You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: copilot/microsoft-365-copilot-page.md
+3-20Lines changed: 3 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -43,28 +43,11 @@ You can manage Microsoft 365 Copilot through the Microsoft 365 admin center by g
43
43
44
44
You can manage Copilot licenses, including assigning and unassigning licenses, for your users.
45
45
46
-
### Manage how your organization interacts with Copilot in Bing, Microsoft Edge, and Windows
46
+
### Manage how your organization interacts with Copilot
47
47
48
-
Copilot capabilities with [enterprise data protection](/copilot/overview) provides enhanced security for users accessing the generative AI capabilities of Copilot. This experience is on by default for [users with eligible licenses](/copilot/manage#commercial-data-protection-eligibility) assigned by your organization when they are signed in with their work or school (Entra ID) accounts.
48
+
For users signed in with a Microsoft Entra account, Microsoft Copilot offers [enterprise data protection](/copilot/microsoft-365/enterprise-data-protection) (EDP) in an experience designed for work and education. Users who aren’t signed in, or are signed in with a personal account, can use the public version of Copilot, accessed primarily through [copilot.microsoft.com](https://copilot.microsoft.com/) and [bing.com/chat](https://bing.com/chat).
49
49
50
-
Copilot in Bing, Edge, and Windows is the public version of Copilot and doesn't require users to be signed in. You can reroute to the documentation available on the panel to turn off the public experience and still have access to the Copilot capabilities with enterprise data protection experience.
51
-
52
-
You should use a PowerShell script to control access to Microsoft 365 Copilot in Bing, Edge, and Windows. Running this script controls access to Microsoft 365 Copilot in Bing.com, Edge sidebar, Edge mobile app, Copilot in Windows, copilot.microsoft.com, and the Copilot app. It doesn't change how users access Copilot in other Microsoft 365 productivity apps.
53
-
54
-
To turn on or turn off Microsoft 365 Copilot in Bing, Edge, and Windows, follow these steps:
55
-
56
-
1. Download the [PowerShell script](https://download.microsoft.com/download/8/9/d/89d41212-7ece-414c-b6d3-f4ecb070c613/ConfigureM365Copilot.ps1).
57
-
2. Open an instance of the Windows PowerShell in admin mode.
58
-
3. Run the following command first: 'Set-ExecutionPolicy unrestricted'.
59
-
4. Run the PowerShell script.
60
-
5. Follow the instructions prompted by the script.
61
-
6. The cmdlet prompts you to sign in with your Entra ID account, which must be a Search Admin or Global Admin account.
62
-
7. Follow these steps:
63
-
64
-
- To get the **current status** of Microsoft 365 Copilot in Bing, Edge, and Windows in your tenant, run: *'.\ConfigureM365Copilot.ps1'*
65
-
- To **turn on** Microsoft 365 Copilot in Bing, Edge, and Windows, run: *'.\ConfigureM365Copilot.ps1 -enable $true'*
66
-
- To **turn off** Microsoft 365 Copilot in Bing, Edge, and Windows, run: *'.\ConfigureM365Copilot.ps1 -enable $false'*
67
-
8. If you encounter a problem, try running the script again. If the problem persists, you can contact support.
50
+
To ensure that users in your organization access Copilot with enterprise data protection for work and education, follow these [instructions on managing Copilot](/copilot/manage).
68
51
69
52
### Manage plugins that work with Microsoft 365 Copilot
Copy file name to clipboardExpand all lines: microsoft-365/admin/activity-reports/microsoft-365-copilot-readiness.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -39,7 +39,7 @@ In the Microsoft 365 Copilot readiness report, which is in continuous enhancemen
39
39
40
40
## Interpret the Readiness section in the Microsoft 365 Copilot report
41
41
42
-
You can use this report to see how ready your organization is to adopt Microsoft 365 Copilot. The Readiness section is set up to show your data over the past 28 days. Currently this portion does not include any other time period options, but we'll be rolling out updates soon to enable 7-day, 30-day, 90-day, and 180-day periods.
42
+
You can use this report to see how ready your organization is to adopt Microsoft 365 Copilot. The Readiness section is set up to show your data over the past 28 days.
43
43
44
44
You can see the following summary charts in this report:
Copy file name to clipboardExpand all lines: microsoft-365/admin/manage/manage-copilot-agents-integrated-apps.md
+4-18Lines changed: 4 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -34,7 +34,7 @@ description: "Learn how to manage Copilot agents in the Integrated apps page in
34
34
>
35
35
> - You must have Microsoft 365 Copilot license to use Copilot agents.
36
36
> - The capability is enabled by default in all Microsoft 365 Copilot licensed tenants.
37
-
> - Admins can disable this functionality for a user or a group. Also, admins control how individual agents are approved for use and which agents are enabled.
37
+
> - Admins can manage how individual agents are approved for use and which agents are enabled.
38
38
39
39
Microsoft 365 Copilot is a new experience in Microsoft 365 that combines the power of large language models with your data and apps in Microsoft 365 to capture natural language commands to produce content and analyze data. It enables access to and use of third-party apps, such as Jira, [Dynamics 365](/microsoft-365-copilot/extensibility/overview-business-applications), or Bing Web Search. Admins can manage Copilot agents in the same way as they manage any other app in the Integrated apps section of the Microsoft 365 admin center. Admins can enable, disable, assign, block, or remove Copilot agents for their organization, and manage Copilot capabilities and data privacy.
40
40
@@ -46,13 +46,12 @@ Microsoft Copilot Studio is a low-code development platform that offers a graphi
46
46
47
47
However, before these agents can become available to users, the agents must undergo a streamlined process of submission and approval. To learn more, see [Publish Copilot agents](#publish-copilot-agents).
48
48
49
-
When Copilot extensibility is enabled, users can see third party agents in Copilot that allows them to access the Copilot. The hub Copilot experience shows the list of agents that are available and deployed for the user. Users can toggle it on or off to restrict access of Copilot to any specific agents during the interaction. Users can also add or remove agents in their Copilot experience by right-clicking on the agents and selecting the appropriate option. Users can only access the agents that are allowed by the admin and that they have installed or been assigned to.
49
+
The hub Copilot experience shows the list of agents that are available and deployed for the user. Users can toggle it on or off to restrict access of Copilot to any specific agents during the interaction. Users can also add or remove agents in their Copilot experience by right-clicking on the agents and selecting the appropriate option. Users can only access the agents that are allowed by the admin and that they have installed or been assigned to.
50
50
51
51
## Manage Copilot agents in the Microsoft 365 admin center
52
52
53
53
Admins can manage Copilot agents as apps in the Integrated apps section of the Microsoft 365 admin center, where they can see the list of available, deployed, or blocked apps for their organization. They are able to:
54
54
55
-
- Enable or disable Copilot extensibility for the complete organization through Microsoft 365 admin center settings.
56
55
- Make a Copilot agent available to specific users or groups.
57
56
- Block or unblock Copilot agents for the complete organization.
58
57
- Deploy or remove Copilot agents for the complete organization or specific users or groups.
@@ -61,19 +60,6 @@ Admins can view Copilot agents from the list of available, deployed, or blocked
61
60
62
61
You can also check if a specific app has Copilot support by selecting it from apps list and checking if the app overview mentions **Copilot** as a host product.
63
62
64
-
## Enable or disable Copilot extensibility
65
-
66
-
Admins can enable or disable Copilot extensibility for their org by using a setting in the tenant default options in the Integrated Apps section of the Microsoft 365 admin center. This setting lets you control who can access Copilot agents in their organization. The setting has three options:
67
-
68
-
-**All Users**: This is the default option and it means that all users in the organization can access Copilot agents, subject to the existing app policies and user assignments.
69
-
-**No Users**: This option means that no users in the organization can access Copilot agents, and the third party agents are disabled in the Copilot agents flyout. This option also hides Copilot agents from the list of Available and Deployed apps on the Integrated Apps page.
70
-
-**Specific Users**: This option lets you select specific users or groups in your organization to have access to Copilot agents. So while all or specific users in your organization may have permissions to install and use apps from the Available apps and Deployed apps lists, only the users or groups you select in this setting can use Copilot agents.
71
-
72
-
> [!NOTE]
73
-
>
74
-
> - Once extensibility is disabled in the tenant, it can take up to 24 hours for agents to disappear for users.
75
-
> - The Microsoft pinned Visual Creator agent will still be visible even when extensibility is disabled.
76
-
77
63
## Deploy or remove Copilot agents
78
64
79
65
Admins can deploy or remove Copilot agents across the whole organization or for specific users or groups by using the same gestures and controls that work for any other app in the Microsoft 365 admin center. Admins can select a Copilot agent from the list of Available or Deployed apps and select **Deploy** or **Remove**. Admins can also choose to deploy or remove the agents for everyone or specific users or groups. Deploying or removing an agent affects its availability and functionality in Copilot and in the other host products, such as Outlook, Teams, or Microsoft 365.
@@ -95,7 +81,7 @@ For detailed information about how Microsoft 365 Copilot uses, protects, and sha
95
81
96
82
## Ensuring a secure implementation of Declarative Agents in Microsoft 365
97
83
98
-
Microsoft 365 customers and partners can build declarative agents that extend Microsoft 365 Copilot with custom instructions, grounding knowledge, and actions invoked via REST API descriptions configured by the declarative agent. At runtime, Microsoft 365 Copilot reasons over a combination of the user’s prompt, custom instructions that are part of the declarative agent, and data which was provided by custom actions. All of this data might influence the behavior of the system, and such processing comes with security risks, specifically that if a custom action can provide data from untrusted sources (such as emails or support tickets), an attacker might be able to craft a message payload which causes your agent to behave in a way they control – incorrectly answering questions or even invoking custom actions. While Microsoft takes many measures to prevent such attacks, organizations should only enable declarative agents that use trusted knowledge sources and connect to trusted REST APIs via custom actions. If the use of untrusted data sources is necessary, design the declarative agent around the possibility of breach and don't give it the ability to perform sensitive operations without careful human intervention.
84
+
Microsoft 365 customers and partners can build declarative agents that extend Microsoft 365 Copilot with custom instructions, grounding knowledge, and actions invoked via REST API descriptions configured by the declarative agent. At runtime, Microsoft 365 Copilot reasons over a combination of the user's prompt, custom instructions that are part of the declarative agent, and data which was provided by custom actions. All of this data might influence the behavior of the system, and such processing comes with security risks, specifically that if a custom action can provide data from untrusted sources (such as emails or support tickets), an attacker might be able to craft a message payload which causes your agent to behave in a way they control - incorrectly answering questions or even invoking custom actions. While Microsoft takes many measures to prevent such attacks, organizations should only enable declarative agents that use trusted knowledge sources and connect to trusted REST APIs via custom actions. If the use of untrusted data sources is necessary, design the declarative agent around the possibility of breach and don't give it the ability to perform sensitive operations without careful human intervention.
99
85
100
86
Microsoft 365 provides organizations with extensive controls governing who can acquire and use integrated apps and the specific apps enabled for groups or individuals within a Microsoft 365 tenant, including those apps that include declarative agents. Tools like Copilot Studio, which enable users to create their own declarative agents, also include extensive controls that allow admins to govern connectors used for both knowledge and custom actions.
101
87
@@ -111,7 +97,7 @@ The publishing process involves the following steps:
111
97
1. You can select a pending application to see more details and metadata, such as the description, requester, request date, and the status. These details help you to make an informed decision on whether to publish or reject the application.
112
98
1. You can approve or disapprove any pending application by selecting **Publish** or **Reject**.
113
99
114
-
1. If the application is approved, it becomes available to the org users based on the org default settings and Copilot default settings. The application also becomes part of the `Available apps` list in the admin center, where admins can manage user assignments and other settings as any other app.
100
+
1. If the application is approved, it becomes available to the org users based on the org default settings for custom apps. The application also becomes part of the `Available apps` list in the admin center, where admins can manage user assignments and other settings as any other app.
115
101
116
102
1. If the application is disapproved, it is removed from the `Pending approval` list in the admin center, and the status is shared with Copilot Studio. The developer can make changes and resubmit the application for approval.
Copy file name to clipboardExpand all lines: microsoft-365/enterprise/microsoft-365-vpn-securing-teams.md
+2-1Lines changed: 2 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -83,7 +83,8 @@ Once the policy is in place, you should confirm It's working as expected. There
83
83
84
84
## Additional support logs
85
85
86
-
If you need further data to troubleshoot, or are requesting assistance from Microsoft support, obtaining the following information should allow you to expedite finding a solution. Microsoft support's **TSS Windows CMD-based universal TroubleShooting Script toolset** can help you to collect the relevant logs in a simple manner. The tool and instructions on use can be found at <https://aka.ms/TssTools>.
86
+
If you need further data to troubleshoot, or are requesting assistance from Microsoft support, obtaining the following information should allow you to expedite finding a solution. Microsoft support's **TSS Windows PowerShell-based universal TroubleShooting Script toolset** can help you to collect the relevant logs in a simple manner. The tool and instructions on use can be found by [downloading TSS.zip here](https://aka.ms/getTSS), and additional information at [Introduction to TroubleShootingScript toolset (TSS)](https://aka.ms/TssInfo)
0 commit comments