Configure users and teams in Copilot Studio Kit

After installing Copilot Studio Kit, assign security roles in the Power Platform admin center to users so they can configure new agents and tests. To streamline role assignments, use Microsoft Entra ID group and team memberships. Alternatively, you can assign roles manually to individual users. You can also set up column security profiles and restrict access to the environment if needed.

Copilot Studio Kit security roles

The following security roles are available in Copilot Studio Kit.

Assign security roles to users

Assign security roles to users so they have the permissions they need for configuring and testing agents in the Copilot Studio Kit. You can assign roles by creating Microsoft Entra ID teams (recommended) or by assigning roles to individual users.

Create Microsoft Entra ID teams to drive security role assignment (option 1)

Use Microsoft Entra group teams to manage user permissions. Users automatically inherit security roles when they're group members, so you don't need to assign roles individually.

1. Sign in to the Power Platform admin center.
2. Select Manage > Environments and select the environment where you installed Copilot Studio Kit.
3. Select See all under Access >Teams. (Alternatively, go to Settings > Users + permissions > Teams.)
4. Select + Create team.
5. Set the required properties, and for Team type, select either Microsoft Entra ID Security Group or Microsoft Entra ID Office Group.
6. Search (start entering characters) and select the desired Group name and Membership type.
7. Select Next.
8. For the Manage security roles step, select the desired Power CAT Copilot Studio Kit security role.
9. Select Save.

More information: Manage group teams

Assign security roles to individual users (option 2)

Security roles control a user's access to data through a set of access levels and permissions. To assign security roles to a user, you need to have the appropriate privileges.

1. Sign in to the Power Platform admin center.
2. Select Manage > Environments and select the environment where you installed Copilot Studio Kit.
3. Select See all under Access >Users. (Alternatively, go to Settings > Users + permissions > Users.)
4. If the user isn't in the list, add them by following a link at the top of the page.
5. Select the user.
6. Select Manage security roles.
7. Select the desired Power CAT Copilot Studio Kit security role.
8. Select Save.

More information: Assign a security role to a user

Set a Microsoft Entra ID security group to restrict access to the environment (optional)

To set a Microsoft Entra ID security group:

1. Sign in to the Power Platform admin center.
2. Select Manage > Environments and select the environment where you installed Copilot Studio Kit.
3. On the environment overview page, in the Details section, select Edit.
4. Search for and select a Security group.
5. Select Save.

More information: Control user access to environments with security groups and licenses

Set up a column security profile (optional)

Column security profiles let users or teams without the system administrator role access specific secured columns, such as Direct Line Channel Security Secret.

1. Sign in to the Power Platform admin center.
2. Select Manage > Environments and select the environment where you installed Copilot Studio Kit.
3. Select Settings > Users + permissions > Column security profiles.
4. Select Power CAT Copilot Studio Kit Column Security Profile.
5. Go to the Teams or Users tab, select Add Teams or Add Users, and add the relevant teams and/or users that you want to have access to these secured columns.

More information: Add teams or users to a column security profile to control access

Next step