External Graph connection

Last updated Oct 17, 2026 Inventory

AI summary

Microsoft Graph connectors index third-party data for Microsoft 365 Copilot results. Rencore Governance tracks these external connections, displaying properties such as connection state, risk scores, and documentation status. Policies flag security risks from unverified website data sources and connections lacking descriptions.

Microsoft Graph connectors are used to index third-party data, ensuring it appears Microsoft 365 Copilot results.

Part of the Copilot inventory.

In Rencore Governance

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Daily	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
BaseUrl	String	URL that indicates that the data source is a website.	`{{ExternalGraphConnection.BaseUrl}}`
Connector Id	String	The Teams app ID.	`{{ExternalGraphConnection.ConnectorId}}`
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	`{{ExternalGraphConnection.CreatedTime}}`
Description	String	Description of the connection displayed in the Microsoft 365 admin center.	`{{ExternalGraphConnection.Description}}`
Display Name	String		`{{ExternalGraphConnection.DisplayName}}`
Id	String	Developer-provided unique ID of the connection within the Microsoft Entra tenant.	`{{ExternalGraphConnection.Id}}`
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	`{{ExternalGraphConnection.LastModifiedTime}}`
Risk Score	Int32	Stores risk score	`{{ExternalGraphConnection.RiskScore}}`
Risk Score Update	DateTime	Stores risk score update	`{{ExternalGraphConnection.RiskScoreLastUpdate}}`
Risk Score Value	String	Stores risk score value like Low_Low	`{{ExternalGraphConnection.RiskScoreValue}}`
State	String	Indicates the current state of the connection. Allowed values: draft, limitExceeded, obsolete, ready, unknownFutureValue.	`{{ExternalGraphConnection.State}}`

Relations

This object does currently not have any relations.

Segments

This object does currently not have any segments.

Actions

This object does currently not have any actions.

Policy	Severity	Description
External website data source risk	High	External connections that load data from websites into M365 Copilot can introduce unverified, outdated, or malicious information, leading to incorrect results or risks.
Missing external connection documentation	Medium	Flags external connections lacking descriptions, ensuring users understand data sources in their Copilot results.

Frequently asked questions

What is the external Graph connection object in Rencore Governance?

Microsoft Graph connectors are used to index third-party data, ensuring it appears Microsoft 365 Copilot results. External Graph connection is an object type in the Copilot inventory of Rencore Governance.

Which properties does Rencore Governance collect for external Graph connection?

Rencore Governance collects 11 properties for External Graph connection, such as BaseUrl, Connector Id, Initially Scanned and 8 more.

Which policies check external Graph connection objects?

2 built-in policies check External Graph connection objects, such as External website data source risk and Missing external connection documentation.

How often is external Graph connection scanned?

By default daily. You can change the scan interval of External Graph connection objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the Copilot connector?

The Copilot connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is generally available.

Was this page helpful?