Summary
- Microsoft Teams is adding Facilitator Protection skill, which uses AI to scan meeting transcripts for signs of suspected social-engineering attempts when external participants are present.
- If a suspected attempt is detected, meeting participants will receive a warning and can end the meeting or temporarily restrict information sharing.
- The change affects users who use Facilitator in meetings with people outside their organization.
- No admin configuration is required to enable the Protection skill, but Microsoft recommends informing users and reviewing Facilitator documentation.
Primary Service: Teams
Admin Impact: Low
User Impact: Medium
Release Start: 31 Jan 2027
Release End: 15 Feb 2027
Services: Teams
Category: Stay informed
Tags: Admin Action, New Feature, User Adoption, Highlighted
History
11/3/2026 Item Added to Message Center
Microsoft Message
Facilitator can help users identify suspected social-engineering attempts by people outside their organization during a meeting. When Facilitator is present, its Protection skill uses AI to check the meeting transcript for signs that someone may be attempting to trick users into sharing sensitive information. If a suspected attempt is detected, users will see a warning with options to end the meeting or temporarily restrict information sharing.
This feature can help organizations reduce the risk of sensitive information being disclosed through social engineering during meetings with external participants.
Rollout schedule
General Availability (Worldwide): Beginning in late January 2027 and expected to complete by mid-February 2027
Impact on your organization
Who is affected
Users who use Facilitator in meetings with participants outside their organization
Platforms and services
- Microsoft Teams
- Facilitator
What will happen
- When Facilitator is present in a meeting with participants outside your organization, the Protection skill is invoked automatically.
- The Protection skill uses AI to check the meeting transcript for signs of suspected social-engineering attempts.
- If a suspected attempt is detected, users will receive a warning.
- Users will have options to end the meeting or temporarily restrict information sharing.
- No action is required to enable the Protection skill.
Action required and recommendations
No action is required to enable the Protection skill.
We recommend that you:
- Inform users that they may receive warnings about suspected social-engineering attempts during meetings with external participants.
- Help users understand the available options if a warning appears.
- Review the Facilitator documentation to familiarize yourself with the feature.
Compliance considerations
This change introduces an AI capability that interacts with customer data. When Facilitator is present, the Protection skill uses AI to check the meeting transcript for signs of suspected social-engineering attempts.