Hey @Leembo 

system.ai.microsoft_365 is now a 1st class UC object ("MCP service") that runs through Unity Gateway, same as the external connectors you register yourself.

Two levels of control:

- Whole connector on/off:  an EXECUTE grant, so you can allow/deny M365 per user/group centrally today (GA).
- Denying specific tools tenant-wide w/ service policies: guardrails you attach to the MCP service to allow/deny/require-approval on individual tool calls. Service Policies are what enforce a per-tool denylist centrally so the per-user toggles can only pick within what you've allowed up top. (Beta)

I hope this helps