---
title: Configuring Copilot Studio
description: Connect PingOne Privilege to Microsoft Copilot Studio so AI discovery can review its agent inventory.
component: privilege
page_id: privilege:agent-privilege:configuration/workload-agent-apps/copilot-studio
canonical_url: https://docs.pingidentity.com/privilege/agent-privilege/configuration/workload-agent-apps/copilot-studio.html
llms_txt: https://docs.pingidentity.com/privilege/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: October 21, 2026
---

# Configuring Copilot Studio

Connect Microsoft Copilot Studio as a workload agent application so AI discovery for workload agents can review the agents running in the tenant. Learn more in [Discover and manage workload agents](../../use-cases/workload-agents.html).

1. In the PingOne Privilege admin console, go to **AI Security > Workload Agents**.

2. Click the **Add Application** tab.

3. In the list of available applications, find **Copilot Studio** and click **[icon: plus, set=fa]Integrate**.

4. Enter a **Name** for the connection.

5. (Optional) Enter a **Description**.

6. Click **Next**.

7. Register an Entra ID App, then complete three steps:

   1. Assign the service provider (SP) *(tooltip: \<div class="paragraph">
      \<p>In SAML, an entity that receives and accepts an authentication assertion issued by an IdP, typically for the purpose of allowing access to a protected resource.\</p>
      \</div>)* a directory role in Entra ID. This step enables tenant-level discovery.

      1. Go to the [Microsoft Entra admin center](https://entra.microsoft.com/).

      2. Go to **Identity > Roles & admin > Roles & Admin**.

      3. Open **Power Platform Administrator**, then click **[icon: plus, set=fa]Add Assignments**.

      4. Add the service principal.

   2. Register the app as a **PP Admin Management App**. This step enables tenant-level admin API access.

      1. For this step, you can either:

         * Enter the following command in PowerShell:

           `New-PowerAppManagementApp -ApplicationId "<Your_App_Client_ID>"`

         * Use the following API call:

           `API: PUT https://api.bap.microsoft.com/providers/Microsoft.BusinessAppPlatform/adminApplications/<Your_App_Client_ID>?api-version=2020-10-01`

      2. Verify that `Get-PowerAppManagementApp` lists your app.

   3. Add the application user in each Dataverse environment. This step grants access to bots and flows inside the environment.

      1. Go to the [Power Platform admin center](https://admin.powerplatform.microsoft.com/).

      2. Go to **Environments > Select Environment**.

      3. Click **Settings > Users + permissions > Application users**.

      4. Click **New app user**.

      5. Select the app you created and assign the **System Administrator** role to it.

8. Click **Next**.

9. Enter your **Tenant ID**, **Client ID**, and **Client Secret**.

10. Click **Next**.

11. Review the summary, then click **Add Connection**.

You can now validate that the connection is active in the **Active Applications** tab.