Policies for Copilot
AI summary
Copilot includes policy templates organized into four categories: external access and guests, licenses and costs, user adoption, and agent answer quality. Each policy has a severity level, and some templates are marked as Recommended starting points. Use these to understand what each policy flags and which ones matter most for your organization.
These are the policy templatesPolicyA policy is a governance rule that Rencore Governance checks against your inventory, for example Teams without owners.Read more for CopilotMicrosoft 365 CopilotMicrosoft 365 Copilot is the AI assistant in the Microsoft 365 apps. Rencore Governance covers it with the Copilot connector, part of the AI & Agents module.Read more, grouped by what they look for. Each template checks one kind of object and flags every item that breaks the rule. The severity shows how serious a violation is; a Recommended pill marks the templates Rencore recommends you start with.
See the Copilot inventory reference for the objects these templates work on.
Guests and external access 1
Guests, external usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more and content shared outside your organization.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| External website data source risk Recommended | External connections that load data from websites into M365 Copilot can introduce unverified, outdated, or malicious… | High | External Graph connection |
Licenses and costs 2
Licenses, spend and storage that cost money without being used.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Copilot license assigned to disabled account Recommended | Flags disabled accounts retaining active Copilot licenses, enabling immediate cost recovery through license… | High | User |
| Inactive Copilot users - 30 days Recommended | Reports on users with unused Copilot licenses for 30+ days, enabling proactive engagement or license reallocation. | Medium | User |
Adoption 1
How well people use the tools you have rolled out.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Copilot adoption opportunity - E3/E5 users Recommended | Identifies E3/E5 licensed usersLicensed userA licensed user is a user of the connected tenant that counts toward your Rencore Governance Subscription.Read more eligible for Copilot, helping prioritize rollout to users with necessary prerequisites. | Medium | User |
Agent answer quality 1
Settings that affect how reliable an agent's answers are.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Missing external connection documentation Recommended | Flags external connections lacking descriptions, ensuring users understand data sources in their Copilot results. | Medium | External Graph connection |
Frequently asked questions
How many built-in policies does Rencore Governance provide for Copilot?
5 built-in policies, such as Copilot adoption opportunity - E3/E5 users, Copilot license assigned to disabled account and 3 more.
How are the Copilot policies grouped?
By category: Guests and external access, Licenses and costs, Adoption and Agent answer quality.
Which Copilot policies are recommended?
Copilot adoption opportunity - E3/E5 users, Copilot license assigned to disabled account, External website data source risk and 2 more.
Which module includes the Copilot connector?
The Copilot connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is generally available.