The AI agent for Microsoft Teams that knows your organization.
What people ask
Ask the AI agent a work question. Get an answer you can act on.
Identify a colleague whose experience can inform your next decision, or obtain workforce information without another reporting request. Answers draw on connected system information and details employees contribute to TeamConnect AI, within your permitted role and scope.
Find the right person
Ask about skills and career or project experience, including previous employment. Understand why a colleague matches and whom to approach; presence does not establish availability for reassignment.
Run the day
See who on your team is working today and from where, then get meeting times that suit every time zone you span.
See your organization as it is
Ask how a department spreads across job functions and cost centers, and also see the functional lines beside the direct ones.
Stay ahead of expiry
Know which contracts and certifications expire soon in the countries and offices you manage, while there is still time to act.
Governed answers
One AI agent. Answers governed by role and scope.
Your tenant’s consent determines the application’s access to information. Agent Roles, capability permissions, sensitivity limits, and organizational scope determine what the authenticated user may request and receive. Giving the application access does not give every employee the same rights.
An HR Admin asks
“Contracts expiring in my country.” The answer lists recorded contract end dates and relevant details within that HR administrator’s authorized country scope.
A line manager asks the same
The permitted answer covers the manager’s own team, giving that manager time to plan reviews and next steps for the people they lead.
An employee asks the same
When the employee’s assigned permissions do not permit that capability, the agent declines the request and explains the access boundary rather than disclosing the contract information.
Application access is not user authorization
All three use the same application, but the information each may receive differs. The application’s source permissions and each user’s business authorization serve different purposes. A role-governed answer does not grant the user direct access to confidential source records.
Confidence in the result
Answers you can check. Access decisions you can review.
Where the answer supports it, each match shows the records behind it, so you can see why the agent named a colleague. Security can review the recorded authorization decisions without turning the audit trail into a transcript of confidential answers.
- Everyday language
- 01
Your question
Describe the experience you need to find or the workforce question you need to answer.
- 02
Permissions applied
The request is evaluated against the configured capability permissions, sensitivity limits, and the user’s organizational scope.
- 03
A supported answer or refusal
For a permitted answer, review relevant records and their coverage. Requests outside the user’s authorization are declined.
- 04
A decision to review
Allowed or denied, with the reason and authorization context recorded—not the conversation itself.
- Audit Trail
Governance
AI agent governance: you choose who each capability answers to.
Govern each capability by Agent Roles, by Microsoft 365 security groups, or by both together, and decide per capability. When you grant access through a group, its membership stays where you manage it today, in Microsoft Entra ID.
Two ways to govern the AI agent
Agent Roles describe responsibilities and ship with the product, while Microsoft 365 security groups are the ones you already govern in Microsoft Entra ID. A capability can use either, or require both, so access follows the model you already run.
50+ roles, plus your own
More than fifty predefined roles cover common business responsibilities, from Employee and Line Manager to CHRO, CIO, CFO, CISO, Procurement, Compliance, and Privacy. Each role decides what the agent returns to the people who hold it, and you can also add roles of your own.
Set per capability
Each capability carries its own access model, its own role or group list, and its own sensitivity ceiling — General, Restricted, Confidential, or Highly Confidential. As a result, control sits with each capability, not with one switch per person.
Exportable for review
Export the catalog’s governance fields, so a compliance reviewer can check how you configured access without needing access to the product.
Reach
One AI agent for questions across your whole organization.
Ask about the organizational areas you are responsible for and obtain relevant detail with less reporting work. Available information, supported capabilities, and your configured role and scope determine the answer.
Across your people data
Ask about profiles, skills, certifications, work and project experience, reporting lines, contracts, cost centers, offices, working hours, availability, licenses, devices, and application ownership.
The questions leaders ask
Find, count, compare, and roll up, then spot what is missing, see what expires, and check what happened.
Across organizational dimensions
Explore business units, cost centers, countries, departments, divisions, offices, and regions. Move from summaries to relevant people detail where the capability and your scope permit.
An answer for each role
From Employee and Line Manager to CHRO, CIO, CFO, CISO, Procurement, Compliance, Privacy, and Facilities, plus the roles you define, each with the answers it may receive.
Buyer questions
What security and HR ask about the AI agent.
How useful workforce answers, role-governed access, and source information work together.
Access and Agent Roles
Can we define our own Agent Roles?
Yes. More than fifty predefined Agent Roles cover common business responsibilities, and you can add roles for your organization. Assign a custom role to people and choose which capabilities it can reach; you set its clearance and scope, rather than inheriting them from a predefined role.
How do Agent Roles relate to Microsoft 365 security groups?
A capability can accept Agent Roles, Microsoft 365 security groups, or both, and its own security and scope requirements still apply. Agent Roles describe common business responsibilities, while security groups are the ones you already manage.
So when you grant access through a group, you keep managing that membership in Microsoft Entra ID, just as you do today.
What happens when someone asks something their role does not permit?
The agent declines requests outside the person’s configured authorization and explains the boundary. Rephrasing does not grant additional permissions. Administrators can review the recorded authorization decisions, including denials, in Audit Trail.
Scheduled updates and the audit trail
Can the agent answer before anyone asks?
Yes. Supported updates run on a schedule instead of waiting for someone to type, for example skill-validation reminders and campaign reminders. The agent checks each recipient’s access before delivery and records the decision in Audit Trail.
What can administrators review in the audit trail?
The recorded access decisions: who asked, which capability matched, when, with what scope, and whether the agent allowed or denied the request. For a scheduled update, the recipient is the person on record.
The trail deliberately leaves out the questions and answers themselves. That way, reviewers can examine access decisions without the audit becoming a copy of protected answers.
Licenses, your data, and where the AI agent runs
Does everyone in our organization need the AI agent?
No. TeamConnect and TeamConnect AI can serve different people in the same organization. TeamConnect AI includes the TeamConnect foundation, so the same person does not need both editions. Talk to sales for TeamConnect AI subscription pricing and separate agent-usage credit terms.
Will our prompts and answers train AI models?
No. The foundation models behind the agent run in Microsoft Azure and do not train on your prompts and responses without your permission or instruction, in line with Microsoft’s published policy.
TeamConnect AI reaches your Microsoft 365 directory only through the permissions your organization approved, and it applies the access controls you configured.
Where can we use the agent?
Microsoft Teams gives the full card experience, including evidence and actions where the answer supports them. You can also reach the agent from Microsoft Outlook and Microsoft Copilot, where the response adapts to what each host can render.
Bring a real people or workforce question
See the AI agent for Microsoft Teams answer your own questions.
See how relevant career experience or workforce detail can inform your next decision, and how the permitted answer differs by role. Weighing the cost? See the business case first.