Skip to main content

Lemhi Release — Beaverhead Rock, MT (Oct 16, 2026)

What's New: October 16, 2026

Beaverhead Rock release: the rock Sacagawea recognized in August 1805, telling the Corps her people were close and the Continental Divide was within reach.

You now see the AI your clients use outside of just M365 via cloud connectivity (MS Defender for Cloud Apps) and installed inventory (Intune), and make each app decision once for every client. Copilot agents get a new governance view you can report from, and the workshop ends with even more deliverables in hand.

Find the Shadow AI Your Clients Use Outside Microsoft 365

  • Network and installed apps: The AI Tooling Inventory shows AI services a client's managed computers reached (from Microsoft Defender for Cloud Apps) and AI desktop apps installed on company-owned Windows computers (from Intune). Each tool gets one row, badged by every source that found it, and each badge says what it can and cannot prove. Reconnect Partner Connect once to turn on network discovery.

  • Know what's missing, and why: A status line per source says whether it's on, waiting for first data, or not licensed for that client, and "Not licensed" opens a licensing conversation. The AI Tool Report labels each finding by source and shows a First detected date, so every claim you make to the client has a source behind it.

  • Plain words for connected apps: Every Microsoft 365 app on the Tooling page says what it can reach ("Can read and send mail · Can read files"), and that access feeds the tool risk score. Client Configuration shows whether employees can approve third-party apps themselves, which is how most unreviewed AI apps get in.

  • Decide once for every client: AI App Rules, under Settings, lists every AI app found across your clients. Mark one Approved, Denied, or hidden from reports, and the rule applies wherever it turns up next. On a client's Tooling page, select many tools at once to set approval or hide them.

Govern Every Copilot Agent Your Clients Run

  • Governance at a glance: Compass, Agents opens on tiles for Unowned, Stale, Shared with everyone, and Quarantined agents, then lists each agent with its owner (linked to the employee), status, usage, and who it's exposed to. A monthly chart of new agents shows sprawl before the client notices it.

  • IT-built versus employee-built: Filter by All, Copilot Studio, or Agent Builder to split what IT built from what employees made themselves.

  • Usage you can report safely: Agent Activity, now on for every connected client, ranks agents by users over 7 or 30 days and lists each user's agent count and last activity. It reads the client's Microsoft 365 audit log, never conversation content, so you can report usage without exposing what anyone typed.

Run the Workshop, Hand Over the Deliverables

  • One bundle after the workshop: The Deliverable button on the Workshop Deck tab packages the five post-workshop reports as PDFs in one pass. A report that isn't ready yet links to where you prepare it.

  • Anyone on your team can present: Presenter "?" buttons explain what each part of the deck shows and where its data comes from. They appear on screen only, never in the PDF or PowerPoint.

  • Interview guides for each process: The Processes tab under AI Intel is out of Beta and shows each process's evidence types, with a filter. The new Process Review report builds a printable 30 to 60 minute interview guide per process: who to interview (named from the client's survey respondents), an opening script, timed questions, what to listen for, and documents to request.

Coming Soon

  • ScalePad integration: Connect ScalePad, map your clients automatically, keep AI Roadmap initiatives in sync, write the QBR note to the client's next review meeting, and send client reports straight to a ScalePad meeting.

Bug Fixes and Other Improvements

  • The Copilot Readiness scan is rebuilt finding by finding across Entra, Defender, Purview, and Intune, with Not Assessed replacing false passes and gaps, and you can open any past scan from the scanner page

  • A rejected Partner Connect sign-in shows a banner on every screen naming the cause, with Reconnect and Check again

  • When an agent can't be created, the Agents Library names the account, the cause, and the fix instead of a retry that can't work

  • Brand & Experience adds advanced typography, corner, button, and heading styles, with a preview built from real components

  • Dashboard tabs (My Clients, My Todos, All Clients, Portfolio Dashboard, Team Performance) replace the separate Clients page

  • For a client with no Microsoft 365 employees, ask a leader by email to send the assessment

  • AI Intel follows a website that redirects to a renamed domain, names the address to enter when it can't, and stops on parked domains

  • ConnectWise PSA is on for every Compass workspace, with no separate switch

  • Download several of a client's reports as PDFs in one pass from the Reports page

  • Set up to three portal link tiles once, under Settings, Client Portal Links, for every client's portal

  • A help button on every page opens Learn chat, which now handles follow-ups and questions about your own portfolio

  • Search any page from the sidebar with ⌘K or Ctrl+K; Left and Right arrows move between the pages and clients columns

  • The onboarding wizard takes multiple roles, skips the invitation email, no longer waits on the GDAP import, and accepts domain-only prospects

  • MSP dashboards show hours and working capacity instead of dollar figures, matching the client views

  • The Public API reads a client's latest AI Intel report, and every documented endpoint has examples and rate limits

  • GDAP link errors name the security group and account to fix; an expired relationship shows Access ended, with a 30-day warning

  • Monthly Copilot activity and the SharePoint site scan work again for GDAP clients; Data Governance keeps loaded counts when one Microsoft report fails

  • The workshop deck's Assessment Overview box and "How It Could Work" slide fill in reliably, and identical scores no longer show a gap bracket

  • Also: clients imported from your GDAP list sync their employees right away; dashboard client names open in a new tab; the Lead Gen embed can hide its heading; Client View shows which client you're viewing with one click back; your Internal client fills in its Microsoft data after Partner Connect; long source titles fit their cards in the sales briefing PDF; Integrations logos read in dark mode; the Getting Started row no longer jumps; report covers no longer print the client's web domain; ConnectWise lists only active companies