Merge pull request #28663 from MicrosoftDocs/main

[AutoPublish] main to live - 06/11 01:35 PDT | 06/11 14:05 IST

Author: m365-skilling-repo-management[bot]

.openpublishing.redirection.loop.json

@@ -14,6 +14,11 @@
         "source_path": "microsoft-365/loop/loop-components-configuration.md",
         "redirect_url": "/microsoft-365/loop/loop-admin-configuration",
         "redirect_document_id": true 
+       },
+       {
+        "source_path": "microsoft-365/loop/loop-workspaces-storage-permission.md",
+        "redirect_url": "/microsoft-365/loop/loop-storage",
+        "redirect_document_id": true 
        }
     ]
  }

microsoft-365/loop/TOC.yml

@@ -1,13 +1,29 @@
 items:
+- name: Copilot Pages and Copilot Notebooks
+  items:
+    - name: Summary compliance capabilities
+      href: cpcn-compliance-summary.md
+    - name: Admin policies
+      href: cpcn-admin-configuration.md
+    - name: Storage
+      href: cpcn-storage.md
+- name: Common References
+  items:
+    - name: Requirements
+      href: cpcn-loop-requirements.md
+    - name: SharePoint Embedded management
+      href: cpcn-loop-spe-management.md
+    - name: Permissions
+      href: cpcn-loop-permission.md
 - name: Microsoft Loop
   items:
     - name: Summary compliance capabilities
       href: loop-compliance-summary.md
-    - name: Loop admin policies
-      href: loop-components-configuration.md
-    - name: Loop data integrations
+    - name: Admin policies
+      href: loop-admin-configuration.md
+    - name: Storage
+      href: loop-storage.md
+    - name: Data integrations
       href: loop-data-integrations-configuration.md
-    - name: Loop workspaces storage and permissions
-      href: loop-workspaces-storage-permission.md
-    - name: Loop components in Microsoft 365
-      href: loop-components-teams.md
+    - name: Overview Loop components in Microsoft 365
+      href: loop-components-teams.md

microsoft-365/loop/cpcn-admin-configuration.md

@@ -0,0 +1,98 @@
+---
+ms.date: 06/10/2025
+title: "Manage Copilot Pages and Copilot Notebooks in your organization"
+ms.reviewer: dancost, tonchan
+ms.author: jenz
+author: jenzamora
+manager: jtremper
+recommendations: true
+audience: Admin
+f1.keywords:
+- NOCSH
+ms.service: loop
+ms.localizationpriority: medium
+ms.topic: how-to
+ms.collection:
+- Strat_SP_admin
+- Microsoft 365-collaboration
+- Tier3
+- essentials-manage
+- magic-ai-copilot
+search.appverid:
+- SPO160
+- MET150
+description: "Manage Copilot Pages and Copilot Notebooks in your organization"
+---
+
+# Admin policies for Copilot Pages and Copilot Notebooks
+
+Copilot Pages and Copilot Notebooks are powered by `.loop` files, which are stored in user-owned SharePoint Embedded containers. Storage for these files counts toward your organization's overall SharePoint quota. For details, see [storage and lifecycle](/microsoft-365/loop/cpcn-storage). IT administrators can control the creation and use of Copilot Pages and Copilot Notebooks through Cloud Policy settings.
+
+## Requirements
+
+Copilot Pages and Copilot Notebooks are a core service integrated into SharePoint and Microsoft 365. See [requirements](/microsoft-365/loop/cpcn-loop-requirements) to learn more about configuration requirements, service connections, and license requirements.
+
+### Scoping Cloud Policy with Microsoft 365 Groups
+
+To apply Cloud Policy settings to specific users, assign the policy to a Microsoft 365 group. For steps to create a group, see [Create a Microsoft 365 group](/microsoft-365/admin/create-groups/create-groups).
+
+You can also use security or dynamic groups. For details, see [Create, edit, or delete a security group](/microsoft-365/admin/email/create-edit-or-delete-a-security-group) and [Create dynamic groups in Azure AD](/azure/active-directory/external-identities/use-dynamic-groups).
+
+> [!NOTE]
+> If you apply the policy to all users in the tenant, group setup isn't required.
+
+## Relation to Loop components
+
+Copilot Pages and Copilot Notebooks are independent of Loop. You can enable or disable them separately from Loop in your organization.
+
+To share Copilot Pages as interactive components (instead of just hyperlinks) in Teams, Outlook, Whiteboard, OneNote, or the Loop app, Loop components must be enabled. Without Loop components, Copilot Pages are only interactive within the M365 Copilot app and supported chat experiences. For details on enabling Loop components, see [Loop admin policies](/microsoft-365/loop/loop-admin-configuration).
+
+## User experience when Copilot Pages and Copilot Notebooks are disabled
+
+When creation is disabled, users can't create new Copilot Pages or new SharePoint Embedded containers. The Pages module remains visible in the M365 Copilot app, but the Notebooks module is hidden.
+
+Existing Copilot Pages and Notebooks are not deleted. Users can still view and edit existing items if they have permission. These files remain accessible via the app, shared links, search, and are discoverable by Purview and exportable by admins.
+
+## Settings management in Cloud Policy
+
+Copilot Pages and Copilot Notebooks check the following [Cloud Policy](/deployoffice/admincenter/overview-cloud-policy) setting:
+
+- **Create and view Copilot Pages and Copilot Notebooks**
+
+1. Sign in to https://config.office.com/ with your Microsoft 365 admin credentials.
+1. Select **Customization** from the left pane.
+1. Select **Policy Management**.
+1. Create a new policy configuration or edit an existing one.
+1. From the **Choose the scope** dropdown list, choose either **All users** or select the group for which you want to apply the policy. For more information, see [Microsoft 365 Groups for Cloud Policy](#scoping-cloud-policy-with-microsoft-365-groups).
+1. In **Configure Settings**, choose one of the following settings:
+    - For **Create and view Copilot Pages and Copilot Notebooks**
+        - **Enabled**: Copilot Pages and Copilot Notebooks creation and integration are available to the users.
+        - **Disabled**: Copilot Pages and Copilot Notebooks creation and integration aren't available to the users.
+        - **Not configured**: Copilot Pages and Copilot Notebooks creation and integration are available to the users.
+          >[!NOTE]
+          >If your organization has [disabled the creation of OneDrive](/sharepoint/manage-user-profiles#disable-onedrive-creation-for-some-users), regardless of the setting noted here, these people in your organization won't be able to create Copilot Pages or Copilot Notebooks.
+1. Save the policy configuration.
+1. Reassign priority for any security group, if required. (If two or more policy configurations are applicable to the same set of users, the one with the higher priority is applied.)
+
+In case you create a new policy configuration or change the configuration for an existing policy, there can be a delay in the change being reflected as described below:
+
+- If there were existing policy configurations prior to the change, then it will take 90 mins for the change to be reflected.
+- If there were no policy configurations prior to the change, then it will take 24 hours for the change to be reflected.
+
+> [!NOTE]
+> To enable a Cloud Policy for only a specific subset of users:
+>
+> 1. Create **Group A** containing the users you want to enable the policy for. Assign the Cloud Policy to this group and set it to **Enabled**.
+> 1. Create **Group B** that includes **All users**. Assign the same Cloud Policy to this group and set it to **Disabled**.
+> 1. Set the priority for **Group A** to a lower number (for example, priority 0) so it is evaluated before **Group B** (for example, priority 1).
+>
+> In Cloud Policy, lower priority numbers are evaluated first. This ensures users in **Group A** have the policy **Enabled**, while all other users in **Group B** have it **Disabled**.
+
+## Related topics
+
+- [Summary of Compliance, Lifecycle, Governance](/microsoft-365/loop/cpcn-compliance-summary)
+- [Requirements](/microsoft-365/loop/cpcn-loop-requirements)
+- [Storage](/microsoft-365/loop/cpcn-storage)
+- [Permissions](/microsoft-365/loop/cpcn-loop-permission)
+- [Managing SharePoint Embedded containers](/microsoft-365/loop/cpcn-loop-spe-management)
+- [Overview of Loop components in Microsoft 365](/microsoft-365/loop/loop-components-teams)

microsoft-365/loop/cpcn-compliance-summary.md

@@ -0,0 +1,113 @@
+---
+ms.date: 06/10/2025
+title: "Summary of governance, lifecycle, and compliance capabilities for Copilot Pages and Copilot Notebooks"
+ms.reviewer: dancost, tonchan
+ms.author: jenz
+author: jenzamora
+manager: jtremper
+recommendations: true
+audience: Admin
+f1.keywords:
+- NOCSH
+ms.service: loop
+ms.localizationpriority: medium
+ms.topic: concept-article
+ms.collection:
+- Strat_SP_admin
+- Microsoft 365-collaboration
+- Tier3
+- essentials-compliance
+- magic-ai-copilot
+search.appverid:
+- SPO160
+- MET150
+description: "Learn about the governance, data lifecycle management, and compliance capabilities for Copilot Pages and Copilot Notebooks."
+---
+
+# Summary of governance, lifecycle, and compliance capabilities for Copilot Pages and Copilot Notebooks
+
+As a Compliance Manager or IT administrator, it's crucial to stay up-to-date on the latest governance, data lifecycle, and compliance posture for the software solutions being used in your organization. This article details the capabilities available and not available yet for Copilot Pages and Copilot Notebooks.
+
+## Foundations
+
+- An **[Admin Toggle](/microsoft-365/loop/cpcn-admin-configuration)** exists to turn on or off creation of both Copilot Pages and Copilot Notebooks. If Loop components are enabled, Copilot Pages can be shared and used like a Loop component in all the applications that support Loop components.
+
+- **GDPR** data subject requests can be serviced as part of the [Microsoft Purview portal](/compliance/regulatory/gdpr-data-subject-requests#data-subject-request-admin-tools) and [Purview eDiscovery workflows](/purview/ediscovery).
+
+- **EUDB** compliance is supported. [What is the EU Data Boundary?](/privacy/eudb/eu-data-boundary-learn)
+
+## Data Security, Devices
+
+- **Intune** [Device Management Support](/mem/intune/remote-actions/device-management) exists for Microsoft 365 app, Teams app, and Loop app, on iOS and Android.
+
+- **[Conditional Access](/sharepoint/control-access-from-unmanaged-devices)** is supported.
+
+    > [!IMPORTANT]
+    > **[Information Barriers](/purview/information-barriers-sharepoint)** are not supported. See [admin settings](/microsoft-365/loop/cpcn-admin-configuration) to configure these integrations.
+
+- **[Customer Lockbox](/purview/customer-lockbox-requests)** is supported.
+
+- **Guest app access** to Copilot Pages and Copilot Notebooks containers is available. Guest app access enables third party export and eDiscovery tools, migration tools, tools used to evaluate compliance requirements, and developer APIs. Use PowerShell to [Get](/powershell/module/sharepoint-online/get-spoapplication) and [Set](/powershell/module/sharepoint-online/set-spoapplicationpermission) guest app permissions.
+
+## Data Lifecycle
+
+- Copilot Pages and Copilot Notebooks are stored together in a single, user-owned SharePoint Embedded container, identified and owned by Loop. These containers do not have individual storage limits; instead, their storage usage counts toward your organization's overall SharePoint storage quota. Currently, there is no admin control to set storage limits for individual SharePoint Embedded containers.
+
+- See [Managing SharePoint Embedded containers](/microsoft-365/loop/cpcn-loop-spe-management) for information and workflows within SharePoint Admin center or PowerShell.
+
+    > [!IMPORTANT]
+    > Unlike OneDrive, for Copilot Pages and Copilot Notebooks, there is no user workflow for content stored in the user-owned SharePoint Embedded container after user departure. The container is deleted on the same schedule as the default OneDrive settings. See [Storage management after user departure](/microsoft-365/loop/cpcn-storage#storage-management-after-user-departure) for detailed information.
+
+- **[Multi-Geo](/microsoft-365/enterprise/microsoft-365-multi-geo)** capabilities for Copilot Pages and Copilot Notebooks are supported. Copilot Pages and Copilot Notebooks are both stored in the same user-owned SharePoint Embedded container. This container is created in the geo that matches the user's [preferred data location](/microsoft-365/enterprise/plan-for-multi-geo#best-practices). Like OneDrive, admins have the ability to manually move the user's Copilot Pages and Copilot Notebooks container to a new geo when their preferred data location changes.
+
+    > [!IMPORTANT]
+    > There is no end user recycle bin for Copilot Pages or Copilot Notebooks.
+
+- **Version History** [export in Purview](/purview/ediscovery-export-search-results#step-1-prepare-search-results-for-export) or via [Graph API](/graph/api/driveitem-get-content-format) is available. Copilot Pages and Copilot Notebooks version history is configured to save 50 versions per file and no admin setting is available to change this configuration.
+
+- **Audit** logs exist for all events. They are retained, can be exported, and can be streamed to third party tools. To search and export Microsoft 365 service events for security and compliance investigations:
+
+    1. Use the [Microsoft Purview portal](https://purview.microsoft.com/auditlogsearch)
+    1. Search audit logs for "loop"
+    1. Further filter exported results by "SourceFileExtension":"loop"
+
+- Copilot Notebooks create and update .pod files to manage content in the notebook.
+
+## eDiscovery
+
+- Microsoft **[Purview eDiscovery](/purview/ediscovery-premium-get-started)** supports search and collection, review (premium license required for admin), and export as HTML (premium license required for admin) or original. You can also download and reupload the files to any OneDrive to view them in their native format.
+
+    > [!IMPORTANT]
+    > Full text search of content within .loop files in Purview review sets isn't available. All other Purview search and collection capabilities are supported.
+
+- Microsoft **[Graph API](/graph/api/driveitem-get-content-format)** export for third party tools is supported. Use PowerShell to [Get](/powershell/module/sharepoint-online/get-spoapplication) and [Set](/powershell/module/sharepoint-online/set-spoapplicationpermission) guest application permissions.
+
+- **Legal Hold** support to ensure content isn't deleted (as related to litigation and security investigations) and stored in the [Preservation Hold Library](/sharepoint/governance/ediscovery-and-in-place-holds-in-sharepoint-server).
+
+    > [!IMPORTANT]
+    > Unlike OneDrive, Copilot Pages and Copilot Notebooks are not automatically included when a user is placed on Litigation Hold, the Copilot Pages and Copilot Notebooks container must be manually added for that user.
+
+## Microsoft 365 retention and deletion
+
+- **[Retention policies](/purview/create-retention-policies?tabs=other-retention)** from Microsoft Purview Data Lifecycle Management configured for all SharePoint sites are enforced for all Copilot Pages and Copilot Notebooks.
+
+- **[Retention labels](/purview/retention#retention-labels)** from Microsoft Purview Data Lifecycle Management and Microsoft Purview Records Management are supported for Copilot Pages (.loop files) and Copilot Pages in Copilot Notebooks by [applying published labels](/purview/create-apply-retention-labels?tabs=spo-onedrive) in OneDrive or SharePoint, or [automatically applying](/purview/apply-retention-labels-automatically) the labels. There's limited support for manually applying retention labels.
+  - Retention labels cannot be viewed or applied directly from a Copilot Page. Instead, the user must [navigate to the Copilot Page within the Loop app](/purview/create-apply-retention-labels?tabs=loop%2Cdefault-label-for-sharepoint#manually-apply-retention-labels) to view or apply a retention label on a Copilot Page.
+  - Retention labels that mark the content as a record or regulatory record can't be manually applied in either the Copilot Page or when the content is opened in the Loop app. If content is automatically labeled as a record, locking and unlocking this record is not yet available.
+
+## Information Protection
+
+- **[Sensitivity labeling](/purview/sensitivity-labels-loop)** is available for Copilot Pages.
+
+- Because Copilot Notebooks are stored in the same container as all Copilot Pages, not one Copilot Notebook per unique container, Copilot Notebooks do not have container sensitivity labels.
+
+- **[Data Loss Prevention](/purview/dlp-learn-about-dlp)** (DLP) rules are enforced on content with end-user policy tip support.
+
+## Related articles
+
+- [Requirements](/microsoft-365/loop/cpcn-loop-requirements)
+- [Storage](/microsoft-365/loop/cpcn-storage)
+- [Permissions](/microsoft-365/loop/cpcn-loop-permission)
+- [Admin toggles](/microsoft-365/loop/cpcn-admin-configuration)
+- [Managing SharePoint Embedded containers](/microsoft-365/loop/cpcn-loop-spe-management)
+- [Overview of Loop components in Microsoft 365](/microsoft-365/loop/loop-components-teams)