Copilot permissions
AI summary
Rencore Governance requires specific Microsoft permissions through the Copilot authenticator. Review each permission, which inventory objects depend on it, and the Microsoft documentation to understand what data access you are granting.
The permissions Rencore Governance requests through the CopilotMicrosoft 365 CopilotMicrosoft 365 Copilot is the AI assistant in the Microsoft 365 apps. Rencore Governance covers it with the Copilot connector, part of the AI & Agents module.Read more authenticator, and the inventory objectsInventory objectAn inventory object is one item Rencore Governance has scanned from a connector, such as a single Team, SharePoint site collection, user or Power App.Read more that rely on each one. Each permission links to its Microsoft documentation.
See Microsoft permissions for every authenticator, and Required permissions for how consent works.
Permissions
| Permission | Description | Type | Used by |
|---|---|---|---|
Read all external connections ExternalConnection.Read.All | Allows the app to read all external connections without a signed-in user. | Application | External Graph connection |
Read all usage reports Reports.Read.All | Allows an app to read all service usage reports without a signed-in user. Services that provide usage reports include Microsoft 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more and Microsoft Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more. | Application | Summary of active user (report) , Trend of daily active user (report) , Copilot user activity (report) , User activity , Usage , User activity , Device usage |
Read audit logsAudit logThe audit log records the actions performed in a Rencore Governance Workspace, with who did it and when.Read more data from all services AuditLogsQuery.Read.All | Allows the app to read and query audit logs from all services. | Application | |
Read user AI enterprise interactions AiEnterpriseInteraction.Read.All | Allows the app to read all AI enterprise interactions. | Application | M365 Copilot session |
Frequently asked questions
Which permissions does the Copilot authenticator request?
Which permissions does the Copilot authenticator request?4 permissions: Read all external connections, Read all usage reports, Read audit logs data from all services and Read user AI enterprise interactions.
What are the Microsoft names of the Copilot permissions?
What are the Microsoft names of the Copilot permissions?ExternalConnection.Read.All, Reports.Read.All, AuditLogsQuery.Read.All and AiEnterpriseInteraction.Read.All.
Are the Copilot permissions application or delegated permissions?
Are the Copilot permissions application or delegated permissions?All 4 permissions are application permissions.
Which inventories need the Copilot permissions?
Which inventories need the Copilot permissions?The inventories of Copilot, Microsoft 365 and Teams.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?