(Updated) Microsoft Viva: Copilot Analytics – Manager role license requirement update for team views

🚨 The Signal: Microsoft is removing the Viva Insights license requirement for managers to access Copilot Analytics team views. This change broadens access to sensitive organizational insights, making it critical to review existing access controls and manager settings to prevent unintended data exposure.

The Impact

Administrators and security teams are affected by increased data exposure risk due to automatic access for managers.

  • Administrators: Must review and reconfigure access controls for manager-scoped insights.
  • Security Teams: Increased risk of sensitive data exposure without proper access governance.
  • Managers: Gain access to team productivity data without explicit licensing, requiring careful oversight.
  • Organizations: Broader Copilot adoption may lead to wider data sharing if not properly managed.

The Action

  1. Navigate to Viva Insights Admin settings: https://insights.viva.microsoft.com/admin/settings
  2. Review 'Manager settings' to understand current configurations for manager-scoped insights.
  3. Explicitly disable or restrict access for managers and delegates who should not view Copilot Analytics team data.
  4. Communicate updated access policies to managers and relevant stakeholders.
  5. Monitor access logs for Viva Insights Copilot Analytics to detect unauthorized access.

Domain: Other · Impact: high · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898