Dataverse and Copilot Studio

Before you can give consent for Copilot Studio, you will need an Entra ID application in the tenant you want to scan. This page shows how to create the app, and how to set up a Dataverse Environment by hand if Rencore Governance cannot set it up for you.

Create an Entra ID app

To create the app, you will need to:

1. Go to the Microsoft Entra Admin Center.

2. In the left-hand navigation menu, go to “Entra ID”.

3. Then click on “App registrations”.

4. At the top of this page, click ”+ New registration”.

   

   1. In “Name” enter “Dataverse Access for Rencore Governance”.
   2. For “Supported account types”, select “Accounts in this organizational directory only”.
   3. Click “Register”.

5. On the app’s “Overview” page, copy the “Application (client) ID” and the “Directory (tenant) ID”. You will need both when you give consent.

Create a Client Secret

To create a client secret, you will need to:

1. In the app, under “Manage”, click on “Certificates & secrets”.

2. Select “Client secrets” and then click ”+ New client secret”.

   

   1. In the Description enter something like “RencoreGovernance_Copilot”.
   2. Set “Expires” to “Recommended: 180 days (6 months)”.
   3. Click “Add”.
   Tip: Copy the Value immediately, as it will only be displayed once and you will need it later.
   Note: When the secret expires, Rencore Governance can no longer scan Copilot Studio. Create a new secret before then and give consent again with the new Value.

Set API Permissions

To add the API permission, you will need to:

1. In the app, under “Manage”, click on “API permissions”.

2. Click ”+ Add a permission”.

   1. Select “Dynamics CRM”.

   2. Select “user_impersonation”.

      

   3. Click “Add permissions”.

Once the app is ready, give consent as described in Copilot Studio Consent.

How Environments are set up

When you give consent, you register the app as a Power Platform management application with the script in the consent dialog. Rencore Governance then sets up every Environment it scans during the next Data Collection Job. In each Environment, it creates a read-only “Rencore Governance” security role and an application user for your app, and assigns the role to that user.

This works for Environments that Rencore Governance finds by itself and for Environments you list in “Environment Names”. You do not need to follow the manual steps below unless an Environment fails to connect.

Set up an Environment manually

If “See details” in “Manage consent” lists an Environment under the ones that failed to connect, you can set it up yourself. Repeat these steps for each failed Environment.

Create the Security Role

To create the security role, you will need to:

1. Go to the Power Platform Admin Center.

2. Click on the Environment that failed to connect.

3. Make sure you are a “System Administrator” of the Environment.

   1. Click on “Membership” on the top Navbar.
   2. On the new Dialogue window, click ”+ Add me”.

4. Return to the Environment details page and click on “Settings” on the top Navbar.

   

5. Under the “Users + permissions” heading, click “Security roles”.

6. Click ”+ New role” at the top of the page.

   1. Enter “Rencore Governance” for the “Role Name”.
   2. Select the Environment for the “Business unit”.
   3. Leave the other settings alone and click “Save”.

Permissions for the Security Role

On the Security Role Details page of the new role, use the search function in the top-right of the screen. Set “Read” to “Organization” for each of the following tables:

Table	Name
AICopilot	aicopilot
AIPlugin	aiplugin
Agent	bot
Agent component	botcomponent
ConversationTranscript	conversationtranscript
Process	workflow
Organization	organization
Team	team
User	systemuser

Create the Application User

To create the application user, you will need to:

1. On the Environment details page, click “See all” under the “S2S Apps” on the right.

2. Click ”+ New app user” above the Navbar.

   1. On the new dialogue window, click ”+ Add an app”.

   2. In the search, type “Dataverse Access for Rencore Governance”.

      

   3. Select the app and click “Add”.

   4. Select the Environment for the “Business unit”.

   5. Click the pencil next to “Security roles”.

      1. Select the role “Rencore Governance”.
      2. Click “Save”.

   6. On the “Role assignment confirmation”, click “Save”.

3. Click “Create”.

The next Data Collection Job tries the Environment again.