Adriatic Tech Summit 2027
05/04/2027, Congress Center Hotel Hills
Ilidža, Bosnia and Herzegovina
Skills Are the New APIs: Governing Enterprise Skills Across M365
sharepoint
governance
m365
mcp
copilot
Agents are learning new skills at an alarming speed. Today they summarize documents. Tomorrow they update SharePoint, create tickets, trigger workflows and call business systems. By Friday, nobody remembers who gave them access to production.
Organizations are quickly accumulating skills, tools, prompts, connectors and MCP capabilities, but most have no proper lifecycle around them. Skills appear in personal projects, Git repositories, SharePoint sites and Copilot agents, often without clear ownership, documentation, approval or any plan for what happens when they are no longer needed.
In this session, we will design a governed enterprise skill catalog for Microsoft 365. We will look at where skills should live, who owns them, who is allowed to use them and how they can be discovered without turning the catalog into yet another forgotten corporate portal.
We will connect SharePoint, Git, MCP, Copilot and organizational policy into a practical operating model. We will explore how skills are submitted, reviewed, approved, versioned, tested, deployed, restricted, monitored and eventually retired with dignity.
We will also examine how permissions, environments, data classification and risk levels influence which skills an agent can access. A skill that reads a public FAQ is not the same as one that updates payroll, even if both have a friendly description and an attractive icon.
Expect practical architecture, governance patterns, lifecycle examples and honest discussion about the difficult questions. Who approved this skill? Which version is the agent using? What data can it access? Who is responsible when it behaves creatively?
Because giving an agent a skill is easy. Remembering who gave it permission to delete half the intranet is governance.