You have a Microsoft 365 subscription that uses Microsoft Agent 365.

Microsoft Agent 365 provides centralized governance settings in the Microsoft 365 admin center to control who can interact with AI agents and who can distribute agents throughout the organization.

First selection: User access.

The User access setting determines which users or security groups are permitted to access and interact with agents.

Administrators can navigate to Microsoft 365 admin center → Agents → Settings → User access.

Under the access configuration, administrators should select Specific users or groups and assign Group1.

This restricts agent interaction to members of Group1 and prevents users outside the approved group from accessing agents through the governed experience.

Second selection: Sharing.

The Sharing setting determines which users can distribute agents created through Microsoft Copilot Agent Builder.

Administrators should navigate to Agents → Settings → Sharing, select Specific users or groups, and assign Group2.

This permits members of Group2 to distribute agents organization-wide while preventing other users from using organization-wide sharing.

The remaining settings serve different purposes. Agent Management Rules automate governance actions, Allowed agent types controls permitted publisher categories, and Policy template provides predefined governance configurations.

Therefore, User access controls agent interaction, while Sharing controls organization-wide distribution.