| Category | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| enterprise-data-protection | Enterprise Data Protection | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/enterprise-data-protection.md | In addition to prompts and responses, web search queries (different from Microso - Web queries sent to the Bing search service are handled identically by both Copilots. Queries are generated from the prompt into a few words. They're sent via a secure connection with user and tenant identifiers removed. They aren't shared with advertisers and arenΓÇÖt used to train our foundation large language models (LLMs). -- The Bing search service operates separately from Microsoft 365 and has different data-handling practices covered by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) between each user and Microsoft, together with the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement). The means that Microsoft acts as an independent data controller responsible for complying with all applicable laws and controller obligations. This approach is consistent with other [optional connected experiences that rely on Bing](/microsoft-365-apps/privacy/optional-connected-experiences#experiences-that-rely-on-bing). +- The Bing search service operates separately from Microsoft 365 and has different data-handling practices covered by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) between each user and Microsoft, together with the [Microsoft Privacy Statement](https://www.microsoft.com/privacy/privacystatement). The means that Microsoft acts as an independent data controller responsible for complying with all applicable laws and controller obligations. This approach is consistent with other [optional connected experiences that rely on Bing](/microsoft-365-apps/privacy/optional-connected-experiences#experiences-that-rely-on-bing). - [Learn more about data, privacy, and security of web queries in Microsoft 365 Copilot and Microsoft Copilot](manage-public-web-access.md) |
| manage-public-web-access | Manage Public Web Access | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/manage-public-web-access.md | Generated search queries sent to the Bing search service have the user and tenan - Answers or features like Rich Captions - Social features like Auto Suggest, Trending, and Zero Input -The Bing search service operates separately from Microsoft 365 and has different data-handling practices. The use of Bing is covered by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) between each user and Microsoft, together with the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement). The [Microsoft Products and Services Data Protection Addendum (DPA)](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) doesn't apply to the use of web content plugin in Microsoft 365 Copilot, Microsoft Copilot, or the Bing search service. +The Bing search service operates separately from Microsoft 365 and has different data-handling practices. The use of Bing is covered by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) between each user and Microsoft, together with the [Microsoft Privacy Statement](https://www.microsoft.com/privacy/privacystatement). The [Microsoft Products and Services Data Protection Addendum (DPA)](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) doesn't apply to the use of web content plugin in Microsoft 365 Copilot, Microsoft Copilot, or the Bing search service. ## Controls available to manage web grounding |
| microsoft-365-copilot-privacy | Microsoft 365 Copilot Privacy | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/microsoft-365-copilot-privacy.md | For more information, see the following articles: ## How does Microsoft 365 Copilot protect organizational data? -The permissions model within your Microsoft 365 tenant can help ensure that data won't unintentionally leak between users, groups, and tenants. Microsoft 365 Copilot presents only data that each individual can access using the same underlying controls for data access used in other Microsoft 365 services. Semantic Index honors the user identity-based access boundary so that the grounding process only accesses content that the current user is authorized to access. For more information, see MicrosoftΓÇÖs [privacy policy and service documentation](https://privacy.microsoft.com/). +The permissions model within your Microsoft 365 tenant can help ensure that data won't unintentionally leak between users, groups, and tenants. Microsoft 365 Copilot presents only data that each individual can access using the same underlying controls for data access used in other Microsoft 365 services. Semantic Index honors the user identity-based access boundary so that the grounding process only accesses content that the current user is authorized to access. For more information, see MicrosoftΓÇÖs [privacy policy and service documentation](https://www.microsoft.com/privacy). When you have data that's encrypted by Microsoft Purview Information Protection, Microsoft 365 Copilot honors the usage rights granted to the user. This encryption can be applied by [sensitivity labels](/purview/sensitivity-labels) or by restricted permissions in apps in Microsoft 365 by using Information Rights Management (IRM). For more information about using Microsoft Purview with Microsoft 365 Copilot, see [Microsoft Purview data security and compliance protections for generative AI apps](/purview/ai-microsoft-purview). |
| microsoft-365-copilot-setup | Microsoft 365 Copilot Setup | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/microsoft-365-copilot-setup.md | Title: "Get started with Microsoft 365 Copilot" + Title: "Get your organization and data ready for Microsoft 365 Copilot" f1.keywords: - NOCSH Previously updated : 09/16/2024 Last updated : 09/24/2024 audience: Admin -description: "Learn how to prepare your organization for Microsoft 365 Copilot. You should assign licenses, optimize SharePoint search, give enough access, prevent oversharing, use sensitivity labels, create a pilot group, and more." +description: Learn how IT administrators can prepare their organization for Microsoft 365 Copilot. Admin cans assign licenses, optimize SharePoint search, give enough access, prevent oversharing, use sensitivity labels, create a pilot group, and more. -# Get started with Microsoft 365 Copilot +# Get started with Microsoft 365 Copilot - admin guide [Microsoft 365 Copilot](microsoft-365-copilot-overview.md) is an AI-powered productivity tool that uses large language models (LLMs). It integrates with your data, with Microsoft Graph, and with Microsoft 365 Apps. It works alongside popular Microsoft 365 Apps, like Word, Excel, PowerPoint, Outlook, Teams, and more. Copilot provides real-time intelligent assistance, enabling users to enhance their creativity, productivity, and skills. -This article covers how you can prepare your organization for Copilot. +This article covers how IT admins can prepare their organization for Copilot. ++> [!TIP] +> If you're an end user, then the [Copilot Lab](https://copilot.cloud.microsoft/prompts) is a good resource. ## Before you begin In the [Microsoft Purview portal](https://purview.microsoft.com), you can use th The privacy settings in your Microsoft 365 apps can affect the availability of Microsoft 365 Copilot features. To ensure that users can access Copilot features, review the privacy settings in your Microsoft 365 apps. -For more information, see [Microsoft 365 Copilot and privacy controls for connected experiences](microsoft-365-copilot-privacy.md#microsoft-365-copilot-and-privacy-controls-for-connected-experiences). +To learn more, see [Microsoft 365 Copilot and privacy controls for connected experiences](microsoft-365-copilot-privacy.md#microsoft-365-copilot-and-privacy-controls-for-connected-experiences). ## Step 4 - Update channels Your options: - **Preview** channels include **Current Channel (Preview)** and **Beta Channel**. - Preview channels are a great option to validate the product before rolling out to the rest of organization. To learn more, see [Overview of update channels](/deployoffice/updates/overview-update-channels) and [Microsoft 365 Insider channels](/deployoffice/insider/compare-channels). + Preview channels are a great option to validate the product before rolling out to the rest of organization. To learn more, see [Overview of update channels](/deployoffice/updates/overview-update-channels) and [Microsoft 365 Insider channels](/deployoffice/insider/compare-channels). There are multiple ways you can manage channels for user devices. To learn more, see [Change update channel of Microsoft 365 to enable Copilot](/deployoffice/updates/change-channel-for-copilot). There are multiple ways you can manage channels for user devices. To learn more, ✅ **Assign Copilot licenses using the Microsoft 365 admin center** -The next step is to assign licenses. You can assign to individual users or to groups of users, and also reassign licenses to other users. You can manage Microsoft 365 Copilot licenses in the Microsoft 365 admin center. +The next step is to assign licenses so users can start using Copilot. You can manage Microsoft 365 Copilot licenses in the Microsoft 365 admin center. You can assign to individual users or to groups of users, and also reassign licenses to other users. -- To access license management in the [Microsoft 365 admin center](https://admin.microsoft.com), see **Billing** > **Licenses**.+- To access license management in the [Microsoft 365 admin center](https://admin.microsoft.com), select **Billing** > **Licenses**. -To learn more about enabling Copilot in your organization, see [Enable users for Microsoft 365 Copilot](microsoft-365-copilot-enable-users.md). +When licenses are assigned, Copilot shows up in the Microsoft 365 apps, like Word and Excel. To use Copilot, users sign into the app with their work or school account and the file must be editable (not read only). ++To learn more, see: -You can also assign licenses in bulk to [groups of users through the Azure admin center](/entra/identity/users/licensing-groups-assign) or [assign licenses to users with PowerShell](/microsoft-365/enterprise/assign-licenses-to-user-accounts-with-microsoft-365-powershell). For more information, see [Assign Microsoft 365 licenses to users](/microsoft-365/admin/manage/assign-licenses-to-users). +- Enable Copilot in your organization at [Enable users for Microsoft 365 Copilot](microsoft-365-copilot-enable-users.md). +- You can assign licenses in bulk to [groups of users through the Azure admin center](/entra/identity/users/licensing-groups-assign) or [assign licenses to users with PowerShell](/microsoft-365/enterprise/assign-licenses-to-user-accounts-with-microsoft-365-powershell). For more information, see [Assign Microsoft 365 licenses to users](/microsoft-365/admin/manage/assign-licenses-to-users). ## Step 6 - Configure settings for Copilot |
| microsoft-365-copilot-transparency-note | Microsoft 365 Copilot Transparency Note | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/microsoft-365-copilot-transparency-note.md | To improve the performance in relation to the accuracy of Microsoft 365 Copilot - **Write good prompts.** Writing good prompts is key to getting better outcomes with Microsoft 365 Copilot. Just like there are techniques to help people communicate effectively with a human, there are guidelines that may help users get better results with Microsoft 365 Copilot when writing prompts. For example: include details, structure prompts, provide positive instructions, iterate and regenerate, and always review and verify AI-generated responses. For more information, see [Get better results with Copilot prompting](https://support.microsoft.com/topic/77251d6c-e162-479d-b398-9e46cf73da55). -- **Allow referencing of web content.** Allowing Microsoft 365 Copilot to reference web content can improve the quality, accuracy, and relevance of Microsoft 365 Copilot responses where a response would benefit from current, public information from the web. Note, however, that when Microsoft 365 Copilot references web content, it does so via the Bing Search service, and data-handling practices for Bing Search queries are different from how data is handled by Microsoft 365 Copilot. The use of Bing is covered by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) between each user and Microsoft, together with the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement).+- **Allow referencing of web content.** Allowing Microsoft 365 Copilot to reference web content can improve the quality, accuracy, and relevance of Microsoft 365 Copilot responses where a response would benefit from current, public information from the web. Note, however, that when Microsoft 365 Copilot references web content, it does so via the Bing Search service, and data-handling practices for Bing Search queries are different from how data is handled by Microsoft 365 Copilot. The use of Bing is covered by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) between each user and Microsoft, together with the [Microsoft Privacy Statement](https://www.microsoft.com/privacy/privacystatement). - **Extend grounding in Microsoft Graph.** Microsoft 365 Copilot uses data from Microsoft Graph to ground responses in organization-specific data like emails, chats, files, and calendars. By extending Microsoft Graph with organizational data from sources like CRM systems, or external file repositories, organizations can include additional context-specific, relevant information that further enhances the richness and accuracy of Microsoft 365 Copilot responses. |
| pin-copilot | Pin Copilot | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/pin-copilot.md | f1.keywords: Previously updated : 08/15/2024 Last updated : 09/23/2024 audience: Admin Administrators can change this behavior by selecting an option for pinning Micro :::image type="content" source="media/copilot-not-pin.png" alt-text="Screenshot showing the option to not Pin Copilot to the navigation bar."::: +Global administrators can make changes to Microsoft Copilot pinning settings at any time. Changes take up to 48 hours to go into effect. + > [!NOTE]-> Users with a license for Microsoft 365 Copilot will have it pinned by default. +> Users with a license for Microsoft 365 Copilot will have Microsoft Copilot pinned by default. ## User experience -Users can personalize their navigation bar by choosing to pin or unpin Microsoft Copilot. In the selected pinning scenarios described previously, users will see a prompt for pinning Microsoft Copilot to the navigation bar: +Users can personalize their navigation bar by choosing to pin or unpin Microsoft Copilot. Users can adjust the pinning settings within their application preferences, and these choices are specific to Teams, Outlook, the Microsoft 365 web app ([microsoft365.com](https://www.office.com/) and [m365.cloud.microsoft](https://m365.cloud.microsoft/)), Microsoft 365 desktop app, and Microsoft 365 mobile app. ++A message asking to pin Microsoft Copilot can appear if a user: ++- Navigates to [https://microsoft.com/copilot](https://microsoft.com/copilot), [https://microsoft365.com](https://microsoft365.com), or [https://m365.cloud.microsoft/](https://microsoft365.com), and selects **Settings** > **Pin Copilot**. +- Opens Outlook, Teams, or the Microsoft 365 app on web or desktop. ++In the selected pinning scenarios described previously, users will see a prompt for pinning Microsoft Copilot to the navigation bar in the Microsoft 365 app on web and mobile: +++The Microsoft Copilot pinning notification provides users with three options: ++- **Ask me later** +- **Do not Pin** +- **Pin and Continue** ++If a user selects **Ask me later**, the same message will be shown to a user up to three more times, with the pinning dialog shown for a maximum of once per user session. On the final message, the 'Ask me later' button is replaced by a ΓÇÿDonΓÇÖt show againΓÇÖ button. If the user selects **DonΓÇÖt show again**, there are no additional notifications to pin Microsoft Copilot. ++If a user selects **Do not Pin**, there are no additional notifications to pin Microsoft Copilot. +If a user opens the Microsoft 365 mobile app, they will see two options: **Pin and Continue** or **Decline**: -Users can adjust the pinning settings within their application preferences, and these choices are specific to Teams, Outlook, the Microsoft 365 web app ([microsoft365.com](https://www.office.com/) and [m365.cloud.microsoft](https://m365.cloud.microsoft/)), Microsoft 365 desktop app, and Microsoft 365 mobile app. -For example, if admins choose to pin Microsoft Copilot for all users, but an individual user decides to unpin it from Teams or Outlook or the Microsoft 365 app, Microsoft Copilot will no longer appear on the navigation bar for that user. +Users with a paid version of Microsoft 365 Copilot will not see any pinning messages. They see a welcome screen when they visit Copilot for the first time. ## When Microsoft Copilot will be pinned in each app |
| admin | Microsoft 365 Copilot Usage | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage.md | The following table lists the features included for active users of Copilot apps | Outlook | Summarize an Outlook email thread | In an email thread, selecting **Summarize by Copilot or Summarize** at the top of the email thread. (User experience is slightly different among web, Windows, Mac or mobile.) | [Summarize an email thread with Copilot in Outlook - Microsoft Support](https://support.microsoft.com/office/summarize-an-email-thread-with-copilot-in-outlook-a79873f2-396b-46dc-b852-7fe5947ab640#ID0EBBJ=New_Outlook) | | | Generate an Outlook email draft | Selecting Copilot icon from the toolbar, selecting **Draft with Copilot**, typing prompt in Copilot box and submitting. (User experience is slightly different among web, Windows, Mac or mobile.) | [Draft an email message with Copilot in Outlook - Microsoft Support](https://support.microsoft.com/office/draft-an-email-message-with-copilot-in-outlook-3eb1d053-89b8-491c-8a6e-746015238d9b#ID0EDBH=New_Outlook) | | | Coach | Selecting Copilot icon in the email message, choosing **Coaching by Copilot** and Copilot will review email and offer suggestions on improving the tone, clarity and reader sentiment. (User experience is slightly different among web, Windows, Mac, or mobile.) | [Email coaching with Copilot in Outlook - Microsoft Support](https://support.microsoft.com/office/email-coaching-with-copilot-in-outlook-91a3cd56-1586-4a31-85c7-2eb8cdb02405) |+| | Business Chat (work) | Going to the left side of Outlook web app, selecting Copilot from the apps list, typing a prompt and sending. This feature is included in the Outlook app level and all up Microsoft 365 active usage count effective August 28th, 2024. | [Get started with Microsoft 365 Copilot Business Chat](https://support.microsoft.com/topic/get-started-with-microsoft-365-copilot-business-chat-5b00a52d-7296-48ee-b938-b95b7209f737) | +| | App Chat | Going to top right corner of Outlook web app, selecting Copilot placed next to settings option, typing a prompt and sending. This feature is included in the Outlook app level and all up Microsoft 365 active usage count effective August 17th, 2024. | [Frequently asked questions about Copilot in Outlook](https://support.microsoft.com/office/frequently-asked-questions-about-copilot-in-outlook-07420c70-099e-4552-8522-7d426712917b) | | Teams | Summarizing key points during meetings | Summarizing key discussion points during meeting using Copilot in Microsoft. Teams | [Get started with Copilot in Microsoft Teams meetings - Microsoft Support](https://support.microsoft.com/office/get-started-with-copilot-in-microsoft-teams-meetings-0bf9dd3c-96f7-44e2-8bb8-790bedf066b1) | | | Summarize chats and channel conversations | Typing a prompt or selecting a prompt from More prompt in Copilot compose box in a chat or channel and submitting. | [Use Copilot in Microsoft Teams chat and channels - Microsoft Support](https://support.microsoft.com/office/use-copilot-in-microsoft-teams-chat-and-channels-cccccca2-9dc8-49a9-ab76-b1a8ee21486c) | | | Rewrite and adjust messages | Writing a message in message box, selecting **Rewrite/Adjust** in Copilot beneath the message box to rewrite/adjust the whole/specific selection of the message. | [Rewrite and adjust your messages with Copilot in Microsoft Teams - Microsoft Support](https://support.microsoft.com/office/rewrite-and-adjust-your-messages-with-copilot-in-microsoft-teams-53315d9c-93be-45ab-9004-2f8205725cc7) | | | Intelligent Recap | Selecting **Recap** tab in the meeting chat for Teams calendar event after the meeting ends (meeting is recorded and transcribed). | [Get started with Microsoft 365 Copilot in Teams - Microsoft Support](https://support.microsoft.com/office/get-started-with-copilot-for-microsoft-365-in-teams-60c37fde-6e13-4412-8101-40bbbc711ec9) |-| | Copilot chat | Going to Chat on the left side of Teams, selecting Copilot from the top of your Teams chat list, typing a prompt and sending. | [Get started with Microsoft 365 Copilot in Teams - Microsoft Support](https://support.microsoft.com/office/get-started-with-copilot-for-microsoft-365-in-teams-60c37fde-6e13-4412-8101-40bbbc711ec9) | +| | Business Chat (work) | Going to Chat on the left side of Teams, selecting Copilot from the top of your Teams chat list, typing a prompt and sending. | [Get started with Microsoft 365 Copilot in Teams - Microsoft Support](https://support.microsoft.com/office/get-started-with-copilot-for-microsoft-365-in-teams-60c37fde-6e13-4412-8101-40bbbc711ec9) | | Word | All Copilot in Word features are automatically included in the Microsoft 365 Copilot usage report. Usage of any Copilot in Word feature counts towards the Active users metric and is indicated in the per-user Last activity date (UTC). | | To learn more about Copilot in Word features, refer to [Welcome to Copilot in Word - Microsoft Support](https://support.microsoft.com/office/welcome-to-copilot-in-word-2135e85f-a467-463b-b2f0-c51a46d625d1). | | Excel | All Copilot in Excel features are automatically included in the Microsoft 365 Copilot usage report. Usage of any Copilot in Excel feature counts towards the Active users metric and is indicated in the per-user Last activity date (UTC). | | To learn more about Copilot in Excel features, refer to [Get started with Copilot in Excel - Microsoft Support](https://support.microsoft.com/office/get-started-with-copilot-in-excel-d7110502-0334-4b4f-a175-a73abdfc118a). | | PowerPoint | All Copilot in PowerPoint features are automatically included in the Microsoft 365 Copilot usage report. Usage of any Copilot in PowerPoint feature counts towards the Active users metric and is indicated in the per-user Last activity date (UTC). | | To learn more about Copilot in PowerPoint features, refer to [Welcome to Copilot in PowerPoint - Microsoft Support](https://support.microsoft.com/office/welcome-to-copilot-in-powerpoint-57133c75-24c0-4519-8096-d0dadf25fb8d). | |
| admin | About Admin Roles | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/add-users/about-admin-roles.md | You'll probably only need to assign the following roles in your organization. By |Admin role |Who should be assigned this role? | |||-|Billing admin | Assign the Billing admin role to users who make purchases, manage subscriptions and service requests, and monitor service health. <br><br> Billing admins also can:<br> - Manage all aspects of billing <br> - Create and manage support tickets in the Azure portal <br> | -|Exchange admin | Assign the Exchange admin role to users who need to view and manage your user's email mailboxes, Microsoft 365 groups, and Exchange Online. <br><br> Exchange admins can also:<br> - Recover deleted items in a user's mailbox <br> - Set up "Send As" and "Send on behalf" delegates <br> | -|Fabric admin | Assign the Fabric admin role to users who need to do the following: <br> - Manage all admin features for Microsoft Fabric and Power BI <br> - Report on usage and performance <br> - Review and manage auditing | -|Global admin | Giving too many users global access is a security risk and we recommend that you have as few global admins as possible. <br><br> Only global admins can:<br> - Reset passwords for all users <br> - Add and manage domains <br> - Unblock another global admin <br> <br> **Note:** The person who signed up for Microsoft online services automatically becomes a Global admin. | +|Billing admin | Assign the Billing admin role to users who make purchases, manage subscriptions and service requests, and monitor service health. <br><br> Billing admins also can:<br> • Manage all aspects of billing<br> • Create and manage support tickets in the Azure portal <br/><br/> **Note:** Only Global admins can view and manage subscriptions purchased through a Partner.| +|Exchange admin | Assign the Exchange admin role to users who need to view and manage your user's email mailboxes, Microsoft 365 groups, and Exchange Online. <br><br> Exchange admins can also:<br> • Recover deleted items in a user's mailbox <br> • Set up "Send As" and "Send on behalf" delegates <br> | +|Fabric admin | Assign the Fabric admin role to users who need to do the following: <br> • Manage all admin features for Microsoft Fabric and Power BI <br> • Report on usage and performance <br> • Review and manage auditing | +|Global admin | Giving too many users global access is a security risk and we recommend that you have as few global admins as possible. <br/><br/> Only global admins can:<br> • Reset passwords for all users <br> • Add and manage domains <br> • Unblock another global admin <br/><br/> **Note:** The person who signed up for Microsoft online services automatically becomes a Global admin. | |Global reader | Assign the global reader role to users who need to view admin features and settings in admin centers that the global admin can view. The global reader admin can't edit any settings. |-|Groups admin | Assign the groups admin role to users who need to manage all groups settings across admin centers, including the Microsoft 365 admin center and Microsoft Entra admin center. <br><br> Groups admins can:<br> - Create, edit, delete, and restore Microsoft 365 groups <br> - Create and update group creation, expiration, and naming policies <br> - Create, edit, delete, and restore Microsoft Entra security groups| -|Helpdesk admin | Assign the Helpdesk admin role to users who need to do the following:<br> - Reset passwords <br> - Force users to sign out <br> - Manage service requests <br> - Monitor service health <br> <br> **Note**: The Helpdesk admin can only help non-admin users and users assigned these roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, and Reports reader. | -|License admin | Assign the License admin role to users who need to assign and remove licenses from users and edit their usage location. <br/><br/> License admins also can: <br> - Reprocess license assignments for group-based licensing <br> - Assign product licenses to groups for group-based licensing | -|Message center privacy reader | Assign the Message center privacy reader role to users who need to read privacy and security messages and updates in the Microsoft 365 Message center. Message center privacy readers may get email notifications related to data privacy, depending on their preferences, and they can unsubscribe using Message center preferences. Only global administrators and Message center privacy readers can read data privacy messages. This role has no permission to view, create, or manage service requests. <br><br>Message center privacy readers can also: <br> - Monitor all notifications in the Message Center, including data privacy messages <br> - View groups, domains, and subscriptions | -|Message center reader | Assign the Message center reader role to users who need to do the following: <br> - Monitor message center notifications <br> - Get weekly email digests of message center posts and updates <br> - Share message center posts <br> - Have read-only access to Microsoft Entra services, such as users and groups| -|Migration admin | Assign the Microsoft 365 Migration Administrator role to users who need to do the following tasks: <br> - Use Migration Manager in the Microsoft 365 admin center to manage content migration to Microsoft 365, including Teams, OneDrive for Business, and SharePoint sites, from various sources such as Google Drive, Dropbox, and Box. <br> - Select migration sources, create migration inventories (such as Google Drive user lists), schedule and execute migrations, and download reports. <br> - Create new SharePoint sites if the destination sites don't already exist, create SharePoint lists under the SharePoint admin sites, and create and update items in SharePoint lists. <br> - Manage migration project settings and migration lifecycle for tasks as well as manage permission mappings from source to destination. <br> **Note:** With this role, you can only migrate from Google Drive, Box, Dropbox and Egnyte. This role doesn't allow you to migrate from file share sources from the SharePoint admin center. Use the SharePoint admin to migrate from file share sources.| -|Office Apps admin | Assign the Office Apps admin role to users who need to do the following: <br> - Use the Cloud Policy service for Microsoft 365 to create and manage cloud-based policies. <br> - Create and manage service requests <br> - Manage the What's New content that users see in their apps in Microsoft 365 <br> - Monitor service health | +|Groups admin | Assign the groups admin role to users who need to manage all groups settings across admin centers, including the Microsoft 365 admin center and Microsoft Entra admin center. <br><br> Groups admins can:<br> • Create, edit, delete, and restore Microsoft 365 groups<br> • Create and update group creation, expiration, and naming policies<br> • Create, edit, delete, and restore Microsoft Entra security groups| +|Helpdesk admin | Assign the Helpdesk admin role to users who need to do the following:<br> • Reset passwords<br> • Force users to sign out<br> • Manage service requests<br> • Monitor service health<br/><br/> **Note**: The Helpdesk admin can only help non-admin users and users assigned these roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, and Reports reader. | +|License admin | Assign the License admin role to users who need to assign and remove licenses from users and edit their usage location. <br/><br/> License admins also can: <br> • Reprocess license assignments for group-based licensing <br> • Assign product licenses to groups for group-based licensing | +|Message center privacy reader | Assign the Message center privacy reader role to users who need to read privacy and security messages and updates in the Microsoft 365 Message center. Message center privacy readers may get email notifications related to data privacy, depending on their preferences, and they can unsubscribe using Message center preferences. Only global administrators and Message center privacy readers can read data privacy messages. This role has no permission to view, create, or manage service requests. <br><br>Message center privacy readers can also: <br> • Monitor all notifications in the Message Center, including data privacy messages<br> • View groups, domains, and subscriptions | +|Message center reader | Assign the Message center reader role to users who need to do the following: <br> • Monitor message center notifications<br> • Get weekly email digests of message center posts and updates<br> • Share message center posts<br> • Have read-only access to Microsoft Entra services, such as users and groups| +|Migration admin | Assign the Microsoft 365 Migration Administrator role to users who need to do the following tasks: <br> • Use Migration Manager in the Microsoft 365 admin center to manage content migration to Microsoft 365, including Teams, OneDrive for Business, and SharePoint sites, from various sources such as Google Drive, Dropbox, and Box.<br> • Select migration sources, create migration inventories (such as Google Drive user lists), schedule and execute migrations, and download reports.<br> • Create new SharePoint sites if the destination sites don't already exist, create SharePoint lists under the SharePoint admin sites, and create and update items in SharePoint lists.<br> • Manage migration project settings and migration lifecycle for tasks as well as manage permission mappings from source to destination.<br><br>**Note:** With this role, you can only migrate from Google Drive, Box, Dropbox and Egnyte. This role doesn't allow you to migrate from file share sources from the SharePoint admin center. Use the SharePoint admin to migrate from file share sources.| +|Office Apps admin | Assign the Office Apps admin role to users who need to do the following: <br> • Use the Cloud Policy service for Microsoft 365 to create and manage cloud-based policies.<br> • Create and manage service requests<br> • Manage the What's New content that users see in their apps in Microsoft 365<br> • Monitor service health | |Organizational Message Writer | Assign the Organizational Message Writer role to users who need to write, publish, manage, and review the organizational messages for end-users through Microsoft product surfaces. | |Organizational Messages Approver | Assign the Organizational Messages Approver role to users who need to review, approve, or reject new organizational messages for delivery in the Microsoft 365 admin center before they are sent to users through Microsoft product surfaces. | |Password admin | Assign the Password admin role to a user who needs to reset passwords for non-administrators and Password Administrators. |-|Power Platform admin | Assign the Power Platform admin role to users who need to do the following: <br> - Manage all admin features for Power Apps, Power Automate, Power BI, Microsoft Fabric, and Microsoft Purview Data Loss Prevention <br> - Create and manage service requests <br> - Monitor service health | -|Reports reader | Assign the Reports reader role to users who need to do the following: <br> - View usage data and the activity reports in the Microsoft 365 admin center <br> - Get access to the Power BI adoption content pack <br> - Get access to sign-in reports and activity in Microsoft Entra ID <br> - View data returned by Microsoft Graph reporting API| -|Search admin | Assign the Search admin role to users who need to create and manage search result content and define query settings for improved search results within the organization. The Search admin manages the Microsoft search configuration and can perform all the content-management tasks that a Search editor can. -|Service Support admin | Assign the Service Support admin role as an additional role to admins or users who need to do the following in addition to their usual admin role: <br> - Open and manage service requests <br> - View and share message center posts <br> - Monitor service health | -|SharePoint admin | Assign the SharePoint admin role to users who need to access and manage the SharePoint Online admin center. <br><br>SharePoint admins can also: <br> - Create and delete sites <br> - Manage site collections and global SharePoint settings | -|Teams administrator | Assign the Teams administrator role to users who need to access and manage the Teams admin center. <br><br>Teams administrator can also: <br> - Manage meetings <br> - Manage conference bridges <br> - Manage all org-wide settings, including federation, teams upgrade, and teams client settings | -|User admin | Assign the User admin role to users who need to do the following for all users: <br> - Add users and groups <br> - Assign licenses <br> - Manage most users properties <br> - Create and manage user views <br> - Update password expiration policies <br> - Manage service requests <br> - Monitor service health <br><br> The user admin can also do the following actions for users who aren't admins and for users assigned the following roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, Reports reader: <br> - Manage usernames<br> - Delete and restore users<br> - Reset passwords <br> - Force users to sign out <br> - Update (FIDO) device keys | +|Power Platform admin | Assign the Power Platform admin role to users who need to do the following: <br> • Manage all admin features for Power Apps, Power Automate, Power BI, Microsoft Fabric, and Microsoft Purview Data Loss Prevention<br> • Create and manage service requests<br> • Monitor service health | +|Reports reader | Assign the Reports reader role to users who need to do the following: <br> • View usage data and the activity reports in the Microsoft 365 admin center<br> • Get access to the Power BI adoption content pack<br> • Get access to sign-in reports and activity in Microsoft Entra ID<br> • View data returned by Microsoft Graph reporting API| +|Search admin | Assign the Search admin role to users who need to create and manage search result content and define query settings for improved search results within the organization. The Search admin manages the Microsoft search configuration and can perform all the content-management tasks that a Search editor can.| +|Service Support admin | Assign the Service Support admin role as an additional role to admins or users who need to do the following in addition to their usual admin role: <br> • Open and manage service requests<br> • View and share message center posts<br> • Monitor service health | +|SharePoint admin | Assign the SharePoint admin role to users who need to access and manage the SharePoint Online admin center. <br><br>SharePoint admins can also: <br> • Create and delete sites<br> • Manage site collections and global SharePoint settings | +|Teams administrator | Assign the Teams administrator role to users who need to access and manage the Teams admin center. <br><br>Teams administrator can also: <br> • Manage meetings<br> • Manage conference bridges<br> • Manage all org-wide settings, including federation, teams upgrade, and teams client settings | +|User admin | Assign the User admin role to users who need to do the following for all users: <br> • Add users and groups<br> • Assign licenses<br> • Manage most users properties<br> • Create and manage user views<br> • Update password expiration policies<br> • Manage service requests<br> • Monitor service health <br><br> The user admin can also do the following actions for users who aren't admins and for users assigned the following roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, Reports reader: <br> • Manage usernames<br> • Delete and restore users<br> • Reset passwords<br> • Force users to sign out<br> • Update (FIDO) device keys | |User Experience Success Manager | Assign the User Experience Success Manager role to users who need to access Experience Insights, Adoption Score, and the Message Center in the Microsoft 365 admin center. This role includes the permissions of the Usage Summary Reports Reader role. | ## Permissions based on Admin role and Group type in M365 Admin page |
| commerce | Billing Experience Overview | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/billing-experience-overview.md | |
| commerce | Manage License Requests | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/licenses/manage-license-requests.md | To see and manage license requests, use the **Requests** tab on the **Licensing* ## Before you begin -You must be a Global Administrator to perform the tasks in this article. For more information, see [About admin roles](../../admin/add-users/about-admin-roles.md). -+You must be at least a User Administrator or a License Administrator to do the tasks in this article. For more information, see [About admin roles](../../admin/add-users/about-admin-roles.md). ## Use your own request process |
| commerce | Understand Proposal Workflow | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/understand-proposal-workflow.md | |
| enterprise | Azure Integration | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/azure-integration.md | Title: "Azure integration with Microsoft 365" Previously updated : 12/19/2023 Last updated : 09/24/2024 audience: Admin |
| enterprise | Content Delivery Networks | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/content-delivery-networks.md | Title: "Content delivery networks" Previously updated : 12/27/2023 Last updated : 09/24/2024 audience: ITPro CDNs help to improve cloud service performance in several ways: ## The Microsoft 365 CDN -The built-in Microsoft 365 Content Delivery Network (CDN) allows Microsoft 365 administrators to provide better performance for their organization's SharePoint pages by caching static assets closer to the browsers requesting them, which helps to speed up downloads and reduce latency. The Microsoft 365 CDN uses the [HTTP/2 protocol](https://en.wikipedia.org/wiki/HTTP/2) for improved compression and download speeds. +The built-in Microsoft 365 Content Delivery Network (CDN) allows Microsoft 365 administrators to provide better performance for their organization's SharePoint in Microsoft 365 pages by caching static assets closer to the browsers requesting them, which helps to speed up downloads and reduce latency. The Microsoft 365 CDN uses the [HTTP/2 protocol](https://en.wikipedia.org/wiki/HTTP/2) for improved compression and download speeds. > [!NOTE] > The Microsoft 365 CDN is only available to tenants in the **Production** (worldwide) cloud. Tenants in the US Government, China and Germany clouds do not currently support the Microsoft 365 CDN. Although it isn't a part of the Microsoft 365 CDN, you can also use the **Azure ## Can I use CDNs with SharePoint Server on-premises? -Using CDNs only makes sense in a SharePoint context and should be avoided with SharePoint Server. This is because all of the advantages around geographic location don't hold true if the server is located on-premises or geographically close anyway. Additionally, if there's a network connection to the servers where it's hosted, then the site may be used without an Internet connection and therefore can't retrieve the CDN files. Otherwise, you should use a CDN if there's one available and stable for the library and files you need for your site. +Using CDNs only makes sense in a SharePoint in Microsoft 365 context and should be avoided with SharePoint Server. This is because all of the advantages around geographic location don't hold true if the server is located on-premises or geographically close anyway. Additionally, if there's a network connection to the servers where it's hosted, then the site may be used without an Internet connection and therefore can't retrieve the CDN files. Otherwise, you should use a CDN if there's one available and stable for the library and files you need for your site. ## See also |
| enterprise | M365 Dr Workload Other | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/m365-dr-workload-other.md | Customers based in EU and UK who signed up for Viva Goals prior to December 5, 2 ## Viva Insights ΓÇô Advanced, Mgr, Leader -See the [Static data location information for select workloads](#static-data-location-information-for-select-workloads) section. The data region for Manager/Leader and Advanced is determined by the _Default Geography_ of the _tenant_, not individual users. --Starting June 2024, Viva Insights (Advanced, Manager, Leader) customer data for new tenants in Australia will be provisioned in data centers located in Australia. +Refer to [Viva Insights data residency for advanced insights, managers, and leaders](/viva/insights/advanced/setup-maint/data-residency). ## Viva Insights ΓÇô Personal |
| enterprise | Microsoft 365 Integration | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/microsoft-365-integration.md | Title: "Microsoft 365 integration with on-premises environments" Previously updated : 12/19/2023 Last updated : 09/24/2024 audience: Admin |
| enterprise | View Directory Synchronization Status | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/view-directory-synchronization-status.md | Title: "View directory synchronization status in Microsoft 365" Previously updated : 12/18/2023 Last updated : 09/24/2024 audience: Admin If you have integrated your on-premises Active Directory Domain Services (AD DS) - Sign in to the [Microsoft 365 admin center](https://admin.microsoft.com) and choose **DirSync Status** on the home page. - Alternately, you can go to **Users** \> **Active users**, and on the **Active users** page, select the **Ellipse** \> **Directory synchronization**. On the **Directory Synchronization** pane, choose **Go to DirSync management**. +> [!NOTE] +> If you haven't already set up directory synchronization for your tenant, you will be redirected to the **Add or sync users to Microsoft Entra ID** advanced deployment guide. Follow the steps in the guide to add cloud users, set up one-time or continuous sync, or find troubleshooting information. + ## Information on the Manage directory synchronization page The following table lists the features you can get information about on the page. |
| syntex | Esignature Overview | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/syntex/esignature-overview.md | With SharePoint eSignature, you can quickly and securely send documents for sign ## Regional availability -SharePoint eSignature is currently available in the US. Beginning August 2024, it will be rolling out to the UK and Canada with EU availability by September 2024. It will be available in Australia and Asia-Pacific by the end of 2024, and globally in 2025. +SharePoint eSignature is currently available in the US, UK, and Canada. By November 2024, it will be available to the EU and APAC, and it will be available globally in 2025. <! Beginning September 2024, SharePoint eSignature will be rolling out to the UK, Canada, and the following European countries/regions: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czechia, Denmark, Estonia, Finland, Greece, Hungary, Ireland, Latvia, Lithuania, Luxembourg, Malta, Poland, Portugal, Romania, Slovakia, Slovenia, and Sweden. |