🗂️ The Tenant Desk

Tuesday, September 1, 2026

10 stories · Standard format

Generated with AI from public sources. Verify before relying on for decisions.

🎧 Listen to this briefing or subscribe as a podcast →

Microsoft is finally closing the book on classic SharePoint extensibility, establishing hard retirement dates for legacy pages and scripting. In the AI space, enterprise deployment is pivoting from open-ended autonomy toward explicit runtime controls and centralized agent registries.

Microsoft 365 & SharePoint

Microsoft Establishes 2027-2028 Phased Retirement for Classic SharePoint Pages and Custom Scripting

Microsoft issued Message Center notice MC1464926 on Tuesday, September 1, detailing a two-phase retirement timeline for classic publishing sites, classic user-created pages (such as wiki and custom ASPX pages), and custom scripting in SharePoint Online. Phase 1 begins March 1, 2027, turning DenyAddAndCustomizePages to True by default for new tenants and disabling classic publishing site creation (template IDs BLANKINTERNETCONTAINER#0 and CMSPUBLISHING#0). Phase 2 takes effect October 1, 2028, converting all remaining classic user-created pages to read-only mode across all tenants without deleting underlying content.

For SharePoint architects and migration consultants, this announcement establishes a hard timeline to audit client environments for legacy custom ASPX pages and enterprise wiki structures. Because classic pages lack modern security posture and cannot feed accurate context to Microsoft 365 Copilot, enterprise clients in regulated sectors like life sciences must build structured remediation waves. Architects should immediately utilize Purview audit logs under 'SharePoint Classic Activities' and PnP modernization tooling to inventory affected site templates before Phase 1 creation locks take effect.

Verified across 4 sources: Pupuweb · Microsoft Tech Community · MWPro · Neowin

Copilot & Power Platform

Copilot Studio Consolidation and Consolidated Cloud App Launch Drive September 1 Billing and Model Changes

As Microsoft officially launched its unified copilot.cloud.microsoft domain on Monday, August 31—merging consumer and enterprise Copilot entry points—several September 1 administrative shifts we've been tracking took effect. Alongside the Copilot Studio GitHub harness and Entra Agent ID bindings we covered last week, six legacy GitHub Copilot models are now retired, promotional credit allowances are dropping between 37% and 44%, and the new harness billing begins directly charging via Azure credit meters.

This consolidation forces immediate action for tenant network administrators, who must update proxy allowlists for the copilot.cloud.microsoft endpoint to prevent user access disruptions. Concurrently, the shift to harness-based metering in Copilot Studio and reduced promotional credits means unmonitored agentic workflows will quickly hit tenant budget caps. M365 consultants must guide enterprise clients through credit audits and ensure all active agents transition smoothly to Entra Agent ID identities.

Verified across 1 sources: Big Hat Group

Microsoft Copilot Studio Adds Entra-Based User and Service-to-Service Authentication

Building on the transition of Copilot Studio agents to Entra Agent ID we tracked last week, Microsoft announced Tuesday, September 1, that Copilot Studio will now support Microsoft Entra-based identities for both delegated user access and service-to-service (S2S) authentication, reaching general availability on September 30. The update also enables developers to use the Microsoft 365 Agents SDK to programmatically invoke agents directly from external web and native applications.

Standardizing agent access under Entra ID provides a critical identity governance layer for Power Platform solutions, bringing non-human AI workers into the same identity boundary as standard user accounts. For enterprise developers, native S2S authentication eliminates the security debt of hardcoded secrets or workaround OAuth flows when connecting custom web apps to low-code agents. Consultants have a clear four-week window before general availability to design robust role-based access control policies for multi-agent workflows.

Verified across 2 sources: Pupuweb · MWPRO

Enterprise AI

AWS Launches Centralized Agent Registry to Curb Autonomous Agent Sprawl

AWS announced the general availability of AWS Agent Registry on Monday, August 31, providing a centralized catalog for enterprises to inventory, discover, and govern AI agents, skills, and Model Context Protocol (MCP) servers. The service operates across a Governance Plane for administrative access policies and a Discovery Plane for semantic search, with early enterprise adopters including Southwest Airlines, PepsiCo, and Syngenta.

As multi-agent systems proliferate across disparate engineering teams, organizations risk severe operational duplication and unmonitored privilege escalation. Establishing a central registry creates a required system of record for agent ownership and tool capabilities before agents invoke external APIs. It reinforces the broader shift toward treating AI agents as managed IT assets subject to explicit lifecycle governance.

Verified across 1 sources: AWS

Politics, Fact-Checked

Fact Check: Public Health Data Refutes Claims Linking Undocumented Immigration to U.S. Measles Outbreaks

Following public claims attributing surging U.S. measles outbreaks to undocumented immigration, epidemiological data published through August 31 demonstrates that 94% of confirmed 2026 measles cases occurred among unvaccinated individuals or those with unknown status. Infectious disease experts confirm that domestic transmission is driven primarily by declining domestic MMR vaccination rates and international travel by unvaccinated U.S. citizens rather than border crossings.

Politicizing epidemiological tracking during active disease surges threatens public health responses by misdirecting resources away from community immunization gaps. When public health claims collapse complex viral transmission into partisan talking points, institutional trust degrades further. Accurate, evidence-based reporting on primary vaccination rates remains essential for local health authorities attempting to contain transmission in schools and child care facilities.

Verified across 1 sources: WRAL

Working-Class Economy

GAO Report Identifies Gig Platforms Among Top Employers for Public Assistance Recipients

A Government Accountability Office report released Monday, August 31, reveals that gig economy platforms such as DoorDash, Lyft, and Uber emerged as top employers for workers receiving SNAP benefits in 2025, surpassing traditional retail and fast-food employers like Walmart and McDonald's. The report also highlights gig companies as the third-largest employer group with workers enrolled in Medicaid, while new 80-hour monthly work requirements create administrative obstacles for multi-app workers.

The concentration of platform workers on public safety-net programs illustrates how gig work models shift core healthcare and income support burdens onto public funding. While workers trade traditional job security for schedule flexibility, the absence of portable benefits leaves lower-income independent contractors exposed during economic downturns. This empirical data will inform legislative debates regarding mandated portable benefit funds and safety-net work verification requirements.

Verified across 1 sources: The Oasis Reporters

Cybersecurity

Microsoft Entra ID Transitions Passkeys to Default Authentication Ahead of Telephony Sunset

As Microsoft's September 1 mandate takes effect—making passkeys the default authentication method for Entra ID and kicking off the February 2027 telephony sunset we've been tracking—new security research published August 28 highlights enterprise implementation hurdles. The report notes that while passkeys eliminate the shared secrets targeted by recent vishing campaigns, enterprise environments require hybrid strategies to address account recovery edge cases, BYOD device binding, and legacy application incompatibility.

Disabling legacy telephony MFA eliminates widespread AiTM and vishing attack vectors, but forcing immediate passkey adoption can create severe helpdesk friction if recovery flows are neglected. Identity architects must construct phased migration plans that combine FIDO2 passkeys for modern cloud apps with hardware security keys for specialized legacy infrastructure. IT teams should immediately review Microsoft Graph passkey opt-out controls while preparing fallback account recovery mechanisms.

Verified across 1 sources: CSO Online

EVs & Charging

Kempower Data Highlights Plug Density and Distributed Architecture as Key EV Charging Utilization Drivers

An empirical white paper released Monday, August 31, by EVSE manufacturer Kempower analyzing North American charging data shows that the physical count of charging plugs has roughly three times more impact on station utilization than total installed site power. Furthermore, locations deploying distributed architectures—which dynamically allocate power between stalls based on real-time vehicle demand—achieved 83% higher utilization compared to fixed-power dispensers.

As charging site operators pivot from rapid hardware deployment toward long-term financial solvency, optimizing station architecture becomes a critical capital allocation decision. Prioritizing plug density and dynamic power sharing allows operators to maximize throughput without triggering expensive utility grid transformer upgrades. For EV drivers, high-density, dynamic sites significantly reduce queue times during peak travel periods.

Verified across 1 sources: Charge, Devs

New England Beat

Developer Scraps 26-Story Davis Square Housing Tower in Somerville

On Monday, August 31, developer Copper Mill abandoned plans to construct a 26-story, 502-unit Chapter 40B apartment tower in Somerville's Davis Square, citing municipal inaction on its permit application filed in December 2025. Somerville Mayor Jake Wilson rejected the criticism, pointing out ongoing housing approvals across the city, while local business owners expressed relief that cultural staples like The Burren pub no longer face demolition.

The project's collapse illustrates the intense policy friction between aggressive transit-oriented housing goals and municipal preservation efforts in Greater Boston's inner core. While losing 500 units exacerbates severe regional housing supply deficits, the battle highlights how local opposition can effectively block high-density projects that threaten community anchors. Urban planners must now rely on the upcoming 2027 Davis Square Neighborhood Plan to mediate future zoning changes.

Verified across 2 sources: Boston.com · WBUR

Science & Space

Gravitational Data Reveals Massive Hot Anomaly in Mars's Southern Mantle

A study published in Nature using orbital velocity data from NASA's Mars Global Surveyor, Mars Odyssey, and Mars Reconnaissance Orbiter revealed on August 27 that Mars's southern mantle is between 390°F and 750°F (200°C to 400°C) hotter than its northern mantle. Researchers applied a novel technique called 'tidal tomography' to map interior density and temperature variations across the planet.

Discovering a pronounced thermal asymmetry inside Mars challenges long-standing planetary cooling models that assumed uniform interior structures. The tidal tomography method provides space scientists with a non-invasive tool to probe the deep interiors of other solid planets and icy moons without relying solely on surface landers. Furthermore, the hotter southern mantle offers a direct physical explanation for Mars's ancient magnetic field history and northern-southern crustal dichotomy.

Verified across 1 sources: Space.com


The Big Picture

Legacy Extensibility Deprecation Forces Tenant Modernization Microsoft's phased retirement of classic SharePoint publishing and custom scripting mirrors broader platform pushes to strip out unmanaged, non-AI-compatible UI components across commercial tenants.

Deterministic Governance Replaces Open-Ended Agent Autonomy Enterprises are adopting explicit agent registries, event-driven runtime architectures, and trace-based behavioral scoring to contain machine-speed AI errors.

Identity Directories Standardize Non-Human Access Controls As passkeys become default for human logins, agent identity frameworks like Entra Agent ID and S2S authentication in Copilot Studio establish strict administrative lifecycles for digital workers.

Charging Infrastructure Optimizes for Plug Density and Ultra-Fast Speeds Empirical data shows charging station utilization relies more heavily on plug count and dynamic power-sharing than total installed site power.

Public Health Communications Suffer Under Political Infighting Disputes between state executives and federal health appointees over mortality and transmission data undermine evidence-based disease tracking during active outbreaks.

What to Expect

2026-09-15 Power Apps online mode toggle for canvas applications reaches general availability.
2026-09-30 Copilot Studio Entra-based user and service-to-service authentication reaches general availability.
2027-03-01 SharePoint Online Phase 1 classic publishing and custom script creation restriction takes effect.
2028-10-01 SharePoint Online Phase 2 enforcement converts all existing classic user-created pages to read-only.

Every story, researched.

Every story verified across multiple sources before publication.

🔍

Scanned

Across multiple search engines and news databases

407
📖

Read in full

Every article opened, read, and evaluated

123

Published today

Ranked by importance and verified across sources

10

— The Tenant Desk

🎙 Listen as a podcast

Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.

Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste
Overcast
+ button → Add URL → paste
Pocket Casts
Search bar → paste URL
Castro, AntennaPod, Podcast Addict, Castbox, Podverse, Fountain
Look for Add by URL or paste into search

Spotify isn’t supported yet — it only lists shows from its own directory. Let us know if you need it there.