Microsoft Copilot (Microsoft 365): Enable semantic model in Sales agent

🚨 The Signal: Copilot's Sales Agent can now use a 'semantic model' to better understand CRM data. This improves its ability to interpret business language and answer complex questions, requiring admin configuration of data sources.

The Impact

Dynamics 365 and Salesforce admins are affected, with a risk of unintended data exposure if the semantic model is not configured securely.

• Dynamics 365 admins: Must configure data coverage to prevent oversharing.
• Salesforce admins: Must configure data coverage to prevent oversharing.
• Security teams: Need to validate data access controls for the semantic model.
• Data owners: Risk of sensitive CRM data being exposed via Copilot if not managed.

The Action

1. Review existing data classification and sensitivity labels for CRM data.
2. In Power Apps Maker Portal, configure the semantic model's data coverage and signals for Sales Agent.
3. Explicitly define and restrict the underlying data, views, metadata, and relationships used by the model.
4. For Salesforce, configure additional Salesforce signals, relationships, and views in Power Apps Maker Portal.
5. Validate that Copilot's access to CRM data via the semantic model adheres to least privilege principles.

Domain: Agentic-AI · Impact: high · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898