| Category | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| microsoft-365-copilot-ai-security | Microsoft 365 Copilot Ai Security | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/microsoft-365-copilot-ai-security.md | + + Title: AI security for Microsoft 365 Copilot +f1.keywords: NOCSH +++ Last updated : 10/23/2024+audience: Admin +++ms.localizationpriority: medium ++description: Learn how Microsoft 365 Copilot integrates AI to enhance productivity while maintaining robust security and compliance measures. +++# AI security for Microsoft 365 Copilot ++AI has revolutionized many sectors, providing unprecedented capabilities and efficiencies. For example, [Microsoft 365 Copilot](/office365/servicedescriptions/office-365-platform-service-description/microsoft-365-copilot), our AI-powered productivity tool, coordinates large language models (LLMs), content in Microsoft Graphs, and the Microsoft 365 productivity apps such as Word, Excel, PowerPoint, Outlook, Teams, SharePoint, and others. This integration provides real-time intelligent assistance, enabling users to enhance their creativity, productivity, and skills. ++Customers are keen to explore these opportunities, and they’re thoughtfully considering the important aspects of security that come with them. Based on our interactions with customers who are on their AI transformation journey, we understand that topics such as data security, privacy, model robustness, and cyberattacks are top of mind. ++Microsoft understands how critical these considerations are, which is why we employ robust defense-in-depth strategy to make sure productivity tools like Microsoft 365 Copilot are protected against security risks. This multi-layered approach involves a combination of advanced threat intelligence, rigorous security practices, and proactive safeguards. For example, in addition to our own red-teaming exercises to test Microsoft 365 Copilot, we engaged Casaba Security to test nine Copilot implementations across the Microsoft 365 product suite. We promptly addressed and resolved the findings of [their testing](https://servicetrust.microsoft.com/DocumentPage/67d59873-b315-4768-a057-8583cd84680a), which focused on identifying Open Worldwide Application Security Project's (OWASP) top 10 for LLM as well as traditional security vulnerabilities in supporting application infrastructure. ++Microsoft takes extensive steps to ensure that Microsoft 365 Copilot is compliant with our existing privacy, security, and compliance commitments to our customers. And as AI technologies and use cases continue to evolve, our work is never done: Microsoft is committed to continuously advancing protections for Copilot, learning from our own monitoring and testing of our systems, as well as working with customers, partners, and the broader security industry. ++This article provides an overview of Microsoft’s overall security posture for AI, and how different Microsoft security solutions work together to help secure your data and interactions in Microsoft 365 Copilot and other AI applications. We will update this article with new information about emerging risks and innovations in solutions as they become available. ++## Securing Microsoft 365 Copilot ++At Microsoft, security isn't just a priority; it's the foundation for everything we do. This commitment extends to AI: not only does the Microsoft Office of Responsible AI guide safety and security on our AI journey, our recently expanded [Secure Future Initiative](https://aka.ms/SFIwebsite) further reflects our dedication to create a safer digital landscape for everyone. ++Our comprehensive security posture for AI has the following pillars: ++- **Responsible AI development**: Microsoft champions [responsible AI principles](https://www.microsoft.com/ai/responsible-ai). These principles emphasize fairness, reliability and safety, privacy and security, inclusiveness, transparency, and accountability throughout the AI lifecycle. +- **Security best practices**: We provide tailored resources and best practices for developers, engineers, and security professionals working with Microsoft AI products. These resources help organizations understand and implement security measures during deployment. +- **Security development lifecycle (SDL)**: Our rigorous SDL integrates security considerations throughout the entire AI development process. This proactive approach ensures vulnerabilities are identified and mitigated from the very beginning. +- **Threat research, detection, and mitigation**: We actively invest in strategies to detect and mitigate threats to our AI models. This includes ongoing vulnerability monitoring and developing countermeasures against potential attacks. Microsoft Threat Intelligence, our global network of researchers, also monitors the [threat landscape](https://www.microsoft.com/security/blog/threat-intelligence/ai-threats/) for threat actors and cyberattacks that might take advantage of AI applications. ++Microsoft safeguards privacy, security, and reliability for Microsoft 365 Copilot’s AI features, from the user input stage through the system output stage. Microsoft 365 Copilot is compliant with our existing [privacy, security, and compliance commitments](microsoft-365-copilot-privacy.md), including the General Data Protection Regulation (GDPR) and European Union (EU) Data Boundary. In keeping with these commitments, the information in any prompts entered using Copilot, the retrieved data and generated responses remain within the Microsoft 365 service boundary. ++The following sections cover how Microsoft addresses various aspects of privacy, security, and compliance that are important customer considerations for adopting Microsoft 365 Copilot. ++### Access control and permissions management ++Microsoft 365 Copilot accesses resources on behalf of the user, so it can only access resources the user already has permission to access. If the user doesn’t have access to a document for example, then Microsoft 365 Copilot working on the user’s behalf will also not have access either. ++The data that it used to generate responses is processed within the Microsoft 365 service boundary and is also encrypted in transit, helping safeguard privacy and prevent data leakage. In addition, Microsoft 365 data, including data from Microsoft Graph and SharePoint, adheres to access control and auditing mechanisms. ++Microsoft 365 Copilot respects Microsoft 365, Microsoft Entra, and Microsoft Purview policies that further limit user access and permission, such as information barriers, Conditional Access, and sensitivity labels. ++Microsoft 365 Copilot inherits data loss prevention (DLP) policies to prevent data exfiltration of Copilot-generated responses. Additionally, it enhances data security by applying sensitivity labels to these responses. ++### Protecting data during model training ++Microsoft 365 Copilot uses pretrained LLM models hosted by Microsoft; it doesn’t use customer data to train these models. In addition, prompt and grounding data isn’t used to train AI models and is never shared with OpenAI or other third parties. ++### Honoring data residency requirements ++Microsoft honors data residency commitments as outlined in the Microsoft Product Terms and Data Protection Addendum. Microsoft [Advanced Data Residency (ADR)](/microsoft-365/enterprise/advanced-data-residency) and [Multi-Geo Capabilities](/microsoft-365/enterprise/microsoft-365-multi-geo) offerings include data residency commitments for Microsoft 365 Copilot customers as of March 1, 2024. For European Union (EU) users, Microsoft has additional safeguards to comply with the [EU Data Boundary](/privacy/eudb/eu-data-boundary-learn). EU traffic stays within the EU Data Boundary while worldwide traffic can be sent to the EU and other countries or regions for LLM processing. ++All data sent for AI processing is encrypted both in transit and at rest. To ensure that data remains secure throughout the processing lifecycle, Microsoft 365 uses FIPS 140-2-compliant service-side technologies that encrypt customer content at rest and in transit, including BitLocker, per-file encryption, Transport Layer Security (TLS) 1.2, and Internet Protocol Security (IPsec). ++### Hardening against prompt injections ++Microsoft uses a combination of advanced machine learning for content filtering at multiple layers, rigorous security protocols, and continuous monitoring. Indirect or cross-prompt injection classifiers detect and block prompt injection at multiple layers. Meanwhile, defenses, such as the following, also help minimize the security impact of cross-prompt injection attacks (XPIA): ++- XPIA classifiers are used to detect and reduce instances of XPIA ++- Requirement for human-in-the-loop (user-initiated or approved actions) for privileged actions and actions that could alter or egress content, such as sending out an email message ++- Unnecessary data egress mechanisms are removed to prevent data exfiltration ++Additionally, in the context of a prompt injection attack, the attacker can only access data to the extent that the user has access to. This means that the attacker is limited to the permissions and data that the user has within the system. This limitation helps to contain the potential damage of a prompt injection attack to the scope of the user's permissions. ++### Adhering to Responsible AI principles ++Microsoft Responsible AI principles guide the development and use of Microsoft 365 Copilot. For example, Microsoft 365 Copilot implements classifiers, such as those available in [Azure AI Content Safety](/azure/ai-services/content-safety/), and metaprompting to help reduce the risk of harmful, offensive, or violent content. Microsoft 365 Copilot uses AI-based classifiers and content filters to flag different types of potentially harmful content in user prompts or generated responses. Meanwhile, metaprompting guides model behavior, including making sure that the system behaves in accordance with Microsoft's AI principles and user expectations. ++Microsoft also applies prompt inspection technology and content filters to prevent the use of Microsoft 365 Copilot for ransomware and other malware-based attacks. In addition, the Security Development Lifecycle (SDL) helps secure Microsoft 365 Copilot against remote code execution. One way we do this involves preventing Copilot from running unconstrained and unsandboxed code. ++To help prevent ungrounded content, Microsoft 365 Copilot implements retrieval augmented generation (RAG) by using a dedicated semantic database that can provide information on the content of Microsoft 365 tenant customers. Microsoft continuously and carefully reviews changes in the grounding level of the response. For any changes we make to Microsoft 365 Copilot (including prompt, model, or orchestration), we catch regressions that could adversely impact the user. ++There are [new tools in Azure AI](https://azure.microsoft.com/blog/announcing-new-tools-in-azure-ai-to-help-you-build-more-secure-and-trustworthy-generative-ai-applications/) that help further enhance these safeguards by helping AI app developers build more secure AI applications. ++### Protecting copyright and intellectual property ++Microsoft has built-in protections against the generation of protected content, which includes the industry’s first [Customer Copyright Commitment](https://blogs.microsoft.com/on-the-issues/2023/09/07/copilot-copyright-commitment-ai-legal-concerns/) program to defend customers and compensate for any adverse judgments, in the event of a copyright infringement lawsuit. ++### Meeting regulatory requirements ++Microsoft 365 Copilot meets regulatory requirements for eDiscovery, audit logging, and retention through several mechanisms: ++- Retention policies: Messages from Microsoft 365 Copilot are automatically included in the retention policy location named Teams chats and Copilot interactions. This means that user prompts and Copilot responses can be retained and deleted for compliance reasons. The data from Copilot messages is stored in a hidden folder in the mailbox of the user who runs Copilot, which compliance administrators can search with eDiscovery tools. ++- Audit logging: Audit logs generated by Microsoft 365 Copilot can be retained for up to 180 days for Audit (Standard) customers and up to one year for Audit (Premium) license holders, with the option to extend up to 10 years. ++- Compliance with Microsoft Purview: Microsoft Purview provides data security and compliance protections for generative AI apps like Copilot. The Microsoft Purview AI Hub, currently in preview, provides easy-to-use graphical tools and reports to quickly gain insights into AI use within the organization. One-click policies help [protect data and comply with regulatory requirements](/purview/ai-microsoft-purview). ++- Admin controls: Admins can use Microsoft Purview to view and manage stored data, set retention policies, and perform eDiscovery searches. Both admin and user-initiated deletion options are available via Purview. ++## Frequently asked questions ++### Are the results of Microsoft 365 Copilot reliable? ++While Microsoft safeguards provide strong threat mitigation against misinformation and compromise, as with any AI application, Microsoft 365 Copilot’s responses might not always be accurate. You should still apply human judgment to check these responses. ++### Does Microsoft have access to my prompts and responses? ++As with other Microsoft 365 content like email, documents, and chats, Microsoft has no eyes-on access to prompts or responses in Microsoft 365 Copilot. ++### Does Microsoft 365 Copilot use my data to train AI models? ++Prompts, responses, and data accessed through Microsoft Graph aren't used to train foundation LLMs, including those used by Microsoft 365 Copilot. Product improvements are driven through customer-reported incidents and synthetic prompt generation. ++### What should I do if I see unexpected or offensive content? ++Report any disturbing or suspicious content immediately by selecting the downvote (thumbs down) button beside the prompt response. ++### How can I access the Microsoft 365 Copilot vulnerability assessment report? ++The third-party vulnerability assessment of Microsoft 365 Copilot can be downloaded from [Service Trust Portal](https://servicetrust.microsoft.com/DocumentPage/67d59873-b315-4768-a057-8583cd84680a). ++### Can Microsoft help me find risks in my AI applications? ++Microsoft has released Python Risk Identification Toolkit for generative AI ([PyRIT](https://github.com/Azure/PyRIT)), an open access automation framework that aims to empower security professionals and machine learning engineers to proactively [find risks](https://www.microsoft.com/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/) in their own generative AI systems. ++### Does Microsoft 365 Copilot have access to data I don’t have when grounding content? ++Microsoft 365 Copilot accesses resources on behalf of the user, so it can only access resources you already have permission to access. ++Grounding occurs within the context of your identity, and the semantic index and graph queries are "security trimmed" based on your permissions for the underlying content. This process ensures that only authorized content is included in the grounding process. ++### How can I limit data that Microsoft 365 Copilot can use? ++The following steps can help administrators control user access and therefore limit what data Microsoft 365 Copilot can use: ++- [Restrict SharePoint site access](/sharepoint/restricted-access-control) and [OneDrive content access](/sharepoint/onedrive-site-access-restriction) to specific groups, even after content has been overshared. +- [Use Restricted SharePoint Search](/sharepoint/restricted-sharepoint-search) to limit the websites from which Microsoft 365 Copilot is permitted to reference content. +- [Use Microsoft SharePoint Premium - SharePoint Advanced Management](/sharepoint/advanced-management), which offers reports and tools to analyze and manage overly permissive access-control lists and sharing links across the environment. +- [Review information protection considerations](/purview/ai-microsoft-purview-considerations#information-protection-considerations-for-copilot) for Copilot. Microsoft 365 Copilot honors EXTRACT permissions, inherit labels from referenced files, and automatically labels Copilot-generated content using the [Microsoft Endpoint Data Loss Prevention (DLP)](/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-purview-service-description#microsoft-data-loss-prevention-endpoint-data-loss-protection-dlp). +- [Apply sensitivity labels](https://support.microsoft.com/office/apply-sensitivity-labels-to-your-files-and-email-2f96e7cd-d5a4-403b-8bd7-4cc636bae0f9) to your Microsoft 365 files and email. For Microsoft Purview customers, administrators can [create and configure sensitivity labels](/purview/create-sensitivity-labels) that they want to make available for apps and other services. +- [Use Microsoft Purview AI Hub](/purview/ai-microsoft-purview) (currently in preview) to discover sensitive data shared with Copilot, see files referenced in Copilot responses, and discover unlabeled files referenced by Copilot and associated SharePoint sites, thereby letting you identify and protect files at risk of overexposure. +- Set up policies that remove old and unused data and limit data sprawl due to data oversharing with [Microsoft Purview Data Lifecycle Management](/purview/data-lifecycle-management). ++### How can I use Microsoft security solutions to protect data and AI application interactions? ++Microsoft always recommends that you build a strong security foundation for your enterprise. The [Zero Trust](/security/zero-trust/copilots/zero-trust-microsoft-365-copilot) security strategy provides guidance for such a foundation because it treats each connection and resource request as though it originated from an uncontrolled network and a threat actor. Regardless of where the request originates or what resource it accesses, use Zero Trust principles. ++Our comprehensive security solutions—including Microsoft Defender, Entra, Purview, and Intune—work together to help secure your data and interactions in Microsoft 365 Copilot and other AI applications. These products have capabilities that empower you and your teams to: ++- **Identify potential risks related to AI use,** such as sensitive data leaks and unauthorized access to high-risk applications ++- **Secure the AI applications** and the sensitive data they process or generate, including prompts and responses ++- **Govern AI use responsibly** by retaining and logging interactions, detecting policy violations, and investigating incidents ++For example, we recently introduced new Microsoft Defender and Purview capabilities that provide purpose-built tools for robust security and governance of generative AI applications and their data. In addition, the seamless integration of [Microsoft Copilot for Security](/copilot/security/microsoft-security-copilot) across our products streamlines the overall process and experience for security analysts. By prioritizing security and offering these advanced features, Microsoft empowers organizations to confidently apply the benefits and opportunities AI applications provide. ++### Where should I report vulnerabilities in Microsoft 365 Copilot and other AI applications? ++If you discover new vulnerabilities in any AI platform, we encourage you to follow responsible disclosure practices for the platform owner. Microsoft’s own procedure (for Copilot) is explained in this page: [Microsoft AI Bounty Program](https://www.microsoft.com/msrc/bounty-ai). |
| admin | What Is Microsoft 365 | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/admin-overview/what-is-microsoft-365.md | - Title: "What is Microsoft 365 Business Premium"-- NOCSH--- Previously updated : 10/01/2024----- Tier1-- scotvorg-- M365-subscription-management -- Adm_O365--- AdminSurgePortfolio-- adminvideo-- intro-overview-- MET150 -description: "Learn about Microsoft 365 Business Premium, a subscription service that takes care of the IT part for you." -feedback_system: None ---# Microsoft 365 Business Premium --Check out [Microsoft 365 small business help](https://go.microsoft.com/fwlink/?linkid=2197659) on YouTube. --## Watch: What is Microsoft 365 Business Premium? --Check out this video and others on our [YouTube channel](https://go.microsoft.com/fwlink/?linkid=2198029). --> [!VIDEO https://www.microsoft.com/videoplayer/embed/RE2mhaA?autoplay=false] --Microsoft 365 Business Premium is a subscription service that lets you run your organization in the cloud while Microsoft takes care of the IT for you, managing devices, protecting against real-world threats, and providing your organization with the latest in business software. --When you sign up for Microsoft 365 Business Premium, you get all the same productivity tools you get with Microsoft 365 Business Standard, and the following security features: --**Safeguard your data** --|Feature|Description| -| | | -| Protect against threats | Microsoft 365 Business Premium helps protect you against threats with advanced threat protection capabilities. These capabilities include safe attachments and safe links protection. <br/><br/>Check out [Overview of Microsoft Defender for Business](../../security/defender-business/mdb-overview.md) (preview!) for additional security and threat protection capabilities. | -| Secure business data | Your personal data is protected on personal devices with PIN access, and restricted copy and saving. You can also add information protection to make sure that only authorized people can access sensitive information. | -| Secure your devices | You can protect your work files on devices by restricting mobile access, such as copy and paste. You can also selectively wipe business data from enrolled mobile devices if they are lost or stolen. | -| Additional security features | Advanced features in Microsoft 365 Business Premium are available to help you protect your business against cyber-threats and safeguard sensitive information. The capabilities include Microsoft Defender for Office 365 Plan 1, Microsoft Purview Data Loss Prevention policies (DLP), Exchange Online archiving, Azure Information Protection, and Intune. | --If you have Microsoft Business Premium, the quickest way to setup security and begin collaborating safely is to follow the guidance in this library: [Microsoft 365 Business Premium ΓÇô productivity and cybersecurity for small business](../../business-premium/m365bp-overview.md). This guidance was developed in partnership with the Microsoft Defending Democracy team to protect all small business customers against cyber threats launched by sophisticated hackers. --For full details, see [Microsoft 365 Business content](../../admin/index.yml). |
| admin | About Shared Mailboxes | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/email/about-shared-mailboxes.md | This message appears when Microsoft 365 is experiencing a replication latency is [Create a shared mailbox](create-a-shared-mailbox.md) (article)\ [Configure a shared mailbox](configure-a-shared-mailbox.md) (article)\ [Convert a user mailbox to a shared mailbox](convert-user-mailbox-to-shared-mailbox.md) (article)\-[Remove a license from a shared mailbox](remove-license-from-shared-mailbox.md) (article) + |
| admin | Configure A Shared Mailbox | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/email/configure-a-shared-mailbox.md | If you choose not to show the shared mailbox in the global address list, the mai 3. Select the option you want next to Show in my organization's global address list. Select **Save**. > [!NOTE]-> Hiding a shared mailbox from address list will make it impossible for new shared mailbox members to add the hidden mailbox to their Outlook profile until the shared mailbox is again shown in the address list. +> Hiding a shared mailbox from address list will make it impossible for new shared mailbox members to add the hidden mailbox to their Outlook profile until the shared mailbox is again shown in the address list. ## Related content [About shared mailboxes](about-shared-mailboxes.md) (article)\ [Create a shared mailbox](create-a-shared-mailbox.md) (article)\ [Convert a user mailbox to a shared mailbox](convert-user-mailbox-to-shared-mailbox.md) (article)\-[Remove a license from a shared mailbox](remove-license-from-shared-mailbox.md) (article) |
| admin | Convert User Mailbox To Shared Mailbox | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/email/convert-user-mailbox-to-shared-mailbox.md | For more info about converting a user mailbox to a shared mailbox in an Exchange [About shared mailboxes](about-shared-mailboxes.md) (article)\ [Create a shared mailbox](create-a-shared-mailbox.md) (article)\ [Configure a shared mailbox](configure-a-shared-mailbox.md) (article)\-[Remove a license from a shared mailbox](remove-license-from-shared-mailbox.md) (article) |
| admin | Create A Shared Mailbox | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/email/create-a-shared-mailbox.md | When you created the shared mailbox, you automatically created a shared calendar 3. Any member of the shared mailbox can create, view, and manage appointments on the calendar, just like they would their personal appointments. Everyone who is a member of shared mailbox can see their changes to the shared calendar. +## Remove a license from a shared mailbox ++Shared mailboxes usually don't require a license. Follow these instructions to remove a license from a shared mailbox so that you can either assign it to a user or return the license so that you aren't paying for a license you don't need. ++> [!NOTE] +> +> An Exchange Online Plan 2 license is required in the following scenarios: +> +> - The shared mailbox has more than 50 GB of storage in use. +> - The shared mailbox uses in-place archiving. +> - The shared mailbox is placed in litigation hold. +> +> For step-by-step instructions on how to assign licenses, see [Assign licenses to users](/microsoft-365/admin/manage/assign-licenses-to-users). ++## Remove the license +++1. In the admin center, go to the **Users** \> <a href="https://go.microsoft.com/fwlink/p/?linkid=834822" target="_blank">Active users</a> page. ++ > [!NOTE] + > You need to remove the license from the Active users page. You can't remove the license from the Shared mailbox page because licenses are user settings. ++++1. In the admin center, go to the **Users** \> <a href="https://go.microsoft.com/fwlink/p/?linkid=850628" target="_blank">Active users</a> page. ++ > [!NOTE] + > You need to remove the license from the Active users page. You can't remove the license from the Shared mailbox page because licenses are user settings. ++ +2. Select the shared mailbox. ++3. One the **Licenses and Apps** tab, expand **Licenses** and uncheck the box for the license you want to remove. ++4. Select **Save changes**. ++5. When you return to the **Active users** page, the status of the shared mailbox will be **Unlicensed**. ++6. You're still paying for the license. To stop paying for it, [remove the license from your subscription](../../commerce/licenses/buy-licenses.md). + ## Related content [About shared mailboxes](about-shared-mailboxes.md) (article)\ [Configure a shared mailbox](configure-a-shared-mailbox.md) (article)\ [Convert a user mailbox to a shared mailbox](convert-user-mailbox-to-shared-mailbox.md) (article)\-[Remove a license from a shared mailbox](remove-license-from-shared-mailbox.md) (article) |
| admin | Remove License From Shared Mailbox | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/email/remove-license-from-shared-mailbox.md | - Title: "Remove license from shared mailbox"-- NOCSH--- Previously updated : 10/01/2024----- Tier2-- scotvorg-- M365-subscription-management -- Adm_O365-- Adm_TOC--- AdminSurgePortfolio-- BCS160-- MET150-- MOE150 -description: "Remove a license from a shared mailbox to assign it to another user or return the license so you're not paying for it. " ---# Remove a license from a shared mailbox --Shared mailboxes usually don't require a license. Follow these instructions to remove a license from a shared mailbox so that you can either assign it to a user or return the license so that you aren't paying for a license you don't need. --> [!NOTE] -> -> An Exchange Online Plan 2 license is required in the following scenarios: -> -> - The shared mailbox has more than 50 GB of storage in use. -> - The shared mailbox uses in-place archiving. -> - The shared mailbox is placed in litigation hold. -> -> For step-by-step instructions on how to assign licenses, see [Assign licenses to users](/microsoft-365/admin/manage/assign-licenses-to-users). --## Remove the license ---1. In the admin center, go to the **Users** \> <a href="https://go.microsoft.com/fwlink/p/?linkid=834822" target="_blank">Active users</a> page. -- > [!NOTE] - > You need to remove the license from the Active users page. You can't remove the license from the Shared mailbox page because licenses are user settings. ----1. In the admin center, go to the **Users** \> <a href="https://go.microsoft.com/fwlink/p/?linkid=850628" target="_blank">Active users</a> page. -- > [!NOTE] - > You need to remove the license from the Active users page. You can't remove the license from the Shared mailbox page because licenses are user settings. -- -2. Select the shared mailbox. --3. One the **Licenses and Apps** tab, expand **Licenses** and uncheck the box for the license you want to remove. --4. Select **Save changes**. --5. When you return to the **Active users** page, the status of the shared mailbox will be **Unlicensed**. --6. You're still paying for the license. To stop paying for it, [remove the license from your subscription](../../commerce/licenses/buy-licenses.md). --## Related content --[About shared mailboxes](about-shared-mailboxes.md) (article)\ -[Create a shared mailbox](create-a-shared-mailbox.md) (article)\ -[Configure a shared mailbox](configure-a-shared-mailbox.md) (article)\ -[Convert a user mailbox to a shared mailbox](convert-user-mailbox-to-shared-mailbox.md) (article) |
| admin | Teams Apps Work On Outlook And M365 | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/manage/teams-apps-work-on-outlook-and-m365.md | f1.keywords: Previously updated : 09/18/2024 Last updated : 10/11/2024 audience: Admin As an admin, you can control which apps can be installed and used by which users ### Customize default settings for Teams apps that work on Outlook and the Microsoft 365 app -As an admin, you can control the default state of any new and incoming app in your organization. The default setting for any organization is set to **All users in the organization can install**. You can change this default setting on Integrated Apps in the Microsoft 365 admin center. +As an admin, you can control the default state of any new and incoming app in your organization. You can do this individually for Microsoft apps, third party apps, and custom apps. The default setting for any organization is set to **Allow all users in the organization to access apps**. You can change this default setting on Integrated Apps in the Microsoft 365 admin center. 1. Sign into the Microsoft 365 admin center as a Global Administrator. 2. Select **Settings**, then select **Integrated Apps**. 3. Select the **Available Apps** list.-4. Next, select the Settings icon to open the **Customize default settings** pane. -5. Select the dropdown menu to change the default settings to **All users in the organization can install apps on their own** or **Only admins can install apps for users in the organization**. - - When you select **Only admins can install apps for users in the organization**, the availability status for apps changes to **No users in the organization can install**. +4. Next, select the Settings icon at the top of the apps list to open the **Customize default settings** pane. +5. For each app type category, set up the toggle to allow or disallow all apps to be installed by users. + - When you switch the toggle to **Yes**, the apps under that app type will be allowed for users to install. + - When you switch the toggle to **No**, the apps under that app type will not be allowed for users to install. Additionally, apps previously installed by users under that app type will no longer be accessible to the users. This does not impact an admin's ability to install the apps. When the toggle is switched to **No**, admins can still install the apps, and all admin-installed apps would still continue to be accessible to the users. The default tenant state applies to the following apps: The default tenant state applies to the following apps: The default tenant state won't apply to the following apps: -- Custom/LOB apps uploaded by the admin.- - When a custom/LOB app is uploaded by the admin via the Microsoft 365 admin center, all users in the organization have access to install the app by default. For more information, see the section about [how to upload a custom/LOB app](#upload-custom-teams-apps-that-work-on-outlook-and-the-microsoft-365-app). - - Admins can continue to deploy the custom/LOB app to a selected set of users. - - Admins can also edit which users have access to install and use the custom/LOB app. For more information, see the section about [how to upload a custom/LOB app](#upload-custom-teams-apps-that-work-on-outlook-and-the-microsoft-365-app). - Apps that have any user selections made by the admin. - The changes made by the admin as part of **How to manage the availability of an app in your organization** are honored over the default state in the tenant. Once an admin specifies users for an app, this setting supersedes the tenant-wide default setting for that app. |
| admin | Experience Insights Dashboard | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/misc/experience-insights-dashboard.md | For the first time, you can now see what articles your users are consuming on Su :::image type="content" source="../../media/experience-insights-teams-help-article2.png" alt-text="Screenshot: Image showing the number of help articles read and the corresponding Microsoft 365 product"::: -## Manage adoption success with actions in Experience insights +## Interpret your organization's help article views -Actions let you track the actions you take to drive user engagement and success for Microsoft 365 in your organization. You can measure the impact of your actions by analyzing how each action correlates with changes in usage, NPS, feedback, and help article views. This empowers you to make data-driven decisions and continuously improve your strategies for user engagement and satisfaction. +Chart information gives you insight into the apps and services that you want to track data on. Help article views is the total number of help article page views that users in your organization have viewed in a Microsoft 365 app or on support.microsoft.com. +++> [!NOTE] +> Help article views are only shown for users who have signed in to the desktop app or have signed in to [support.microsoft.com](https://support.microsoft.com). ++|Item|Description| +|:--|:--| +|1 |Use the Help content tab to see where people need help using the app or service. | +|2 |You can filter for trends over the last 30 days, 90 days, or 180 days. | +|3 |Total number of help article page views in app or on [support.microsoft.com](https://support.microsoft.com). | +|4 |List of the top help articles related to the app or service that your end-users are reading. If an article covers multiple apps, it will be shown for each related app. | ++## Examples of help articles ++Help articles can be found in-app in the help pane or at the [Microsoft support page](https://support.microsoft.com/). ++### Help article on Microsoft support page +++### In-app help article in Microsoft Word +++## Manage adoption success with actions in Experience insights ++Actions let you track the actions you take to drive user engagement and success for Microsoft 365 in your organization. You can measure the impact of your actions by analyzing how each action correlates with changes in usage, NPS, feedback, and help article views. This empowers you to make data-driven decisions and continuously improve your strategies for user engagement and satisfaction. The actions experience within Microsoft 365 admin center includes the following features and capabilities: Adding new actions 3.     Once all required details are entered, select __Save__. -  --You can also import multiple actions from CSV.   Select __Import from CSV__ and follow the instructions for editing and uploading the file. There’s even a sample, pre-formatted CSV file that you can use to get started. + You can also import multiple actions from CSV.   Select __Import from CSV__ and follow the instructions for editing and uploading the file. There’s even a sample, pre-formatted CSV file that you can use to get started. ### Viewing action impact Once an action is added, you can view it in the graphs in Experience insights, f 1. On the date of the action, there will be a vertical dashed line tracking the action against the graph’s data. Note: You might need to change the __Date range__ to see the action.- + 1. When you select the __Title__ of the action, above the vertical dashed line, you’ll get more details about the action.  |
| admin | Experience Insights Help Articles | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/misc/experience-insights-help-articles.md | - Title: "Experience insights help article report"--- Previously updated : 11/18/2023----- Tier1 -- scotvorg -description: "Get a report of the Microsoft 365 help articles people in your organization are reading." ---# Experience insights help article report --As the admin of a Microsoft 365 organization, you get a report of the Microsoft 365 help articles people in your organization are reading. You can use this information to see which Microsoft 365 product or service your users need the most help using and provide more resources and help. To learn more about adoption and training for users in your organization, see [Microsoft 365 Experience insights dashboard](experience-insights-dashboard.md). ---## How to get to the Experience insights dashboard --There are a couple of ways to get the Experience insights dashboard page. If youΓÇÖre a member of the global reader roles, when you log in to the Microsoft 365 admin center, youΓÇÖll see a one-time prompt to go to the Experience insights (preview) dashboard. You can access it at any time by selecting Experience insights (preview) from the admin home page. ---If youΓÇÖre a member of the reports reader role, once you sign into the admin center, youΓÇÖll automatically go to the Experience insights (preview) dashboard page. You can switch back to the admin center Dashboard view by selecting that option in the top right. --Select an app or service and then select **Help content**. --## Interpret your organization's help article views --Chart information gives you insight into the apps and services that you want to track data on. Help article views is the total number of help article page views that users in your organization have viewed in a Microsoft 365 app or on support.microsoft.com. ---> [!NOTE] -> Help article views are only shown for users who have signed in to the desktop app or have signed in to [support.microsoft.com](https://support.microsoft.com). --|Item|Description| -|:--|:--| -|1 |Use the Help content tab to see where people need help using the app or service. | -|2 |You can filter for trends over the last 30 days, 90 days, or 180 days. | -|3 |Total number of help article page views in app or on [support.microsoft.com](https://support.microsoft.com). | -|4 |List of the top help articles related to the app or service that your end-users are reading. If an article covers multiple apps, it will be shown for each related app. | --## Examples of help articles --Help articles can be found in-app in the help pane or at the [Microsoft support page](https://support.microsoft.com/). --### Help article on Microsoft support page ---### In-app help article in Microsoft Word - |
| commerce | Subscriptions And Licenses | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/licenses/subscriptions-and-licenses.md | Different types of admins can work with licenses in different ways, depending on [Buy or remove licenses for your business subscription](buy-licenses.md) (article)\ [Assign or unassign licenses for users in the Microsoft 365 admin center](../../admin/manage/assign-licenses-to-users.md) (article)\-[Remove a license from a shared mailbox](../../admin/email/remove-license-from-shared-mailbox.md) (article) |