Overview
The Governance module gives administrators a central view of Agents, Skills, and Connectors in the workspace settings. It supports access and sharing management, reviews of published Agents, and the identification of potential security risks. The module is enabled by default under Settings → Modules and can be disabled when Governance access is not required.Governance is free until 1 January 2027. After that, Governance add-on pricing will apply. Details will be announced soon.
Governance Overview
The Governance overview shows managed resources, review statuses, sharing, and workspace security settings. The overview identifies Agents that need review, shows how Agents and Skills are shared, and summarizes configured workspace protections. To open it, go to Workspace Settings → Governance → Overview.Workspace inventory
The workspace inventory shows the number and current status of managed resources.Sharing exposure
The Sharing exposure shows how Agents and Skills are shared within and outside the workspace. A chart groups Agents and Skills by visibility and access permissions.- Private: Agents and Skills with no additional sharing.
- Users: Agents and Skills shared with individual users.
- User Groups: Agents or Skills shared with specific user groups.
- Entire workspace: Agents or Skills available to everyone in the workspace.
- Public: Agents published externally.
Workspace protections
This section shows the workspace’s current security and permission settings.
View All Permissions opens the permission settings.
Agents
It shows all Agents in the workspace, including their owners, sharing, publication status, Governance reviews, and access risks. Search, filters, and sorting narrow the table. To open it, go to Workspace Settings → Governance → Agents.Search for Agents
The search field finds Agents by name.Filter Agents
Filters can be combined to narrow the table by:- Quick filters: Pending review, needs re-review, changes requested, or without owner.
- People: Owners, editors, or people with whom Agents have been shared.
- Filters: Status, review, access risk, visibility, model, Connectors, external publishing, knowledge, sharing, and workspace pin. Hide Agents that have not been shared from the table.
Sort Agents
Agents can be sorted alphabetically, by risk level, review urgency, usage frequency, or most recent use.Customize the Agent table
The gear icon shows or hides columns such as Owner, Editors, Sharing, Review Status, Model, and access risk.Agent details
Selecting an Agent opens its detail view. Administrators can inspect its configuration, permissions, usage, and changes across six tabs.
Governance decisions take place in Overview. Owner and access-permission management takes place in Sharing. The other tabs primarily support inspection and assessment.
Manage Agent sharing
Administrators can review and manage who has access to an Agent. This includes taking administrative control of sharing settings, changing the owner, and updating access permissions.How it works
- Open Workspace Settings → Governance → Agents.
- Select the Agent.
- Open Sharing.
- Enable Admin-Managed Sharing, select Change Owner, or open Manage sharing, as needed.
Admin-managed sharing
Admin-Managed Sharing gives administrators central control over an Agent’s sharing settings. When enabled, sharing, public links, and Agent embedding can be changed only in Governance. Owners and editors can no longer manage those settings themselves, but can still edit the Agent within their existing permissions.Change owner
Change Owner transfers responsibility for an Agent to another workspace member. The new owner receives full control of the Agent. The previous owner retains access according to their existing permissions.Manage sharing
Manage Sharing controls access for individual users, groups, or the entire workspace. Administrators can grant read or edit access, change existing permissions, or remove access entirely.Review Agents
Administrators can review published Agents in Governance and decide whether they should remain available.How it works
- Open Workspace Settings → Governance → Agents.
- Select the Agent.
- Open Overview and select Review.
- Select Approve, Request Changes, or Disable.
- If needed, add a message for the owner or an internal note.
- Save the decision.
Understand Agent review statuses
A published Agent’s review status indicates whether an administrative review has taken place, whether another review is needed, and what the reviewer decided.
Users with the required permissions can publish and use Agents before a Governance review. Changes to published settings or tools may require another review. A disabled Agent remains disabled even after republication, until a reviewer approves it again.
Assess Agent risks
In Workspace Settings → Governance → Agents, the Checks tab helps administrators inspect published Agents, identify potential risks, and determine whether action is needed.Assess Access risk
The Access risk section evaluates risks associated with actions from connected Connectors. The assessment considers whether actions require user confirmation and whether the Agent is published externally.Check access to connected sources
The Connected source access section shows whether everyone who can use an Agent also has access to its connected Connectors, Skills, and knowledge sources. A mismatch may limit functionality or create a security risk.Pin an Agent
Administrators can pin an Agent to the Pinned section in the navigation for all users with access to it. This pin can only be removed through Governance and does not affect users’ personal pins.How it works
- Open Workspace Settings → Governance → Agents.
- Select the Agent.
- Click Pin for users.
Skills
It shows all Skills in the workspace, including owners, sharing, editors, associated files, and the number of Agents that use each Skill. Search, filters, and sorting narrow the table. To open it, go to Workspace Settings → Governance → Skills.Search for Skills
The search field finds Skills by name.Filter Skills
Filters can be combined to narrow the table by:- People: Owners, editors, or people with whom Skills have been shared.
- Filter: Visibility, sharing and workspace pin. Private skills can also be hidden.
Sort Skills
Skills can be sorted alphabetically or by usage frequency.Customize the Skill table
The gear icon shows or hides columns such as Owner, Editors, Sharing, Agents, Files, and access risk.Skill details
Selecting a Skill opens its detail view. Administrators can inspect its configuration, permissions, associated files, and changes.
Owner and access-permission management takes place in Sharing. When admin-managed sharing is enabled, access permissions can be changed only through Governance. The other tabs primarily provide access to configuration, content, and change history.
Connectors
It shows integrations and MCP servers in the workspace, including connected accounts, sharing, connection status, and how Connectors are used in Agents, Workflows, and Apps. To open it, go to Workspace Settings → Governance → Connectors.Review Connector metrics
The top section summarizes Connector usage and status.Search Connectors
The search field finds Connectors by name.Filter Connectors
Filters can be combined to narrow the table by:- People: Users associated with connected accounts.
- Filter: Visibility. Private resources can also be hidden.
Sort Connectors
Connectors can be sorted alphabetically or by usage frequency.Customize Connector table
The gear icon shows or hides columns such as Connected Accounts, Shared Accounts, Agents, Workflows, Apps, Calls in the Last 30 Days, Status, and Owner.Connector details
Selecting a Connector opens its detail view. Administrators can inspect connection status, connected and shared accounts, usage across Agents, Workflows, and Apps, and recorded changes.
The Connector overview and detail view support centralized inspection of connections, sharing, and usage. Connector and sharing management takes place under Workspace Settings → Connectors.
FAQ
Who can publish Agents?
Who can publish Agents?
Administrators define which roles can publish Agents under Workspace Settings → Permissions → Agent Publication. Permission to create Agents is enabled by default for Admins and Editors.
Can Agents be published regardless of their Governance review status?
Can Agents be published regardless of their Governance review status?
Yes. Users with the required permissions can publish Agents regardless of review status. Agents remain usable while a review is pending or changes have been requested. Agents disabled during a Governance review are the exception: they cannot be used again until a reviewer approves them.
When is an Agent re-review required?
When is an Agent re-review required?
A re-review is triggered when the published configuration of a previously reviewed Agent changes, such as its instructions, tools, actions, or settings. The previous review decision remains in effect, but the Agent is marked as Needs re-review.
How can administrators edit an Agent’s knowledge, integrations, and other settings?
How can administrators edit an Agent’s knowledge, integrations, and other settings?
In Sharing, administrators can assign themselves as the owner or grant themselves edit access. They can then open the Agent in the Agent Builder to update its knowledge, integrations, and other settings.
When is an Agent’s review status determined?
When is an Agent’s review status determined?
An Agent is published when a user creates and saves it. Its review status is determined automatically upon publication. Later changes to the published configuration may require another review.
What is the difference between review status and access risk?
What is the difference between review status and access risk?
Review status records whether an Agent has been reviewed administratively and what decision the reviewer made. Access risk independently assesses potential risks from external actions and their configuration. An Agent can therefore have High Risk access risk while its review status is Approved. It can also be Safe while a review is still pending.
What happens when an Agent’s owner leaves the workspace?
What happens when an Agent’s owner leaves the workspace?
Governance identifies published Agents without an owner. An administrator can open the Agent’s Sharing tab and use Change Owner to assign responsibility to another workspace member.
What changes when admin-managed sharing is enabled?
What changes when admin-managed sharing is enabled?
Sharing settings, public links, and Agent embedding can then be changed only in Governance. Owners and editors retain their existing ability to edit the Agent, but can no longer manage those sharing settings themselves.
Why can an Agent work for some users but not others?
Why can an Agent work for some users but not others?
The Agent’s users may not all have access to its connected sources. In the Agent detail view, the Checks tab shows whether all users can access the Agent’s connected Connectors, Skills, and knowledge sources. Connector actions may fail until affected users connect their own accounts; without access to a Skill or knowledge source, the Agent answers without that source.
Where can administrators see which Agents, Workflows, and Apps use a Connector?
Where can administrators see which Agents, Workflows, and Apps use a Connector?
Open the Connector in Workspace Settings → Governance → Connectors. Its detail view shows connected accounts and provides separate Agents, Workflows, and Apps tabs. Connector and sharing settings are managed under Workspace Settings → Connectors, not in the Governance detail view.
Where can administrators review changes to an Agent?
Where can administrators review changes to an Agent?
The Agent’s History tab records activity such as publications, sharing changes, Governance decisions, and internal notes. This provides a record of changes alongside the Agent’s current configuration and review status.
Where can the Governance module be managed?
Where can the Governance module be managed?
The Governance module is enabled by default and can be managed under Settings → Modules. When disabled, the Governance section is no longer available.
Are private resources visible in Governance?
Are private resources visible in Governance?
Private resources appear in the Governance overview by default. Enabling Hide private resources in Governance excludes resources that have not been shared with other users.
Who can access the Governance module?
Who can access the Governance module?
Access is managed under Settings → Permissions. The Read permission is enabled for Admins by default and can be granted to additional roles.