| Category | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| enterprise-data-protection | Enterprise Data Protection | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/enterprise-data-protection.md | -> [!IMPORTANT] -> The following information applies to Microsoft 365 Copilot currently and will start rolling out to Microsoft Copilot in the second half of September 2024 for users signed in with a Microsoft Entra account. - ## What is enterprise data protection in Microsoft 365 Copilot and Microsoft Copilot? The use of Microsoft 365 Copilot and Microsoft Copilot, as used by organizations, are covered by the terms of the [Data Protection Addendum (DPA)](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) and [Product Terms](https://www.microsoft.com/licensing/terms/product/PrivacyandSecurityTerms/all), with Microsoft acting as a data processor. Use of Microsoft 365 Copilot and Microsoft Copilot involves prompts (entered by - **We secure your data:** We help protect your data with [encryption](/purview/office-365-encryption-in-the-microsoft-cloud-overview) at rest and in transit, rigorous physical security controls, and data [isolation](/compliance/assurance/assurance-microsoft-365-isolation-controls) between tenants. -- **Your data is private:** We wonΓÇÖt use your data except as you instruct. Our commitments to [privacy](https://www.microsoft.com/trust-center/privacy) include support for [GDPR](/compliance/regulatory/gdpr), [ISO/IEC 27018](/compliance/regulatory/offering-ISO-27018)<sup>[3]</sup>, and our [Data Protection Addendum](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA).+- **Your data is private:** We wonΓÇÖt use your data except as you instruct. Our commitments to [privacy](https://www.microsoft.com/trust-center/privacy) include support for [GDPR](/compliance/regulatory/gdpr), [ISO/IEC 27018](/compliance/regulatory/offering-ISO-27018), and our [Data Protection Addendum](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA). - **Your access controls and policies apply to Copilot:** Copilot respects your [identity model](microsoft-365-copilot-privacy.md#how-does-microsoft-365-copilot-protect-organizational-data) and [permissions](microsoft-365-copilot-privacy.md#how-does-microsoft-365-copilot-use-your-proprietary-organizational-data), inherits your [sensitivity labels](/purview/sensitivity-labels#sensitivity-labels-and-microsoft-365-copilot), applies your [retention](/purview/retention-policies-copilot) policies, supports [audit](/purview/audit-search?tabs=microsoft-purview-portal) of interactions, and follows your administrative settings. The specific controls and policies will vary depending on the underlying subscription plan. When youΓÇÖre using plugins to help Microsoft 365 Copilot to provide more releva <sup>[1]</sup> The specific controls will vary depending on a customer's Microsoft subscription plans. -<sup>[2]</sup> Microsoft 365 Copilot supports HIPAA compliance for properly configured implementations. Microsoft Copilot is under review and doesn't support HIPAA compliance at this time. --<sup>[3]</sup> Microsoft 365 Copilot runs on the ISO 27018 certified Microsoft 365 platform. Microsoft Copilot will start rolling out to the same platform in the second half of September 2024, for users signed in with a Microsoft Entra account. +<sup>[2]</sup> Microsoft 365 Copilot supports HIPAA compliance for properly configured implementations. Microsoft Copilot is under review and doesn't support HIPAA compliance at this time. |
| admin | About Admin Roles | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/add-users/about-admin-roles.md | You'll probably only need to assign the following roles in your organization. By |Admin role |Who should be assigned this role? | |||-|Billing admin | Assign the Billing admin role to users who make purchases, manage subscriptions and service requests, and monitor service health. <br><br> Billing admins also can:<br> • Manage all aspects of billing<br> • Create and manage support tickets in the Azure portal <br/><br/> **Note:** Only Global admins can view and manage subscriptions purchased through a Partner.| +|Billing admin | Assign the Billing admin role to users who make purchases, manage subscriptions and service requests, and monitor service health. Billing admins cannot assign licenses; If a Billing admin is also a License or User Administrator, visit [Licenses](https://go.microsoft.com/fwlink/p/?linkid=842264) to assign licenses.<br><br> Billing admins also can:<br> • Manage all aspects of billing<br> • Create and manage support tickets in the Azure portal <br/><br/> **Note:** Only Global admins can view and manage subscriptions purchased through a Partner.| |Exchange admin | Assign the Exchange admin role to users who need to view and manage your user's email mailboxes, Microsoft 365 groups, and Exchange Online. <br><br> Exchange admins can also:<br> • Recover deleted items in a user's mailbox <br> • Set up "Send As" and "Send on behalf" delegates <br> | |Fabric admin | Assign the Fabric admin role to users who need to do the following: <br> • Manage all admin features for Microsoft Fabric and Power BI <br> • Report on usage and performance <br> • Review and manage auditing | |Global admin | Giving too many users global access is a security risk and we recommend that you have as few global admins as possible. <br/><br/> Only global admins can:<br> • Reset passwords for all users <br> • Add and manage domains <br> • Unblock another global admin <br/><br/> **Note:** The person who signed up for Microsoft online services automatically becomes a Global admin. | |
| commerce | Allowselfservicepurchase Powershell | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/subscriptions/allowselfservicepurchase-powershell.md | search.appverid: - MET150 description: "Learn how to use the AllowSelfServicePurchase PowerShell cmdlet to turn self-service purchase on or off." Previously updated : 05/21/2024 Last updated : 10/10/2024 # Use AllowSelfServicePurchase for the MSCommerce PowerShell module You can also manage **AllowSelfServicePurchase** settings in the Microsoft 365 a You can use the **MSCommerce** PowerShell module to: -- View the default state of the **AllowSelfServicePurchase** parameter value—whether it's enabled, disabled, or allows trials without a payment method-- View a list of applicable products and whether self-service purchase is enabled, disabled, or allows trials without a payment method+- View the default state of the **AllowSelfServicePurchase** parameter value +- View a list of applicable products and their **AllowSelfServicePurchase** parameter value - View or modify the current setting for a specific product to either enable or disable it-- View or modify the setting for trials without payment methods+- For Microsoft products only: view or modify the setting for trials without payment methods ## Requirements To use the **MSCommerce** PowerShell module, you need: - A Windows 10 or later operating system.-- PowerShell 5 or below. Currently, PowerShell 6.x/7.x isn't supported with this module.-- The Global or Billing admin role for your tenant to change the **MSCommerce** product policies.+- The Global or Billing Administrator role for your tenant to change the **MSCommerce** product policies. + [!INCLUDE [ga-roles-limitation](../../includes/ga-roles-limitation.md)] - The Global reader role for your tenant to see a read-only list of **MSCommerce** product policies. -## Install the MSCommerce PowerShell module +## Get started with the MSCommerce PowerShell module ++To get started using the **MSCommerce** PowerShell module, you must install it, import it into a PowerShell session, and then connect to it with your credentials. ++### Install the MSCommerce PowerShell module You install the **MSCommerce** PowerShell module on your Windows 10 device once and then import it into each PowerShell session you start. Download the **MSCommerce** PowerShell module from the [PowerShell Gallery](https://aka.ms/allowselfservicepurchase-powershell-gallery). To install the **MSCommerce** PowerShell module with **PowerShellGet**, run the Install-Module -Name MSCommerce ``` -## Import MSCommerce into the PowerShell session +### Import MSCommerce into the PowerShell session After you install the module on your Windows 10 device, you then import it into each PowerShell session that you start. To import it into a PowerShell session, run the following command: After you install the module on your Windows 10 device, you then import it into Import-Module -Name MSCommerce ``` -## Connect to MSCommerce with your credentials +### Connect to MSCommerce with your credentials To connect to the PowerShell module with your credentials, run the following command. To view a description of the **AllowSelfServicePurchase** parameter value and th Get-MSCommercePolicy -PolicyId AllowSelfServicePurchase ``` -## View a list of self-service purchase products and their status +## Use AllowSelfServicePurchase with Microsoft products ++This section contains information about how to view a list of Microsoft products for self-service purchase, their current status, and how to set the status. For information about third-party offer types, see [Use AllowSelfServicePurchase with third-party offer types](#use-allowselfservicepurchase-with-third-party-offer-types). ++### View a list of self-service purchase Microsoft products and their status -To view a list of all available self-service purchase products and the status of each, run the following command: +To view a list of available self-service purchase Microsoft products and the status of each, run the following command: ```powershell Get-MSCommerceProductPolicies -PolicyId AllowSelfServicePurchase ``` -The following table lists the available products and their **ProductId**. It also indicates which products have a trial available and don't require a payment method. If applicable, all other trials require a payment method. For the products that have trial without payment method enabled, you can enable the trial, while keeping the ability to purchase the product disabled. For sample commands, see View or set the status for **AllowSelfServicePurchase**. +The following table lists the available products and their **ProductId**. It also indicates which products have a trial available and don't require a payment method. If applicable, all other trials require a payment method. For the products that have trial without payment method enabled, you can enable the trial, while keeping the ability to purchase the product disabled. For sample commands, see [View or set the status for AllowSelfServicePurchase for Microsoft products](#view-or-set-the-status-for-allowselfservicepurchase-for-microsoft-products). | Product | ProductId | Is trial without payment method enabled? | |--|--|--| The following table lists the available products and their **ProductId**. It als | Visio Plan 2* | CFQ7TTC0HD32 | No | | Viva Goals (self-service trials only) | CFQ7TTC0PW0V | Yes | -*These IDs have changed. If you previously blocked products using the old IDs, they're automatically blocked using the new IDs. No other work is required. +*These items are updated IDs. If you previously blocked products using the old IDs, they're automatically blocked using the new IDs. No other work is required. -## View a list of self-service purchase "third party offer types" and their status +### View or set the status for AllowSelfServicePurchase for Microsoft products -To view a list of all available self-service purchase third-party offer types and the status of each, run the following command: --```powershell -Get-MSCommerceProductPolicies -PolicyId AllowSelfServicePurchase -Scope OfferType -``` --The following table lists the available third-party offer types. These offer types can be enabled or disabled for self-service purchase. --| Offer Type| ID | -|--|--| -| Software as a Service | SaaS | -| Power BI Visuals | POWERBIVISUALS | -| Dynamics 365 Dataverse Apps | DYNAMICSCE | -| Dynamics 365 Business Central | DYNAMICSBC | --## View or set the status for AllowSelfServicePurchase --You can set the **Value** parameter for **AllowSelfServicePurchase** to allow or prevent users from making a self-service purchase. You can also use the **OnlyTrialsWithoutPaymentMethod** value to allow users to try products that have no payment required trials. Refer to the product list above to see which products have these trials enabled. Users can only buy the product after the trial is over if **AllowSelfServicePurchase** is enabled. +You can set the **Value** parameter for **AllowSelfServicePurchase** to allow or prevent users from making a self-service purchase of a Microsoft product. You can also use the **OnlyTrialsWithoutPaymentMethod** value to allow users to try products that have no payment required trials. To see which products have these trials enabled, see the product list in [View a list of self-service purchase Microsoft products and their status](#view-a-list-of-self-service-purchase-microsoft-products-and-their-status). Users can only buy the product after the trial is over if **AllowSelfServicePurchase** is enabled. > [!NOTE] > Changing the value for **AllowSelfServicePurchase** or **OnlyTrialsWithoutPaymentMethod** only impacts trials or purchases made for the specified product from that point forward. Existing trials or purchases for the specified product aren't affected. The following table describes the settings for the **Value** parameter. -| Setting | Impact | +| Setting | Outcome | ||| | Enabled | Users can make self-service purchases and acquire trials for the product. | | OnlyTrialsWithoutPaymentMethod | Users can't make self-service purchases but can acquire free trials for products that don't require them to add a payment method. After the trial expires, a user can't buy the paid version of the product. | | Disabled | Users can't make self-service purchases or acquire trials for the product. | +Use the following commands to get or set policy settings, where ```<ProductID>``` is the string associated with the product name. + To get the policy setting for a specific product, run the following command: ```powershell-Get-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0KP0N +Get-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId ```<ProductID>``` ``` To enable the policy setting for a specific product, run the following command: ```powershell-Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0KP0N -Value "Enabled" +Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId <ProductID> -Value "Enabled" ``` To disable the policy setting for a specific product, run the following command: ```powershell-Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0KP0N -Value "Disabled" +Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId <ProductID> -Value "Disabled" ``` To allow users to try a specific product without a payment method, run the following command: ```powershell-Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0KP0N -Value "OnlyTrialsWithoutPaymentMethod" +Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId <ProductID> -Value "OnlyTrialsWithoutPaymentMethod" +``` ++## Use AllowSelfServicePurchase with third-party offer types ++This section contains information about how to view a list of self-service purchase for third-party offer types and their status, and how to set the status. ++### View a list of self-service purchase third-party offer types and their status ++To view a list of all available self-service purchase third-party offer types and the status of each, run the following command: ++```powershell +Get-MSCommerceProductPolicies -PolicyId AllowSelfServicePurchase -Scope OfferType ``` +The following table lists the available third-party offer types. These offer types can be enabled or disabled for self-service purchase. ++| Offer Type| ID | +|--|--| +| Software as a Service | SaaS | +| Power BI Visuals | POWERBIVISUALS | +| Dynamics 365 Dataverse Apps | DYNAMICSCE | +| Dynamics 365 Business Central | DYNAMICSBC | ++### View or set the status for AllowSelfServicePurchase for third-party offer types ++You can set the **Value** parameter for **AllowSelfServicePurchase** to allow or prevent users from making a self-service purchase of a third-party offer type. ++The following table describes the settings for the **Value** parameter. ++| Setting | Outcome | +||| +| Enabled | Users can make self-service purchases and acquire trials for the product. | +| Disabled | Users can't make self-service purchases or acquire trials for the product. | ++Use the following commands to get or set policy settings, where `<ID>` is the string associated with the offer type. + To get the policy setting for a specific third-party offer type, run the following command: ```powershell Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId $pr If there are multiple values for the product, you can run the command individually for each value as shown in the following example: ```powershell-Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId $product[0].ProductID -Value "Disabled" +foreach ($id in $product.ProductID) {UpdateUpdate-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId $product[0].ProductID -Value "Disabled" Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId $product[1].ProductID -Value "Disabled"-Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -OfferType SaaS -Value "Disabled" +Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -OfferType SaaS -Value "Disabled"} ``` -## Troubleshooting --### Problem +## Troubleshoot HandleError: Failed to retrieve policy with PolicyId 'AllowSelfServicePurchase' -You see the following error message: +In some cases, you might see the following error message: > HandleError : Failed to retrieve policy with PolicyId 'AllowSelfServicePurchase', ErrorMessage - The underlying connection was closed: An unexpected error occurred on a send. -This error might be due to an older version of Transport Layer Security (TLS). When you connect to this service, you must use TLS 1.2 or greater --### Solution +This error might be due to an older version of Transport Layer Security (TLS). When you connect to this service, you must use TLS 1.2 or greater. -Upgrade to TLS 1.2. The following syntax updates the ServicePointManager Security Protocol to allow TLS1.2: +To resolve this error, upgrade to TLS 1.2. The following syntax updates the ServicePointManager Security Protocol to allow TLS1.2: ```powershell [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12 |
| commerce | Manage Self Service Purchases Admins | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/subscriptions/manage-self-service-purchases-admins.md | You can use the Microsoft 365 admin center to manage self-service purchases and The **MSCommerce** PowerShell module includes a **PolicyID** parameter value for **AllowSelfServicePurchase**. This parameter lets you control whether users in your organization can make purchases or start trials, and for which products. The module lets you do the same tasks available in the Microsoft 365 admin center, only from the command line. In addition, the module lets you view the default state of the **AllowSelfServicePurchase** parameter value for each product. > [!IMPORTANT]-> When you use the **AllowSelfServicePurchase** policy, it controls both purchases and trials. For a list of the products available, see [View a list of self-service purchase products and their status](allowselfservicepurchase-powershell.md#view-a-list-of-self-service-purchase-products-and-their-status). +> When you use the **AllowSelfServicePurchase** policy, it controls both purchases and trials. For a list of the products available, see [View a list of self-service purchase Microsoft products and their status](allowselfservicepurchase-powershell.md#view-a-list-of-self-service-purchase-microsoft-products-and-their-status). For more information, see [Use AllowSelfServicePurchase for the MSCommerce PowerShell module](allowselfservicepurchase-powershell.md). |
| enterprise | Microsoft 365 Endpoints | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/microsoft-365-endpoints.md | Title: "Microsoft 365 endpoints" Previously updated : 01/19/2024 Last updated : 10/10/2024 audience: ITPro To automate getting the latest list of endpoints for your Microsoft 365 cloud, s For more endpoints, see these articles: - [Additional endpoints not included in the Web service](additional-office365-ip-addresses-and-urls.md)+- [Unified cloud.microsoft domain for Microsoft 365 apps](cloud-microsoft-domain.md) - [Network requests in Office 2016 for Mac](network-requests-in-office-2016-for-mac.md) If you're a network equipment vendor, join the [Office 365 Networking Partner Program](microsoft-365-networking-partner-program.md). Enroll in the program to build Microsoft 365 network connectivity principles into your products and solutions. |
| syntex | Syntex Licensing | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/syntex/syntex-licensing.md | More Syntex services will be added as they become available. ### Feature limited preview -Pay-as-you-go licensing includes access to additional Syntex features for a limited time as a preview. The feature limited preview ends September 20, 2024. You won't be charged on a pay-as-you-go basis during the preview. These features include: +Pay-as-you-go licensing includes access to additional Syntex features for a limited time as a preview. The feature limited preview ends December 31, 2024. You won't be charged on a pay-as-you-go basis during the preview. These features include: - Content query - Universal annotations |