Control access to Microsoft Copilot in Viva

Note

UI-based access management is available only for supported Viva apps and Copilot features. The options displayed can vary based on your tenant's licenses, administrator role, cloud environment, and feature availability. See Control access to features in Microsoft 365 for the current list of supported features.

You can manage access to supported Copilot features in Viva apps that are available in your tenant. Available controls, supported policy types, and required administrator roles vary by app and feature.

Turn Copilot access on or off in your organization

  1. From your Microsoft 365 admin center, select Copilot.
  2. Then choose the app for which you want to control access.
  3. Your Org-wide setting shows whether access is enabled for your entire organization.
  4. To turn this setting on or off, choose Manage.
  5. Select On or Off to set the default Copilot access for your organization. Custom policies assigned to specific people or groups can override this org-wide setting.
  6. Select Save.

Your change can take up to 24 hours to go into effect.

Enable access for select people or groups

You can enable or disable Copilot in Viva apps for individuals or groups. You can create multiple custom policies. Custom policies take precedence over the org-wide setting. If more than one custom policy applies to a user, review the Feature Access Management policy-precedence rules to determine the effective setting.

  1. Go to the Copilot settings page in your Microsoft 365 admin center.
  2. Choose the app for which you want to control access.
  3. Under Custom policies for people and groups select Create policy.
  4. Give your policy a descriptive name. For example, "Disable for users in office X".
  5. Choose Off for specific people if you want to disable access to Copilot in the Viva app for only people you select. Choose On for specific people if you want to enable access to Copilot in Viva app for only the people you select.
  6. Add the people or groups you want the policy to apply to.
  7. Select Save.

Your change can take up to 24 hours to go into effect.

You can view the details of your policy by selecting it from the list in the Manage access pane. View everyone your policy applies to by selecting View details.

Edit an existing custom policy

  1. Go to the Copilot settings page in your Microsoft 365 admin center.
  2. Choose the app for which you want to edit an existing custom policy.
  3. Select the ellipsis next to the policy you want to edit.
  4. Select Edit.
  5. Make any changes and select Save.

Delete an existing custom policy

  1. Go to the Copilot settings page in your Microsoft 365 admin center.
  2. Choose the app for which you want to delete an existing custom policy.
  3. Select the ellipsis next to the policy you want to delete.
  4. Select Delete.
  5. When prompted, select Delete.