Edit

Share via

Manage access to Azure Copilot

By default, Azure Copilot is available to all users in a tenant. However, Global Administrators can manage access to Azure Copilot for their organization. Access can also be optionally granted to specific Microsoft Entra users or groups.

If Azure Copilot is not available for a user, they'll see an unauthorized message when they select the Copilot button in the Azure portal.

Note

In some cases, your tenant may not have access to Azure Copilot by default. Global Administrators can enable access by following the steps described in this article at any time.

As always, Azure Copilot only has access to resources that the user has access to. It can only take actions that the user has permission to perform, and requires confirmation before making changes. Azure Copilot complies with all existing access management rules and protections such as Azure role-based access control (Azure RBAC), Privileged Identity Management, Azure Policy, and resource locks.

Manage user access to Azure Copilot

To manage access to Azure Copilot for users in your tenant, any Global Administrator in that tenant can follow these steps.

  1. Elevate your access so that your Global Administrator account can manage all subscriptions in your tenant.

  2. In the Azure portal, search for Azure Copilot admin center and select it.

  3. In the service menu, under Settings, select Access management.

  4. Select the toggle next to Available for all users to enable Azure role-based access control (RBAC).

  5. To grant access to specific Microsoft Entra users or groups, select Manage RBAC roles.

  6. Assign the Copilot for Azure User role to specific users or groups. For detailed steps, see Assign Azure roles using the Azure portal. Only users and groups with this role will have access to Azure Copilot.

  7. When you're finished, remove your elevated access.

Global Administrators for a tenant can change the Access management selection at any time.

Important

In order to use Azure Copilot, your organization must allow websocket connections to https://directline.botframework.com. Please ask your network administrator to enable this connection.

Manage conversation history

You can choose whether to store Azure Copilot conversation history in your tenant's own Cosmos DB instance. For more information, see Bring your own storage for conversation history in Azure Copilot.

Manage access to Agents (preview) in Azure Copilot

To manage access to Agents (preview) in Azure Copilot, an administrator can request or remove access at the tenant level. For more information, see Manage access to Agents (preview) in Azure Copilot.

Next steps

  • Last updated on