# Step 9 — governance so IT says yes

Use a dedicated Power Platform environment with a managed Dataverse, Entra ID groups for access, DLP connector policies to block risky data paths, and Purview for sensitivity labels and audit. Agents inherit the user's permissions — get SharePoint permissions right first.

Canonical: https://robauto.ai/learn/microsoft-agents/15

_Deploy Agents on Microsoft: Copilot Studio, Fabric & Power Platform — lesson 15 of 20 (PLAYBOOK)_

Use a dedicated Power Platform environment with a managed Dataverse, Entra ID groups for access, DLP connector policies to block risky data paths, and Purview for sensitivity labels and audit. Agents inherit the user's permissions — get SharePoint permissions right first.

Source: [Microsoft Learn — Power Platform governance](https://learn.microsoft.com/power-platform/admin/governance-considerations?utm_source=robauto)

[Previous lesson](/learn/microsoft-agents/14) · [Next lesson](/learn/microsoft-agents/16) · [Course overview](/learn/microsoft-agents) · [All courses](/learn)

---

(c) 2026 Robauto, Inc. — support@robauto.ai
Machine surfaces: https://robauto.ai/llms.txt · https://robauto.ai/llms-full.txt · https://robauto.ai/.well-known/api-catalog