(Updated) Microsoft Viva - Copilot Analytics: Export agent data from the Agent Dashboard

🚨 The Signal: Microsoft Viva will allow exporting de-identified Copilot agent usage data from the Agent Dashboard. This enables deeper analysis of AI adoption and licensing, but expands data access for senior leaders and global admins.

The Impact

Senior leaders and global admins gain new data export capabilities, increasing the risk of unintended data exposure if access controls are not rigorously managed.

  • Senior leaders: New data export capability increases risk of over-privileged access.
  • Global admins: Expanded data access requires careful review of existing permissions.
  • Delegates with company-level access: New export feature could lead to broader data exposure.
  • Global analysts: Enhanced data access necessitates strict adherence to data handling policies.

The Action

  1. Review existing roles and permissions for Viva Insights Agent Dashboard users, especially those with company-level access.
  2. Verify that 'Senior leaders (as identified in Microsoft Entra ID)' have appropriate data access roles.
  3. Implement or update data handling policies for exported de-identified Copilot agent usage data.
  4. Communicate the new export capability and associated data governance requirements to affected administrators and analysts.

Domain: Agentic-AI · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898