1. Configure the Microsoft Copilot Component
1.1 Register an App and Generate the Client ID and Secret Key for Microsoft Copilot Auditing
For information on this please use the following link and follow the steps described:
Create or Update Client IDs and Secrets
NOTE: The user should copy Client ID and Secret Key as needed for Login Information
Click on the API Permission Tab for the given Client ID, click on Request API Permissions
2. Permissions for the Auditing of Copilot
Select Microsoft API’s and API’s my organization uses as follows:
Microsoft 365 Graph API’s, Office 365 Management API’s and select permission type(s) as detailed below:
Office 365 Management APIs
ActivityFeed.Read | Delegated |
ActivityFeed.ReadDlp | Delegated |
ActivityFeed.Read | Application |
ActivityFeed.ReadDlp | Application |
Microsoft Graph Permissions
AuditLog.Read.All | Delegated |
AuditLog.Read.All | Application |
AuditLogsQuery-OneDrive.Read.All | Application |
AuditLogsQuery-SharePoint.Read.All | Application |
AuditLogsQuery.Read.All | Application |
Directory.Read.All | Application |
Files.Read.All | Application |
InformationProtectionPolicy.Read.All | Application |
Organization.Read.All | Application |
User.Read.All | Application |
AiEnterpriseInteraction.Read.All | Application |
Grant Admin consent for Domain (Lepide Data Security Software) after API Permissions selection
NOTE: Every Permission change required must be granted Admin Consent for a given Domain.
NOTE: The user should be a member of the EDiscovery Manager Role to run a Content Search and Export query using PowerShell. This role should be assigned to the user whose email address was provided at the time of Copilot configuration.
3. Assigning the eDiscovery Manager Role in Microsoft Purview
Follow the steps below to assign the eDiscovery Manager role to a user in Microsoft Purview:
Steps to Assign the Role:
Access Microsoft Purview:
Open your web browser and navigate to Microsoft Purview
Navigate to Role Management:
Go to Settings
Select Roles and Scope
Click on Role Group
Edit the eDiscovery Manager Role Group:
Locate and select eDiscovery Manager
Click Edit
Choose the Users for Role Assignment:
Click on Choose Users
Select the users whom you want to assign the role
Click Select
Click Next
Confirm Role Assignment:
Ensure that the Manage eDiscovery Manager role is assigned
This role should be assigned to the user whose email address provided at the time of Co-pilot configuration.
Click Save to finalize the role assignment
By following the above steps, you can successfully assign the eDiscovery Manager role to the necessary users in Microsoft Purview.
4. Steps to Install the Online PowerShell Module
Open Windows PowerShell, run as Administrator
Run the following commands firstly in Windows PowerShell(x86) then in Windows PowerShell
To Ensure that you have Execution policy set as "Remote Signed " run the below command.
Get-ExecutionPolicy
If Execution policy is not RemoteSigned then run the below command.
Set-ExecutionPolicy RemoteSigned
To Ensure that you have Nuget Package installed run the below command.
Get-Module -ListAvailable -Name NuGet