Merge branch 'main' into kwekua-ai-disclaimers-Mar-26

Author: kwekuako

.github/workflows/AutoIssueAssign.yml

@@ -4,8 +4,8 @@ permissions:
   issues: write
 
 on:
- # schedule:
- #   - cron: "0 9 1 * *"
+  schedule:
+    - cron: "26 21 * * *"
 
   workflow_dispatch:
 
@@ -14,7 +14,7 @@ jobs:
 
   stale-branch:
     if: github.repository_owner == 'MicrosoftDocs'
-    uses: MicrosoftDocs/max-cpub-test/.github/workflows/Shared-AutoIssueAssign.yml@main
+    uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-AutoIssueAssign.yml@workflows-prod
     with:
         PayloadJson: ${{ toJSON(github) }}
         ExcludedUserList: '["user1", "user2"]'

.openpublishing.redirection.copilot.json

@@ -77,12 +77,22 @@
       },
       {
          "source_path": "copilot/microsoft-365-copilot-e3-guide.md",
-         "redirect_url": "/copilot/microsoft-365/configure-data-security-copilot",
+         "redirect_url": "/copilot/microsoft-365/configure-secure-governed-data-foundation-microsoft-365-copilot",
          "redirect_document_id": false
       },
       {
          "source_path": "copilot/microsoft-365-copilot-e5-guide.md",
-         "redirect_url": "/copilot/microsoft-365/configure-data-security-copilot",
+         "redirect_url": "/copilot/microsoft-365/configure-secure-governed-data-foundation-microsoft-365-copilot",
+         "redirect_document_id": false
+      },
+      {
+         "source_path": "copilot/microsoft-365-copilot-blueprint-oversharing.md",
+         "redirect_url": "/copilot/microsoft-365/secure-govern-copilot-foundational-deployment-guidance",
+         "redirect_document_id": false
+      },
+      {
+         "source_path": "copilot/configure-data-security-copilot.md",
+         "redirect_url": "/copilot/microsoft-365/configure-secure-governed-data-foundation-microsoft-365-copilot",
          "redirect_document_id": false
       }
    ]

copilot/TOC.yml

@@ -38,8 +38,8 @@ items:
     items:
     - name: Security for Microsoft 365 Copilot
       href: security-microsoft-365-copilot.md
-    - name: Blueprint to prevent oversharing
-      href: microsoft-365-copilot-blueprint-oversharing.md
+    - name: Secure & governed data foundation for Microsoft 365 Copilot - Deployment blueprint
+      href: secure-govern-copilot-foundational-deployment-guidance.md
     - name: Apply principles of Zero Trust to Microsoft 365 Copilot
       href: /security/zero-trust/copilots/zero-trust-microsoft-365-copilot?toc=/copilot/microsoft-365/toc.json&bc=/copilot/microsoft-365/agent-framework/bread/toc.json
   - name: Privacy and Responsible AI
@@ -72,8 +72,8 @@ items:
         href: microsoft-365-copilot-chat-requirements.md
     - name: Architecture & how Copilot works
       href: microsoft-365-copilot-architecture.md
-    - name: Configure data security for Microsoft 365 Copilot
-      href: configure-data-security-copilot.md
+    - name: Configure a secure and governed data foundation for Microsoft 365 Copilot
+      href: configure-secure-governed-data-foundation-microsoft-365-copilot.md
     - name: Microsoft 365 Copilot Admin settings
       href: microsoft-365-copilot-app-admin-settings.md
     - name: App and network requirements
@@ -361,8 +361,8 @@ items:
             href: /sharepoint/get-ready-copilot-sharepoint-advanced-management?toc=/copilot/microsoft-365/toc.json&bc=/copilot/microsoft-365/breadcrumb/toc.json
           - name: Use Microsoft Purview Data Security Posture Management (DSPM) for AI
             href: /purview/dspm-for-ai?toc=/copilot/microsoft-365/toc.json&bc=/copilot/microsoft-365/breadcrumb/toc.json
-          - name: Address oversharing concerns in Microsoft 365 Copilot deployment
-            href: microsoft-365-copilot-blueprint-oversharing.md?toc=/copilot/microsoft-365/toc.json&bc=/copilot/microsoft-365/breadcrumb/toc.json
+          - name: Secure & governed data foundation for Microsoft 365 Copilot - Deployment blueprint
+            href: secure-govern-copilot-foundational-deployment-guidance.md?toc=/copilot/microsoft-365/toc.json&bc=/copilot/microsoft-365/breadcrumb/toc.json
         - name: Manage auditing and reporting for Copilot agents
           items:
           - name: Enable admin logging for Copilot Studio

copilot/agent-essentials/agent-essentials-overview.md

@@ -82,7 +82,7 @@ For more information, see [Responsible AI FAQ for Microsoft Copilot in Azure](/a
 
 ## Protect organizational data
 
-Microsoft 365 Copilot works with different Microsoft services to help you protect your organization's data. When you're ready to deploy agents within your organization, you should consider Microsoft's recommended approach to address oversharing concerns. This approach provides the pilot, deploy, and operate phases to consider when deploying Copilot and agents. Each phase consists of activities, outcomes, and expected effort needed. For more information, see [Prevent oversharing in Microsoft 365 Copilot: deployment blueprint](/copilot/microsoft-365/microsoft-365-copilot-blueprint-oversharing).
+Microsoft 365 Copilot works with different Microsoft services to help you protect your organization's data. When you're ready to deploy agents within your organization, you should consider Microsoft's recommended approach to address oversharing concerns. This approach provides the pilot, deploy, and operate phases to consider when deploying Copilot and agents. Each phase consists of activities, outcomes, and expected effort needed. For more information, see [Secure & governed data foundation for Microsoft 365 Copilot: A deployment blueprint](/copilot/microsoft-365/secure-govern-copilot-foundational-deployment-guidance).
 
 In addition, Microsoft provides SharePoint Advance Management and Microsoft Purview to address oversharing. SharePoint Advance Management provides SharePoint site management and content governance capabilities. Microsoft Purview provides security, compliance, and governance across data and files.
 

copilot/agent-essentials/m365-agents-checklist.md

@@ -4,7 +4,7 @@ f1.keywords:
 ms.author: erikre
 author: ErikRe
 manager: dansimp
-ms.date: 03/12/2026
+ms.date: 03/16/2026
 ms.update-cycle: 180-days
 audience: Admin
 ms.topic: concept-article
@@ -96,12 +96,12 @@ When you need to provide powerful AI assistants that retrieve real-time insights
 
 ## Manage Microsoft 365 Copilot agent inventory and lifecycle
 
-You can manage your organization’s available agents in the Copilot Control System (CCS) within Microsoft 365 admin center.
+You can manage your organization's available agents in the Copilot Control System (CCS) within Microsoft 365 admin center.
 
 | Step  | Task  | Description  | Administrator  |
 |---|---|---|---|
 | 1  | [Setup Role-Based Access Control (RBAC) to manage Agents in M365](/microsoft-365/admin/manage/manage-agents-permissions)  | Understand types of [admin permissions](/copilot/microsoft-365/agent-essentials/agent-prerequisites) to consider related to Copilot agents.  | Copilot administrator, Microsoft 365 administrator |
-| 2  | [Manage agent inventory for declarative agents created with Agent Builder](/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps)  | You can manage your organization’s available agents in the Copilot Control System (CCS) within Microsoft 365 admin center.<p>Actions include:<ul><li>[Manage shared agent](/microsoft-365/admin/manage/manage-shared-agents)</li><li>[Pin agents](/microsoft-365/admin/manage/manage-pinning-agents)</li></ul>  | Copilot administrator, Microsoft 365 administrator |
+| 2  | [Manage agent inventory for declarative agents created with Agent Builder](/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps)  | You can manage your organization's available agents in the Copilot Control System (CCS) within Microsoft 365 admin center.<p>Actions include:<ul><li>[Manage shared agent](/microsoft-365/admin/manage/manage-shared-agents)</li><li>[Pin agents](/microsoft-365/admin/manage/manage-pinning-agents)</li></ul>  | Copilot administrator, Microsoft 365 administrator |
 | 3  | Manage agent inventory for declarative and custom agents created with Copilot Studio  | Your organization can manage agents created with Copilot Studio.<p>Actions include:<ul><li>[Manage requested agents](/copilot/microsoft-365/agent-essentials/agent-lifecycle/agent-copilot-studio-requested)</li><li>[Upload custom agents](/copilot/microsoft-365/agent-essentials/agent-lifecycle/agent-upload-agents)</li><li>[Manage agent inventory](/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps#agent-inventory)</li></ul>  | AI administrator, Global administrator, Global reader (view-only, no edit) |
 | 4  | [Manage Copilot connectors](/microsoft-365-copilot/extensibility/overview-copilot-connector)  | Microsoft 365 Copilot connectors provide a platform for you to ingest your unstructured, line-of-business data into Microsoft Graph, so that Microsoft 365 Copilot can reason over the entirety of your enterprise content.<p>Additional information:<ul><li>[Copilot connectors requirements](/microsoft-365-copilot/extensibility/overview-copilot-connector#requirements-for-copilot-connectors)</li><li>[Set up Microsoft 365 Copilot connectors](/microsoftsearch/configure-connector)</li><li>[Staged rollout for Microsoft 365 Copilot connectors](/microsoftsearch/staged-rollout-for-graph-connectors)</li><li>[Customize connector configuration](/microsoftsearch/configure-connector#step-4-customize-connector-configuration-optional)</li></ul>  | Copilot administrator, Microsoft 365 administrator |
 | 5  | Assign and deploy an agent  | For more information, see [Manage agent inventory](/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps#agent-inventory).  | Copilot administrator, Microsoft 365 administrator |
@@ -113,7 +113,7 @@ Effective governance and security are essential for managing Copilot agents acro
 | Step  | Task  | Description  | Administrator  |
 |---|---|---|---|
 | 1  | Manage agent access to third-party systems  | Managing agent access to third-party systems include the following:<ul><li>[M365 Copilot connectors usage](/microsoft-365-copilot/extensibility/overview-copilot-connector)</li><li>[Power Platform connectors](/connectors/overview)</li><li>[Microsoft Graph connector agent for on-premises data](/microsoftsearch/graph-connector-agent)</li></ul>  | GCA machine administrator, Search administrator, or Copilot administrator |
-| 2  | Manage oversharing of SharePoint content | Understand oversharing by reviewing the following resources:<ul><li>[M365 Copilot with SharePoint Advanced Management](/sharepoint/get-ready-copilot-sharepoint-advanced-management)</li><li>[Microsoft Purview Data Security Posture Management (DSPM) for AI](/purview/dspm-for-ai?tabs=m365)</li><li>[Address oversharing concerns in Microsoft 365 Copilot deployment](/copilot/microsoft-365/microsoft-365-copilot-blueprint-oversharing)</li></ul> | Microsoft Entra ID Compliance administrator, Microsoft Entra ID Global administrator, Microsoft Purview Compliance administrator, SharePoint Online administrator |
+| 2  | Manage oversharing of SharePoint content | Understand oversharing by reviewing the following resources:<ul><li>[M365 Copilot with SharePoint Advanced Management](/sharepoint/get-ready-copilot-sharepoint-advanced-management)</li><li>[Microsoft Purview Data Security Posture Management (DSPM) for AI](/purview/dspm-for-ai?tabs=m365)</li><li>[Secure & governed data foundation for Microsoft 365 Copilot: A deployment blueprint](/copilot/microsoft-365/secure-govern-copilot-foundational-deployment-guidance)</li></ul> | Microsoft Entra ID Compliance administrator, Microsoft Entra ID Global administrator, Microsoft Purview Compliance administrator, SharePoint Online administrator |
 | 3  | Manage auditing and reporting  | Understand auditing and reporting by reviewing the following resources:<ul><li>[Audit log for Copilot Studio](/microsoft-copilot-studio/admin-logging-copilot-studio)</li><li>[Use Microsoft Purview Data Security Posture Management (DSPM) for AI](/purview/data-security-posture-management-get-started)</li><li>[Configure Microsoft Sentinel to ingest the audit logs](/azure/sentinel/relate-alerts-to-incidents?toc=/copilot/microsoft-365)</li></ul>  | Security administrator |
 | 4  | Manage data security  | Understand data security by reviewing the following resources:<ul><li>[Information Protection](/purview/information-protection)</li><li>[Data loss prevention (DLP)](/purview/dlp-learn-about-dlp)</li></ul>  | Security administrator |
 | 5  | Manage data compliance  | Understand data compliance by reviewing the following resources:<ul><li>[Compliance Manager](/purview/compliance-manager)</li><li>[Communication Compliance](/purview/communication-compliance-copilot)</li><li>Search Copilot and agent data<ul><li>[eDiscovery](/purview/ediscovery-search-and-delete-copilot-data)</li><li>[Audit Log](/microsoft-copilot-studio/admin-logging-copilot-studio)</li><li>[Purview DSPM for AI](/purview/data-security-posture-management-get-started)</li></ul></li><li>[Retention policy support for Copilot](/purview/retention?tabs=table-overriden)</li></ul>  | Security administrator, Communication Compliance administrator, Communication Compliance investigators, Communication Compliance analysts |