Configuring Copilot Studio

Connect Microsoft Copilot Studio as a workload agent application so AI discovery for workload agents can review the agents running in the tenant. Learn more in Discover and manage workload agents.

In the PingOne Privilege admin console, go to AI Security > Workload Agents.
Click the Add Application tab.
In the list of available applications, find Copilot Studio and click Integrate.
Enter a Name for the connection.
(Optional) Enter a Description.
Click Next.
Register an Entra ID App, then complete three steps:
1. Assign the service provider (SP) a directory role in Entra ID. This step enables tenant-level discovery.
  1. Go to the Microsoft Entra admin center.
  2. Go to Identity > Roles & admin > Roles & Admin.
  3. Open Power Platform Administrator, then click Add Assignments.
  4. Add the service principal.
2. Register the app as a PP Admin Management App. This step enables tenant-level admin API access.
  1. For this step, you can either:
    
    Enter the following command in PowerShell:
    
    New-PowerAppManagementApp -ApplicationId "<Your_App_Client_ID>"
    
    Use the following API call:
    
    API: PUT https://api.bap.microsoft.com/providers/Microsoft.BusinessAppPlatform/adminApplications/<Your_App_Client_ID>?api-version=2020-10-01
  2. Verify that Get-PowerAppManagementApp lists your app.
3. Add the application user in each Dataverse environment. This step grants access to bots and flows inside the environment.
  1. Go to the Power Platform admin center.
  2. Go to Environments > Select Environment.
  3. Click Settings > Users + permissions > Application users.
  4. Click New app user.
  5. Select the app you created and assign the System Administrator role to it.
Click Next.
Enter your Tenant ID, Client ID, and Client Secret.
Click Next.
Review the summary, then click Add Connection.

You can now validate that the connection is active in the Active Applications tab.

PingOne Privilege

Configuring Copilot Studio