50;14 - 00;08;07;27 Sam Sure. So starting with the GitHub copilot harness. Essentially this gives the agent a secure, sandboxed web browser. Okay, instead of only knowing what's in your internal database, the agent can actively navigate external web pages, extract current information, and safely download files to assist with a task like. 00;08;07;29 - 00;08;11;17 Alex Checking a suppliers public website for real time inventory levels. 00;08;11;18 - 00;08;21;23 Sam Exactly. And the MIB update unlocks a massive enterprise hurdle before this. If a file was heavily encrypted with internal security labels, the agent just couldn't read it. 00;08;21;24 - 00;08;23;17 Alex It was essentially a blind spot, right? 00;08;23;18 - 00;08;32;00 Sam Rendering the AI useless for sensitive workflows. Now the agent can process that file end to end. Assuming the user prompting the agent actually has the permissions to. 00;08;32;01 - 00;08;46;21 Alex See it makes sense. We are also seeing Dataverse get a semantic SDK and a Python SDK for Asian builders. Now here's where it gets really interesting to me. I look at semantic understanding. Is finally teaching the AI the company's internal slang? 00;08;46;22 - 00;08;48;04 Sam Yeah, that's a good way to look at it. 00;08;48;07 - 00;08;53;19 Alex Because if you just hand an AI a raw spreadsheet with weird column headers, it has no idea what it's looking at, right? 00;08;53;21 - 00;09;15;15 Sam That is exactly the problem it solves. Normally, developers have to spend days manually mapping the schema, explicitly coding rules to tell the AI that a column named like Rev 24 Q3 actually means third quarter revenue for 2024. Right? Semantic understanding extracts that meaning automatically from the way your views and forms are already set up. 00;09;15;21 - 00;09;20;03 Alex So it actually understands the meaning of the data, not just the structure. 00;09;20;07 - 00;09;20;28 Sam Exactly. 00;09;20;29 - 00;09;30;21 Alex And alongside that, the new Python SDK empowers data scientists to build these complex, compliant flows directly into Dataverse using Python. 00;09;30;25 - 00;09;34;00 Sam Which is the language they already prefer for AI work anyway. 00;09;34;02 - 00;09;52;15 Alex Right. Instead of forcing them to learn a proprietary low code language, that brings us to our second theme ERP, CRM, and contact center workflows. I noticed a massive cluster of updates around Copilot Co work rolling out across dynamics 365, Customer service, sales and finance and operations. 00;09;52;18 - 00;09;54;07 Sam Yeah, they are everywhere now. 00;09;54;11 - 00;10;01;00 Alex It really feels like Microsoft is trying to kill traditional application clicking entirely. Is that the ultimate goal here? 00;10;01;02 - 00;10;06;22 Sam That is the perfect way to phrase it. The death of application clicking. They actually call it intent based. 00;10;06;22 - 00;10;09;09 Alex Execution intent based. Okay. 00;10;09;11 - 00;10;17;13 Sam Think about a customer service rep today. They have to click through what five different screens to find a customer. Check their warranty. Read the history. Draft an email. 00;10;17;14 - 00;10;18;04 Alex It's exhausting. 00;10;18;04 - 00;10;32;16 Sam It is with copilot coworker. They just state their intent. Resolve this warranty claim. Copilot orchestrates the data across the ERP system, the emails and the knowledge base, briefing the case and drafting the reply all on one single screen. 00;10;32;16 - 00;10;35;23 Alex Which eliminates all that context switching that just drains productivity. 00;10;35;24 - 00;10;36;19 Sam Exactly. 00;10;36;21 - 00;10;47;15 Alex And we are seeing similar friction reduction on the commerce side. There's cross legal entity fulfillment, meaning retailers can ship from optimal warehouse locations regardless of complex corporate boundaries. 00;10;47;17 - 00;10;49;08 Sam That's a huge logistical win. 00;10;49;08 - 00;11;01;07 Alex And the store commerce customer data platform, that CDP panel has been completely rebuilt in react. It's mobile optimized with a single saved workflow. If you've ever stood in a retail line, you know why this matters. 00;11;01;09 - 00;11;13;14 Sam Oh, absolutely. That single save workflow is a game changer for the physical shop floor. Previously, store associates were clicking through multiple laggy legacy screens just to capture a new customers address and email. 00;11;13;17 - 00;11;16;02 Alex It frustrates the customer and slows down the checkout queue. 00;11;16;05 - 00;11;20;27 Sam Right now it's in line, validated immediately, and saved with one single click. 00;11;20;28 - 00;11;31;13 Alex Keep the associate focused on the human being in front of them, not fighting with the software. Speaking of customers, the dynamics 365 contact center is adding some serious muscle. 00;11;31;16 - 00;11;32;09 Sam Yes they are. 00;11;32;16 - 00;11;45;23 Alex We are seeing large language model based PCI redaction for live calls, meaning it automatically reacts credit card numbers or pins from transcripts and recordings based on conversational context, not just rigid number patterns. 00;11;45;24 - 00;11;47;10 Sam Which is much more accurate. 00;11;47;14 - 00;11;51;29 Alex But the really wild one here is a genetic simulations. 00;11;52;01 - 00;11;58;03 Sam Yeah, if you are an IT director listening right now, a genetic simulation solve the oldest contact center anxiety. 00;11;58;05 - 00;11;58;25 Alex Which is. 00;11;58;27 - 00;12;13;25 Sam Will this AI actually work when angry, unpredictable live customers start calling, right? Instead of just deploying it and hoping for the best. Admins can use natural language to define a stress test scenario. The system then generates synthetic, realistic customer conversations. 00;12;13;28 - 00;12;18;10 Alex Wait, so the AI X is a fake customer to test your AI agent? 00;12;18;12 - 00;12;28;01 Sam Exactly. It runs these synthetic customers end to end through your routing rules to see how your system holds up under pressure, all before you ever expose it to a real human being. 00;12;28;02 - 00;12;29;04 Alex That is incredible. 00;12;29;07 - 00;12;37;15 Sam Plus, they are adding deployment templates specifically for retail and telecom, so organizations don't have to build these autonomous contact centers from absolute scratch. 00;12;37;20 - 00;12;57;20 Alex But optimizing the front desk doesn't matter if the warehouse in the back is a mess. That's why we need to look at theme C data analytics and process mining. Right? Business Central and Customer Insights are getting direct paths to Microsoft Fabric in one lake using Delta formats. Let's translate that for everyone. What is a Delta format and why do we care? 00;12;57;22 - 00;13;08;06 Sam Well, without this, companies have to build and maintain complex, fragile ETL pipelines, extract, transform, load just to move data from their business apps into their analytics engines. 00;13;08;06 - 00;13;09;00 Alex It's a huge pain. 00;13;09;00 - 00;13;21;26 Sam It is. The Delta format is key because it allows for incremental data ingestion instead of a massive terabyte sized database every single night, it only processes the tiny fraction of data that actually changed that day. 00;13;21;29 - 00;13;22;12 Alex Oh, wow. 00;13;22;14 - 00;13;26;07 Sam Yeah, it's incredibly fast and saves huge amounts of compute power. 00;13;26;10 - 00;13;38;06 Alex We also have major updates to Power automate process mining, specifically a feature called Object centric mining. I've looked at this, and it seems like a breakthrough for figuring out where things actually get stuck in a company. 00;13;38;07 - 00;13;45;10 Sam It really is. Traditional process mining forces you to look at a workflow in a straight linear line, you know? Step one, step two, step three. 00;13;45;11 - 00;13;47;04 Alex But reality doesn't work that way. 00;13;47;07 - 00;13;58;24 Sam Exactly. Think about your own organization. A single event like a warehouse. Workers scanning a pallet for shipping simultaneously touches a sales order, an inventory record, and triggers a financial invoice. 00;13;58;24 - 00;13;59;29 Alex Right? It ripples out. 00;14;00;02 - 00;14;11;08 Sam Object centric mining captures that complex reality. It preserves the relationships between all those different objects, end to end. So instead of a flat line, you get a 3D web of how your business actually operates. 00;14;11;09 - 00;14;17;20 Alex Which is the only real way to find the actual bottlenecks. Let's move to our final theme platform Integrations and compliance. 00;14;17;23 - 00;14;19;10 Sam There's a lot here to. 00;14;19;12 - 00;14;31;26 Alex The model context protocol, or MCP, is expanding into Dataverse and Business Central APIs. Think of MCP as a universal adapter for AI. It standardizes how AI models connected different data sources. 00;14;32;01 - 00;14;33;07 Sam Very useful. 00;14;33;10 - 00;14;51;17 Alex Power pages is getting encrypted OpenID connect tokens to strengthen external facing app security. And we have very specific regional compliance updates. Dropping France's E invoicing mandate using factor X and Pep all formats, UK payment practices tracking and Australian small business payment reporting. 00;14;51;19 - 00;15;14;04 Sam It's important to understand why Microsoft is building these hyper specific, localized regulations directly into the platform. Global business means local compliance, right? By supporting standardized digital invoice formats like factor X natively, Microsoft is saving global enterprise IT teams from having to build bespoke custom compliance tracking for every single government mandate that pops up around the world. 00;15;14;10 - 00;15;25;24 Alex Exactly. I also saw Project Operations is getting a new mobile app and pre-populated time entries based on bookings. No more manually typing in hours when the system already knows what project you were staffed on. 00;15;25;26 - 00;15;26;20 Sam Finally. 00;15;26;26 - 00;15;37;11 Alex But you know, tracking all these incredible features is only fun until you realize half of them might change before you get to use them. So let's see what's shifted in our third section, Roadmap Roulette. 00;15;37;13 - 00;15;43;21 Sam This is where we look at the reality of software development. What has been canceled, delayed, launched, or is currently rolling out. 00;15;43;23 - 00;15;47;17 Alex Let's start with the cancellations because there are a few heavy hitters. 00;15;47;19 - 00;15;48;14 Sam Oh, definitely. 00;15;48;18 - 00;16;00;04 Alex Microsoft is officially not moving forward with Copilot PDF reviews on iOS. The team's AI interpreter on physical devices is canceled. Purview. Just in time. Protection for SharePoint is out. 00;16;00;10 - 00;16;02;02 Sam And Azure auto labeling, too. 00;16;02;06 - 00;16;22;21 Alex Yeah, as you're auto labeling, data security, posture, credential scanning, and the sales agent lead enrichment capabilities are all canceled. So let me push back here, okay. Seeing high profile things like AI interpreter and sales agent features get the ax. Does this signal a failure? Is Microsoft pulling back on their AI ambitions? 00;16;22;27 - 00;16;31;16 Sam Well, it's easy to see a list of cancellations and assume retreat. But if we connect this to the bigger picture, it's actually a prioritization reality check. 00;16;31;18 - 00;16;32;27 Alex Okay. How so? 00;16;32;29 - 00;16;51;11 Sam Disappearing from the feed doesn't mean AI is retreating. Look at what we discussed in the top stories. They're building identities for agents. When you see edge case features like iOS, PDF, Copilot get canceled, it means they are consolidating underlying frameworks before layering on edge. Case features are. 00;16;51;13 - 00;16;53;27 Alex Build the concrete foundation before you pick out the curtains. 00;16;53;29 - 00;16;54;25 Sam Exactly. 00;16;54;28 - 00;17;11;01 Alex That makes total sense. We also have some delays. The teams channel meeting facilitator is pushed back along with the meeting shared files feature in purview, the defender XDR integration and the purview SDK embedded in the agent framework are also delayed. 00;17;11;04 - 00;17;19;01 Sam Which tracks perfectly with what we just discussed, taking the extra time to ensure those core security integrations are bulletproof before release. 00;17;19;07 - 00;17;27;14 Alex On the positive side, we have features that have officially launched. Cloud update now allows admins to roll back devices up to two versions prior. 00;17;27;19 - 00;17;29;25 Sam That is crucial for compatibility. 00;17;29;29 - 00;17;38;28 Alex If a new update breaks a legacy piece of software your company relies on, you now have a wider safety net to roll back and keep operating while you fix the issue. 00;17;39;02 - 00;17;50;05 Sam PowerPoint Agent Mode can now reference files saved in SharePoint and OneDrive, and Copilot. Session sharing is live, allowing you to share useful Copilot outputs with coworkers via read only links. 00;17;50;08 - 00;17;55;05 Alex That sharing feature solves a massive shadow IT problem. Really how. 00;17;55;09 - 00;18;06;11 Sam It stops people from just copy pasting AI outputs into unsecured chat channels or emails by using a read only link, it maintains the chain of custody for the data within the organization's controls. 00;18;06;14 - 00;18;17;16 Alex That's smart. Finally, for Roadmap Roulette, we have items currently rolling out. Purview DLP is getting guided diagnostics to help troubleshoot why a policy fired. 00;18;17;18 - 00;18;20;22 Sam Viva is getting self-serve. Copilot Agent Analytics. 00;18;20;29 - 00;18;35;25 Alex Excel is rolling out its interactive Copilot generated canvas, and PowerPoint is getting brand kit compliance. So copilot will finally respect your corporate fonts and colors, which means the marketing department might actually let people use it for external presentations. 00;18;35;27 - 00;18;36;28 Sam That's always a battle. 00;18;37;01 - 00;18;52;15 Alex But tracking when a feature launches is really only half the battle. Figuring out how to govern it safely brings us to our final section admin watch. This is all about the tangible government security and lifecycle controls IT professionals need. Today. 00;18;52;17 - 00;18;55;11 Sam Let's look at teams meeting configurations, right? 00;18;55;13 - 00;19;06;25 Alex IT admins can now set default meeting templates to automatically enforce preferred settings across the organization, though keep in mind this does require a teams premium license for the organizer. 00;19;06;27 - 00;19;13;21 Sam Also, outlook for Mac is finally letting users access teams meeting options before they send the calendar invite out. 00;19;13;23 - 00;19;18;13 Alex Thank goodness no more sending the invite and then frantically opening it back up to change the lobby settings. 00;19;18;13 - 00;19;19;15 Sam I know right? 00;19;19;17 - 00;19;39;09 Alex We are also seeing a change to meeting notes for non channel meetings. Collaborative loop notes are moving to the meeting organizers OneDrive, instead of the one drive of whoever happened to start typing first. Yeah, this makes total sense. It's like moving the master key from the guest who happened to unlock the front door back to the person who actually organized and owns the house. 00;19;39;10 - 00;19;53;05 Sam That's a perfect analogy. It solves a massive orphan data problem. Previously, if the person who typed first left the company, their OneDrive was decommissioned and those critical meeting notes just disappeared with them, now it stays with the organizer. 00;19;53;08 - 00;20;08;17 Alex On the topic of data handling, there is a crucial audit update. Dataverse is removing the before and after column values from purview activity logs. Wait, explain that to me. Why would they remove audit data? Doesn't that hurt an IT admins visibility into what's happening? 00;20;08;19 - 00;20;31;27 Sam It sounds counterintuitive, but it's a deliberate privacy protection. Let's say a user updates a patient's medical record or a highly sensitive financial entry in Dataverse. Okay, the exact values, what it was before and what it is now are highly confidential. By keeping that specific raw data inside the localized Dataverse audit log, but not broadcasting it out to the broader purview. 00;20;31;27 - 00;20;44;12 Sam Activity logging streams, you reduce the risk. You don't want a general compliance administrator who monitors purview to accidentally have access to raw medical or financial data. They have no business seeing, right? 00;20;44;13 - 00;21;02;18 Alex Keeping the detailed data siloed where it belongs. Also, in Business Central, they are introducing read only APIs for the approval and permission systems. You can use these to build external compliance reports in power BI, but you have to be very careful to only assign these new security roles to authorized auditors, not your standard users. 00;21;02;24 - 00;21;13;13 Sam Yes, because read only doesn't mean risk free if the data being read maps out your entire internal security permission structure that is extremely sensitive information in the wrong hands. 00;21;13;19 - 00;21;21;28 Alex Finally, let's look at deployment and encryption. Business central is giving full API control for pertinent extensions or parts. 00;21;22;01 - 00;21;23;16 Sam Which is great for developers. 00;21;23;19 - 00;21;48;14 Alex For anyone unfamiliar, are custom tweaks built just for your specific environment? This API control makes CI CD pipeline integration, which is basically the automated assembly line where developers test and deploy code much easier. Power automate is giving admins configurable desktop flow checker notifications. And importantly, Power Automate is adding native PKG encryption and decryption actions. 00;21;48;18 - 00;22;01;08 Sam The Papi edition is incredibly practical. Really pretty good Privacy or PKG. PGP has been around forever, but it is still the absolute standard for exchanging sensitive data files with external partners, banks and vendors. 00;22;01;09 - 00;22;01;29 Alex Oh, I see. 00;22;02;04 - 00;22;15;07 Sam By making it a native drag and drop action and power automate, it eliminates the need for it to build and maintain brittle custom cryptography solutions, or rely on unverified third party connectors just to securely send a file to a vendor. 00;22;15;12 - 00;22;20;11 Alex It just works out of the box. Which brings us to the end of our stack of sources for today. 00;22;20;13 - 00;22;22;02 Speaker 5 It's been quite a list. 00;22;22;05 - 00;22;46;05 Alex To recap, the overarching theme of this session is clear. We are actively moving away from a world where we click through software menus to achieve a task, to a world where we simply state our intent to digital agents, and simultaneously, admins are finally getting the exact tools they need, like intra identities and unified DLP policies to leash and audit those very same agents. 00;22;46;08 - 00;23;14;06 Sam And this raises an important question for you to explore on your own. We saw today that AI agents are getting their own intra identities, web browsing rights, and semantic understanding of your proprietary business data. We are no longer just configuring software. We are managing digital employees. So how does your organization's org chart, your HR policy, and your security training need to change when 30% of your active quote unquote users are actually autonomous algorithms? 00;23;14;09 - 00;23;33;18 Alex It's wild to think about who do you fire when the algorithm makes a mistake. So give those new digital employees their badges, set up their DLP master valves, and keep a very close eye on what they are doing. Thank you for joining us on this roadmap rundown. You are now armed with the insights to stay ahead of the curve. 00;23;33;20 - 00;23;38;24 Alex Catch you next time. 00;23;38;26 - 00;24;04;24 Speaker 3 Thanks for listening to that roadmap rundown. You can find the show notes, roadmap, item links and more at Roadmap Rundown. We'll be back next week with another look at what's new, what's changing, and what's coming next across Microsoft 365. Roadmap rundown uses AI assisted production and synthetic voices based on information from the official Microsoft 365 roadmap. See you next time.