Governance & Security Guide

A five-phase model for governing Copilot Studio agents

Microsoft divides Copilot Studio projects into five key phases. Administrators and makers can review the pertinent security and governance areas for each specific phase of the project lifecycle.

  1. Phase 1 — Discovery & Planning

    • Classify the sensitivity of all documented data sources and run a data protection & risk assessment.
    • Establish Managed Environment policies and govern access to premium connectors and features.
    • Allocate message capacity at the environment level using add-ons.
  2. Phase 2 — Architecture & Design

    • Maintain distinct Development, Testing, and Production environments with environment routing.
    • Secure the tenant with Lockbox, Dataverse audit, IP firewall, and IP cookie binding.
    • Define allowed authentication (Entra ID vs. manual / none) and apply environment-level DLP policies.
    • Enable MFA for all Power Platform and Copilot users via Microsoft Entra ID.
  3. Phase 3 — Build & Integration

    • Validate the agent against DLP rules in Dev, Test, and Production.
    • Create Environment Groups and configure their policies (premium feature).
    • Refine tenant-wide DLP policies to align with the project architecture.
  4. Phase 4 — Testing, Deployment & Launch

    • Validate DLP & RBAC: environment policies, roles, and connections in production.
    • Confirm all dependencies are configured correctly in the production environment.
    • Use service principal accounts for production deployment and connector authentication.
  5. Phase 5 — Monitoring & Optimization

    • Monitor tenant, environment, and agent security via the Power Platform admin center.
    • Pilot new releases in test environments before wider rollout.
    • Run regular governance reviews of environment configs and DLP settings.

Key configuration settings

A quick reference for where each governance control is applied across the tenant and its environments.

ControlScopeWhere it is configured
Capacity ManagementTenant / Environment-LevelAdd-ons via DLP Policies or Capacity
Data Loss PreventionTenant & EnvironmentPPAC → DLP Policies
Authentication ControlPer AgentAuthentication in Copilot Studio (Entra ID)
Environment IsolationDev / Test / ProdManaged Environments & Environment Groups
Tenant HardeningTenantLockbox, IP firewall, IP cookie binding, Dataverse audit
Network SecurityEnvironmentAzure Private Link, firewalls, service endpoints
Identity & AccessTenantMicrosoft Entra ID + MFA + RBAC roles