github GitHub Changelog ·

GitHub Copilot enterprise managed settings expand to app and cloud agent

securitygovernanceengineer
feature

GitHub Copilot enterprise managed settings now extend to the Copilot app and cloud agent, allowing unified policy enforcement across multiple clients. This enables enterprise owners to control plugin usage, marketplace access, and prompt bypasses via a `managed-settings.json` file. This enhancement ensures consistent governance for developers using Copilot in various environments, including the app and cloud agent, mitigating security and compliance risks. The feature is available immediately for existing users of enterprise managed settings for CLI and VS Code.

  • Enterprise managed settings now control GitHub Copilot app and cloud agent
  • Unified governance for plugins and marketplaces
  • Improved security and compliance posture
  • Streamlined setup for existing users
  • New policy options for conversations and settings
Features (1)
  • Enterprise managed settings now control GitHub Copilot app and cloud agent

    GitHub Copilot enterprise managed settings, previously available for Copilot CLI and VS Code, now extend to the Copilot app and cloud agent. This allows enterprise owners to define a single set of policies for their organization's Copilot usage.

Enhancements (3)
  • Unified governance for plugins and marketplaces

    Organizations can now govern which plugins are available, which plugin marketplaces developers can install from, and whether developers can bypass approval prompts through a central `managed-settings.json` file. This ensures consistent application of security and access controls.

  • Improved security and compliance posture

    By extending managed settings to the app and cloud agent, enterprises can close governance gaps and ensure that Copilot usage across all surfaces adheres to organizational policies. This provides higher trust and confidence for teams adopting Copilot.

  • New policy options for conversations and settings

    New governance options include setting auto model selection as the default for new conversations within the Copilot app. The cloud agent also adheres to approved plugins and marketplace controls.

Notes (2)
  • Streamlined setup for existing users

    If enterprise managed settings are already deployed for Copilot CLI and VS Code, no new setup is required. The Copilot app and cloud agent will automatically adopt the existing `managed-settings.json` configuration upon restart or next task assignment.

  • Getting started with server-managed deployment

    For new users, server-managed deployment involves creating and configuring a `copilot/managed-settings.json` file within a private repository in the enterprise. Updated settings are typically applied within an hour, or upon client restart/sign-in.

Read the original announcement →

https://github.blog/changelog/2026-07-27-enterprise-managed-settings-now-apply-to-the-github-copilot-app

Related releases