Configuration Steps - Microsoft Copilot

1. Configure the Microsoft Copilot Component

1.1 Register an App and Generate the Client ID and Secret Key for Microsoft Copilot Auditing

NOTE: The user should copy Client ID and Secret Key as needed for Login Information

  • Click on the API Permission Tab for the given Client ID, click on Request API Permissions

2. Permissions for the Auditing of Copilot

  • Select Microsoft API’s and API’s my organization uses as follows:

    • Microsoft 365 Graph API’s, Office 365 Management API’s and select permission type(s) as detailed below:

Office 365 Management APIs

ActivityFeed.Read

Delegated

ActivityFeed.ReadDlp

Delegated

ActivityFeed.Read

Application

ActivityFeed.ReadDlp

Application

Microsoft Graph Permissions

AuditLog.Read.All

Delegated

AuditLog.Read.All

Application

AuditLogsQuery-OneDrive.Read.All

Application

AuditLogsQuery-SharePoint.Read.All

Application

AuditLogsQuery.Read.All

Application

Directory.Read.All

Application

Files.Read.All

Application

InformationProtectionPolicy.Read.All

Application

Organization.Read.All

Application

User.Read.All

Application

AiEnterpriseInteraction.Read.All

Application

Grant Admin consent for Domain (Lepide Data Security Software) after API Permissions selection

NOTE: Every Permission change required must be granted Admin Consent for a given Domain.

NOTE: The user should be a member of the EDiscovery Manager Role to run a Content Search and Export query using PowerShell. This role should be assigned to the user whose email address was provided at the time of Copilot configuration.

3. Assigning the eDiscovery Manager Role in Microsoft Purview

Follow the steps below to assign the eDiscovery Manager role to a user in Microsoft Purview:

Steps to Assign the Role:

  • Access Microsoft Purview:

  • Navigate to Role Management:

    • Go to Settings

    • Select Roles and Scope

    • Click on Role Group

  • Edit the eDiscovery Manager Role Group:

    • Locate and select eDiscovery Manager

    • Click Edit

  • Choose the Users for Role Assignment:

    • Click on Choose Users

    • Select the users whom you want to assign the role

    • Click Select

    • Click Next

  • Confirm Role Assignment:

    • Ensure that the Manage eDiscovery Manager role is assigned

  • This role should be assigned to the user whose email address provided at the time of Co-pilot configuration.

    • Click Save to finalize the role assignment

By following the above steps, you can successfully assign the eDiscovery Manager role to the necessary users in Microsoft Purview.

4. Steps to Install the Online PowerShell Module

  • Open Windows PowerShell, run as Administrator

    • Run the following commands firstly in Windows PowerShell(x86) then in Windows PowerShell

  • To Ensure that you have Execution policy set as "Remote Signed " run the below command.

    • Get-ExecutionPolicy

  • If Execution policy is not RemoteSigned then run the below command.

    • Set-ExecutionPolicy RemoteSigned

  • To Ensure that you have Nuget Package installed run the below command.

    1. Get-Module -ListAvailable -Name NuGet