Checking the Prerequisites Before Connecting Microsoft Copilot

Confirm your licensing and access before you connect Microsoft Copilot, so that you can complete the connection without leaving the Connect App panel.

Before you begin

Before you create the Microsoft Copilot API connector, make sure your organization meets the following requirements:

• Each user whose Copilot activity you want to monitor has a valid Microsoft 365 Copilot license.
• The Microsoft Copilot with Graph-grounded chat service plan is enabled on that license.
• You have Microsoft Entra ID administrator rights to register an application and grant admin consent.

Work through these checks first. The tasks that follow assume all of them are in place.

Steps

1. Confirm that at least one user in your tenant holds a Microsoft Copilot add-on license, with the Microsoft Copilot with Graph-grounded chat service plan enabled.

   You verify both in the Microsoft 365 admin center, on the Licenses and apps tab for each user. For the steps, see How to Resolve Missing Copilot Activity After Connecting. Microsoft lists the subscriptions the add-on can be applied to in License options for Microsoft Copilot.

2. Confirm that you have Global Administrator access in Microsoft Entra ID.

   Global Administrator access is required to register the application and to grant the API permissions the connector needs.

3. Confirm that you have permission to manage connectors in Forcepoint Data Security Cloud.

4. Review the permissions the connector will request.

   Your security team may want to approve these before you begin. See Understanding the Permissions Microsoft Copilot Requires.

5. Decide which authentication method you will use.

   Admin consent needs no setup in Microsoft Entra. A client secret needs an app registration, from which you collect three values. See Choosing Between Client Secret and Admin Consent.

6. Optional: If you are using a client secret, collect the three values the connector needs.

   • The application (client) ID. See Finding Your Application Client ID in Microsoft Entra.
   • A client secret. See Generating a Client Secret in Microsoft Entra.
   • The directory (tenant) ID. See Finding Your Directory (Tenant) ID.

   All three come from a Microsoft Entra app registration. See Registering an App in Microsoft Entra for Copilot.

   Skip this step if you are using admin consent. None of these values are required.

Result

You have everything you need to connect Microsoft Copilot.

See also:

• Configuring API settings