Copilot Control System explained

With the Copilot Control System, you can control Copilot experiences spanning IT administrator tools used every day across the Microsoft 365, Microsoft Purview, and Power Platform admin centers. As an IT administrator, you’re in control of Microsoft 365 Copilot and agent experiences, ensuring security and compliance while optimizing productivity.

Copilot Control System focuses on three core areas, where Microsoft Copilot services and the agents you create and use have unmatched manageability and visibility, compared to other AI options.

— Protect your data by enabling intelligent grounding on enterprise data that respects your organization’s controls.

— Govern access and usage by setting who can use Copilot and agents, while monitoring agent status and lifecycle.

— Measure impact effectively with detailed insights into adoption patterns and ROI, helping you track and maximize business value.

Keep data safe.

Copilot respects your access controls and applies top-ranked sensitivity labels automatically. Check it out.

Improved security for generative AI and agents.

Integrations to detect risks and optimize permissions for your organization’s critical information using Copilot Control System. See it here.

Drive insights with Copilot Analytics.

Track ROI, engagement, and satisfaction for smarter decisions. Take a look.

Watch our video here.

QUICK LINKS:

00:00 — Copilot Control System

00:40 — Data Protection

01:32 — Built-in Content Filters

02:33 — Management Controls

03:12 — Measurement and Reporting

03:59 — Wrap up

Unfamiliar with Microsoft Mechanics?

As Microsoft’s official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.

• Subscribe to our YouTube:https://www.youtube.com/c/MicrosoftMechanicsSeries
• Talk with other IT Pros, join us on the Microsoft Tech Community:https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog
• Watch or listen from anywhere, subscribe to our podcast:https://microsoftmechanics.libsyn.com/podcast

Keep getting this insider knowledge, join us on social:

• Follow us on Twitter:https://twitter.com/MSFTMechanics
• Share knowledge on LinkedIn:https://www.linkedin.com/company/microsoft-mechanics/
• Enjoy us on Instagram:https://www.instagram.com/msftmechanics/
• Loosen up with us on TikTok:https://www.tiktok.com/@msftmechanics
  
  

Video Transcript:

-With more people using AI than ever, most generative AI options don’t have the right protections for your data, but it doesn’t have to be that way. As a business using Microsoft 365 Copilot and agents, you’re in control with the Copilot Control System, using contextual controls spanning the admin tools that you’re already using every day in the Microsoft 365 admin center, Microsoft Purview Data Security, the Power Platform admin center and more, as well as content safety controls built into the Copilot service itself. Let’s first take a look at how these come together to keep your users and your data protected. Importantly, Microsoft 365 Copilot respects the controls you’ve already set for file and information access. When you submit a prompt, it can only retrieve grounding information that you specifically have access to. Your content classifications are displayed to users as they author prompts.

-And the highest ranked labels are inherited for any generated responses, so your information is protected. This is all based on the data security controls that you’ve put in place using sensitivity labels and corresponding information protection policies to control the use of your data. Additionally, Microsoft builds content filters into Copilot to protect you against harmful content, including jailbreaks or prompt injection attacks, where an insider or external user attempts to add additional instructions, where they try to access information they shouldn’t have access to in generated responses.

-And if you have concerns that your existing information access policies and controls are currently too permissive and content is overshared, to help with that, Microsoft 365 Copilot now includes SharePoint Advanced management capabilities, to help you both detect where your data may be at risk for oversharing with detailed reporting, and help you operationalize SharePoint site access reviews, where content is stored to right-size access for everyone in your organization. Microsoft Purview’s Data Security Posture Management for AI adds even more protection insights spanning Copilot and other generative AI tools that are in use in your organization.

-Next, Microsoft 365 Copilot has extensive Management Controls, allowing you to tailor the experience. As an administrator, you can control exactly who has access to Copilot services, along with the apps where your users can access Copilot experiences from. And as users create and publish Agents in Copilot Studio, they can also control the people or groups who can access them.

-And as an admin, you also have controls to fine-tune the agent capabilities you want to allow, as well as which internal or external data sources are available as knowledge sources or agent actions to anyone who’s creating agents. Then detailed Measurement & Reporting gives you insight into how Copilot and Agents are being used along with their business impact. For creators, Copilot Studio provides rich analytics for each agent, including outcomes and user engagement, session topics, knowledge sources used, and satisfaction. And from the Microsoft 365 admin center, you’ll find key details spanning usage, high-level business impact, and user satisfaction. And using Copilot analytics as part of Viva Insights, also included with Microsoft 365 Copilot, it helps measure Copilot adoption with detailed business impact and ROI insights, as well as customizable reporting for even deeper analysis.

-And together with all of these capabilities, the Copilot Control System gives you an unmatched level of control for Copilot and agent experiences.