diff --git a/memdocs/intune/copilot/copilot-devices.md b/memdocs/intune/copilot/copilot-devices.md index df5f72f2d2d..340b0633a61 100644 --- a/memdocs/intune/copilot/copilot-devices.md +++ b/memdocs/intune/copilot/copilot-devices.md @@ -7,7 +7,7 @@ keywords: security copilot, intune, microsoft intune, copilot, device informatio author: Erikre ms.author: erikre manager: dougeby -ms.date: 04/01/2024 +ms.date: 11/08/2024 ms.topic: how-to ms.service: microsoft-intune ms.subservice: @@ -31,7 +31,7 @@ ms.collection: # Use Microsoft Copilot in Intune to troubleshoot devices (public preview) -Microsoft Copilot for Security is a generative-AI security analysis tool that can help your organization get information quickly. Copilot is [built into Microsoft Intune](copilot-intune-overview.md). It can help IT admins manage and troubleshoot devices. +Microsoft Security Copilot is a generative-AI security analysis tool that can help your organization get information quickly. Copilot is [built into Microsoft Intune](copilot-intune-overview.md). It can help IT admins manage and troubleshoot devices. Copilot uses your Intune data. Admins can only access the data that they have permissions to, which includes the [RBAC roles](../fundamentals/role-based-access-control.md) and [scope tags](../fundamentals/scope-tags.md) assigned to them. For more information, see [Microsoft Copilot in Intune FAQ](copilot-intune-faq.md). @@ -50,7 +50,7 @@ This article describes how to use Copilot to manage and troubleshoot device issu - To use Copilot in Intune, make sure Copilot is enabled. For more information, see: - [Microsoft Copilot in Intune](../copilot/copilot-intune-overview.md#before-you-begin) - - [Get started with Microsoft Copilot for Security](/security-copilot/get-started-security-copilot) + - [Get started with Microsoft Security Copilot](/security-copilot/get-started-security-copilot) - When you use the Copilot prompts to troubleshoot your devices, you are within the scope of the device you select. diff --git a/memdocs/intune/copilot/copilot-intune-faq.md b/memdocs/intune/copilot/copilot-intune-faq.md index 86c00f6728e..bec286077a4 100644 --- a/memdocs/intune/copilot/copilot-intune-faq.md +++ b/memdocs/intune/copilot/copilot-intune-faq.md @@ -7,7 +7,7 @@ keywords: security copilot, intune, microsoft intune, copilot, faq author: Erikre ms.author: erikre manager: dougeby -ms.date: 04/01/2024 +ms.date: 11/08/2024 ms.topic: how-to ms.service: microsoft-intune ms.subservice: @@ -37,25 +37,25 @@ This article answers common questions about using Microsoft Copilot in Intune. F ### How can I control access to Copilot in Intune? -When you set up Copilot for Security, you determine the Copilot role that your admins can have (owner or contributor), as described in [Roles and authentication in Microsoft Copilot for Security](/security-copilot/authentication). There are also Microsoft Entra roles that can control access to Copilot for Security. +When you set up Security Copilot, you determine the Copilot role that your admins can have (owner or contributor), as described in [Roles and authentication in Microsoft Security Copilot](/security-copilot/authentication). There are also Microsoft Entra roles that can control access to Security Copilot. -The Copilot for Security roles or the Microsoft Entra roles that you configure control access to Copilot in Intune. There aren't any Intune-specific roles-based access controls (RBAC) for Copilot in Intune. +The Security Copilot roles or the Microsoft Entra roles that you configure control access to Copilot in Intune. There aren't any Intune-specific roles-based access controls (RBAC) for Copilot in Intune. -After you enable Intune in Copilot for Security, your Intune admins can see the Copilot features in the Intune admin center. But they can only access the data that they have permission to. Copilot honors existing [Intune RBAC roles](../fundamentals/role-based-access-control.md) and [Intune scope tags](../fundamentals/scope-tags.md) that are assigned to your admins. +After you enable Intune in Security Copilot, your Intune admins can see the Copilot features in the Intune admin center. But they can only access the data that they have permission to. Copilot honors existing [Intune RBAC roles](../fundamentals/role-based-access-control.md) and [Intune scope tags](../fundamentals/scope-tags.md) that are assigned to your admins. So, if an admin tries to access Intune data that they don't have permissions to, they get the following error message: `You don't have permission to access this feature. Reach out to your IT administrator for help.` -If you want access to Copilot in Intune, contact the Copilot for Security workspace owner in your organization. If you want access to all your Intune data, contact your Intune administrator. +If you want access to Copilot in Intune, contact the Security Copilot workspace owner in your organization. If you want access to all your Intune data, contact your Intune administrator. -### Can I use Copilot for Security if I'm not an Intune admin, and vice versa? +### Can I use Security Copilot if I'm not an Intune admin, and vice versa? -Yes. Access to Copilot for Security is managed by using Copilot for Security or Microsoft Entra roles. For more information, see [Roles and authentication in Microsoft Copilot for Security](/security-copilot/authentication). +Yes. Access to Security Copilot is managed by using Security Copilot or Microsoft Entra roles. For more information, see [Roles and authentication in Microsoft Security Copilot](/security-copilot/authentication). -If you're an Intune admin and have the correct Copilot for Security or Microsoft Entra role assigned to you, you can use Copilot for Security to get insights about your Intune data. +If you're an Intune admin and have the correct Security Copilot or Microsoft Entra role assigned to you, you can use Security Copilot to get insights about your Intune data. -Copilot for Security is scoped to all your embedded services. +Security Copilot is scoped to all your embedded services. If you're an Intune admin or IT admin and only want Intune data, you should use [Copilot in Intune](copilot-intune-overview.md). Its scope is only Intune data, and its capabilities are integrated into the relevant areas of the Intune admin center. @@ -65,44 +65,44 @@ If you're a security admin, you can use [Copilot in Intune](copilot-intune-overv ### How do I turn on Intune capabilities? -In the [Microsoft Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989), select **Sources** (prompt bar > right corner), and enable the Microsoft Intune plug-in. This plug-in allows you to access your Intune data and use the Copilot features in the Intune admin center. +In the [Microsoft Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989), select **Sources** (prompt bar > right corner), and enable the Microsoft Intune plug-in. This plug-in allows you to access your Intune data and use the Copilot features in the Intune admin center. -For more information about managing plug-ins, see [Manage plug-ins in Copilot for Security](/security-copilot/manage-plugins). +For more information about managing plug-ins, see [Manage plug-ins in Security Copilot](/security-copilot/manage-plugins). ### Can I use capabilities for other Copilot services in the Intune admin center? No. Copilot in Intune in the Intune admin center is available only for Intune capabilities. -You can't get insights from other Microsoft services, like Microsoft Defender, Microsoft Entra, and Microsoft Purview. To get insights from other Microsoft services, you can use the [Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989). +You can't get insights from other Microsoft services, like Microsoft Defender, Microsoft Entra, and Microsoft Purview. To get insights from other Microsoft services, you can use the [Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989). ### How much does Copilot in Intune cost? -Copilot in Intune is included with Copilot for Security. Copilot for Security uses security compute units (SCUs). There aren't any other licensing requirements or Intune-specific licenses for using Copilot in Intune. +Copilot in Intune is included with Security Copilot. Security Copilot uses security compute units (SCUs). There aren't any other licensing requirements or Intune-specific licenses for using Copilot in Intune. For more information about SCUs, see: - [Get started with Microsoft Copilot](/security-copilot/get-started-security-copilot) -- [Manage capacity in Copilot for Security](/security-copilot/manage-usage) +- [Manage capacity in Security Copilot](/security-copilot/manage-usage) ### Is there a limit on the prompt output? -Copilot in Intune is bound by any token limits in Copilot for Security. For more information, see [Copilot for Security FAQ - Token limits](/security-copilot/faq-security-copilot#how-is-copilot-for-security-dealing-with-a-token-limit). +Copilot in Intune is bound by any token limits in Security Copilot. For more information, see [Security Copilot FAQ - Token limits](/security-copilot/faq-security-copilot#how-is-copilot-for-security-dealing-with-a-token-limit). -## Copilot for Security vs. Copilot in Intune +## Security Copilot vs. Copilot in Intune -### Does Copilot for Security give admins more access to Intune data than is available in the Intune admin center? +### Does Security Copilot give admins more access to Intune data than is available in the Intune admin center? -No. The Intune capabilities in Copilot for Security are built using the existing Microsoft Graph APIs, which are the same APIs that the Intune admin center uses. Both Copilot experiences use the same Intune capabilities. +No. The Intune capabilities in Security Copilot are built using the existing Microsoft Graph APIs, which are the same APIs that the Intune admin center uses. Both Copilot experiences use the same Intune capabilities. -### To get Intune insights, should I use Copilot for Security or Copilot in Intune? +### To get Intune insights, should I use Security Copilot or Copilot in Intune? -To use Copilot with your Intune data, you can use Copilot in Intune or Copilot for Security. Here's a comparison of the two experiences: +To use Copilot with your Intune data, you can use Copilot in Intune or Security Copilot. Here's a comparison of the two experiences: -| Feature | Copilot in Intune | Copilot for Security | +| Feature | Copilot in Intune | Security Copilot | |---|---|---| | **Access and data insights** | This Copilot is embedded in the Intune admin center and is scoped to only show Intune data.

Intune admins should use Copilot in Intune for Intune-only tasks. | This Copilot is a standalone experience. It can access other embedded services, like Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and Microsoft Intune.

It accesses the same Intune capabilities as Copilot in Intune. | | **Open prompting** | Intune provides a set of prompts you can use. There isn't an open prompt. There are plans to include an open prompt in the future (no ETA).| Can use open prompts or use [promptbooks](/security-copilot/using-promptbooks). | -| **Prompt history** | The prompt/response history isn't available in the Intune admin center. To view the prompt history, use Copilot for Security.

The prompts can look different compared with the prompts shown in Intune, as Intune enters the prompt for you. | You can review the prompt/response history even when the prompt is submitted in the standalone or embedded experience. | +| **Prompt history** | The prompt/response history isn't available in the Intune admin center. To view the prompt history, use Security Copilot.

The prompts can look different compared with the prompts shown in Intune, as Intune enters the prompt for you. | You can review the prompt/response history even when the prompt is submitted in the standalone or embedded experience. | | **Target audience** | Focus is the IT admin/IT Pro. | Focus is the Security Operations Center (SOC) and can be used by IT admins. | ## Feedback and troubleshooting Copilot @@ -122,9 +122,9 @@ Other things you can try: - If you're working with Microsoft to debug the issue, support might ask you for the session ID. To get the session ID, you can: - Use the F12 developer tools in your browser. This information shows the capabilities that Copilot uses. - - In the [Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989), you can view the prompt sessions and session IDs from the Intune embedded experience. + - In the [Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989), you can view the prompt sessions and session IDs from the Intune embedded experience. ## Related articles -- [Microsoft Copilot for Security FAQ](/security-copilot/faq-security-copilot) +- [Microsoft Security Copilot FAQ](/security-copilot/faq-security-copilot) - [Microsoft Copilot in Intune](copilot-intune-overview.md) \ No newline at end of file diff --git a/memdocs/intune/copilot/copilot-intune-overview.md b/memdocs/intune/copilot/copilot-intune-overview.md index c15da3ceec2..70ab14ec2a1 100644 --- a/memdocs/intune/copilot/copilot-intune-overview.md +++ b/memdocs/intune/copilot/copilot-intune-overview.md @@ -7,7 +7,7 @@ keywords: Security Copilot, Intune, Microsoft Intune, AI, Copilot, settings cata author: Erikre ms.author: erikre manager: dougeby -ms.date: 04/01/2024 +ms.date: 11/08/2024 ms.topic: get-started ms.service: microsoft-intune ms.subservice: @@ -36,7 +36,7 @@ ms.collection: This feature is in [public preview](../fundamentals/public-preview.md). -[Microsoft Copilot for Security](/security-copilot/microsoft-security-copilot) is a generative-AI security analysis tool. It can help you and your organization get information quickly and make decisions that affect security and risk. +[Microsoft Security Copilot](/security-copilot/microsoft-security-copilot) is a generative-AI security analysis tool. It can help you and your organization get information quickly and make decisions that affect security and risk. Intune has capabilities that are powered by Copilot. These capabilities access your Intune data and help you manage your policies and settings, understand your security posture, and troubleshoot device issues. @@ -46,9 +46,9 @@ There are two ways to access your Intune data by using Copilot: This experience has an IT admin/IT Pro focus. -- **Microsoft Copilot for Security**: This option is a standalone Copilot and is available in the [Microsoft Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989). You can use this portal to get insights from Copilot for Security for all your enabled services, like Intune, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and more. +- **Microsoft Security Copilot**: This option is a standalone Copilot and is available in the [Microsoft Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989). You can use this portal to get insights from Security Copilot for all your enabled services, like Intune, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and more. - This experience has a Security Operations Center (SOC) focus and can be used by IT admins. For more information, see [Access your Microsoft Intune data in Copilot for Security](security-copilot.md). + This experience has a Security Operations Center (SOC) focus and can be used by IT admins. For more information, see [Access your Microsoft Intune data in Security Copilot](security-copilot.md). This article focuses on Copilot in Intune and describes the Intune features that you can use with Copilot. @@ -56,35 +56,35 @@ This article focuses on Copilot in Intune and describes the Intune features that To use Copilot in Intune, you should know the following information: -- **Copilot security compute units (SCUs)**: Copilot in Intune is included with Copilot for Security. There aren't any other licensing requirements or Intune-specific licenses for using Copilot in Intune. +- **Copilot security compute units (SCUs)**: Copilot in Intune is included with Security Copilot. There aren't any other licensing requirements or Intune-specific licenses for using Copilot in Intune. For more information about SCUs, see: - [Get started with Microsoft Copilot](/security-copilot/get-started-security-copilot) - - [Manage capacity in Copilot for Security](/security-copilot/manage-usage) + - [Manage capacity in Security Copilot](/security-copilot/manage-usage) -- **Copilot configuration**: Before you can use the Copilot features in Intune, Microsoft Copilot for Security must be configured, and you must complete the first run tour in the [Microsoft Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989). For the setup tasks, see [Get started with Microsoft Copilot](/security-copilot/get-started-security-copilot). +- **Copilot configuration**: Before you can use the Copilot features in Intune, Microsoft Security Copilot must be configured, and you must complete the first run tour in the [Microsoft Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989). For the setup tasks, see [Get started with Microsoft Copilot](/security-copilot/get-started-security-copilot). You can check the status in the [Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) > **Tenant administration** > **Copilot**. :::image type="content" source="./media/copilot-intune-overview/tenant-administration-copilot-enabled.png" alt-text="Screenshot that shows Copilot is enabled in the Microsoft Intune tenant and Intune admin center." lightbox="./media/copilot-intune-overview/tenant-administration-copilot-enabled.png"::: -- **Copilot roles**: Access to Copilot in Intune is managed through Copilot for Security or Microsoft Entra ID. To use Copilot in Intune, you or your admin team must be assigned the appropriate role in Copilot for Security or Microsoft Entra ID. There isn't a built-in Intune role that has access to Copilot. +- **Copilot roles**: Access to Copilot in Intune is managed through Security Copilot or Microsoft Entra ID. To use Copilot in Intune, you or your admin team must be assigned the appropriate role in Security Copilot or Microsoft Entra ID. There isn't a built-in Intune role that has access to Copilot. - For more information, see [Roles and authentication in Microsoft Copilot for Security](/security-copilot/authentication). + For more information, see [Roles and authentication in Microsoft Security Copilot](/security-copilot/authentication). -- **Intune plug-in source**: To use Copilot in Intune, you need the Intune plug-in enabled in Copilot for Security. This plug-in allows you to access your Intune data and use Copilot in the Intune admin center. +- **Intune plug-in source**: To use Copilot in Intune, you need the Intune plug-in enabled in Security Copilot. This plug-in allows you to access your Intune data and use Copilot in the Intune admin center. - Go to the [Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989) and select **Sources** (prompt bar > right corner). + Go to the [Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989) and select **Sources** (prompt bar > right corner). - :::image type="content" source="./media/copilot-intune-overview/security-copilot-sources.png" alt-text="Screenshot that shows the plugin sources that are available, enabled, and disabled in Microsoft Copilot for Security."::: + :::image type="content" source="./media/copilot-intune-overview/security-copilot-sources.png" alt-text="Screenshot that shows the plugin sources that are available, enabled, and disabled in Microsoft Security Copilot."::: In **Manage sources**, enable Microsoft Intune. - :::image type="content" source="./media/copilot-intune-overview/intune-plug-in-enabled.png" alt-text="Screenshot that shows the Microsoft Intune plug-in source is enabled in the Microsoft Copilot for Security portal."::: + :::image type="content" source="./media/copilot-intune-overview/intune-plug-in-enabled.png" alt-text="Screenshot that shows the Microsoft Intune plug-in source is enabled in the Microsoft Security Copilot portal."::: > [!TIP] - > Some roles can enable or disable plug-ins. For more information, see [Manage plug-ins in Microsoft Copilot for Security](/security-copilot/manage-plugins). + > Some roles can enable or disable plug-ins. For more information, see [Manage plug-ins in Microsoft Security Copilot](/security-copilot/manage-plugins). - **Your Intune data**: Copilot uses your Intune data. When an Intune admin submits a prompt, Copilot can only access the data that they have permissions to, which includes the [RBAC roles](../fundamentals/role-based-access-control.md) and [scope tags](../fundamentals/scope-tags.md) assigned to them. @@ -195,4 +195,4 @@ For a full list of supported properties in device query, go to [Device query](.. - [Use Microsoft Copilot in Intune to troubleshoot devices](../copilot/copilot-devices.md). - [Use the settings catalog to create device configuration policies](../configuration/settings-catalog.md). -- [Learn more about Intune capabilities in Microsoft Copilot for Security](security-copilot.md). +- [Learn more about Intune capabilities in Microsoft Security Copilot](security-copilot.md). diff --git a/memdocs/intune/copilot/security-copilot.md b/memdocs/intune/copilot/security-copilot.md index 5f312d6a034..000ae4d5652 100644 --- a/memdocs/intune/copilot/security-copilot.md +++ b/memdocs/intune/copilot/security-copilot.md @@ -1,13 +1,13 @@ --- # required metadata -title: Use Copilot for Security to get device and policy information -description: You can use Copilot for Security to get information about your Intune data, including devices, apps, policies, and groups managed in Intune. You can also compare policies, get device specific details, and get target info for policies. +title: Security Copilot in Microsoft Intune +description: You can use Security Copilot to get information about your Intune data, including devices, apps, policies, and groups managed in Intune. You can also compare policies, get device specific details, and get target info for policies. keywords: author: Erikre ms.author: erikre manager: dougeby -ms.date: 04/01/2024 +ms.date: 11/08/2024 ms.topic: concept-article ms.service: microsoft-intune ms.subservice: @@ -32,29 +32,46 @@ ms.collection: - magic-ai-copilot --- -# Access your Microsoft Intune data in Copilot for Security +# Security Copilot in Microsoft Intune -Copilot for Security is a cloud-based AI platform that provides a natural language Copilot experience. It can help support security professionals in different scenarios, like incident response, threat hunting, and intelligence gathering. For more information about what it can do, go to [What is Microsoft Copilot for Security?](/security-copilot/microsoft-security-copilot). +Microsoft Security Copilot is a cloud-based AI platform that provides a natural language Copilot experience. It can help support security professionals in different scenarios, like incident response, threat hunting, and intelligence gathering. For more information about what it can do, go to [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot) -**Copilot for Security integrates with your Microsoft Intune data**. +## Know before you begin -If you use [Microsoft Intune](../fundamentals/what-is-intune.md) in the same tenant as Copilot for Security, then you can use Copilot for Security to get insights about your Intune data. +If you're new to Security Copilot, you should familiarize yourself with it by reading these articles: +- [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot) +- [Microsoft Security Copilot experiences](/security-copilot/experiences-security-copilot) +- [Get started with Microsoft Security Copilot](/security-copilot/get-started-security-copilot) +- [Understand authentication in Microsoft Security Copilot](/security-copilot/authentication) +- [Prompting in Microsoft Security Copilot](/security-copilot/prompting-security-copilot) -There are Intune capabilities built into Copilot for Security, and you can use prompts to get more information, including: +## Security Copilot integration in Microsoft Intune + +If you use [Microsoft Intune](../fundamentals/what-is-intune.md) in the same tenant as Security Copilot, then you can use Security Copilot to get insights about your Intune data. + +There are Intune capabilities built into Security Copilot, and you can use prompts to get more information, including: - Information about your devices, apps, compliance & configuration policies, and policy assignments managed in Intune - Managed device attributes and hardware details - Issue with specific devices and compare a working & non-working device -This article shows you how to access your Microsoft Intune data in Copilot for Security and includes sample prompts. +This article shows you how to access your Microsoft Intune data in Security Copilot and includes sample prompts. + +## Key features + +There are three areas to use Copilot in Intune: -## Security admin focus +- [Policy and setting management](../copilot/copilot-intune-overview.md#policy-and-setting-management) +- [Device details and troubleshooting](../copilot/copilot-intune-overview.md#device-details-and-troubleshooting) +- [Device query](../copilot/copilot-intune-overview.md#query-with-copilot-in-device-query) -Copilot for Security has a Security Operations Center (SOC) or security admin focus. So, if you're a SOC analyst or security admin, then you can use Copilot for Security to get the security posture of devices that Intune manages. +### Security admin focus + +Security Copilot has a Security Operations Center (SOC) or security admin focus. So, if you're a SOC analyst or security admin, then you can use Security Copilot to get the security posture of devices that Intune manages. For example, there's a user or device that is showing signs of malicious intent. Also, you notice some events are happening after the malicious intent, like an unknown device enrolling in Intune. Maybe someone is trying to use stolen credentials to enroll and get access. You need to get more information. -In Copilot for Security, you can use the Intune capabilities to get more information, like: +In Security Copilot, you can use the Intune capabilities to get more information, like: - Ask about a specific device, get all the properties about that device, including the device name, device ID, and device manufacturer. - Determine when the device is enrolled in Intune. @@ -62,73 +79,71 @@ In Copilot for Security, you can use the Intune capabilities to get more informa - Determine the type of device, like a laptop or mobile phone. - Check the compliance status, especially if a device is noncompliant, and why it's noncompliant. -In Microsoft Defender, you can use this information, including the device type, to determine your next steps. For example, you might take different actions based on the type of device (laptop vs. mobile phone vs. tablet). Copilot for Security can also give you a link to the device in Microsoft Defender, so you can run any Defender actions. +In Microsoft Defender, you can use this information, including the device type, to determine your next steps. For example, you might take different actions based on the type of device (laptop vs. mobile phone vs. tablet). Security Copilot can also give you a link to the device in Microsoft Defender, so you can run any Defender actions. ### What you need to know - When an admin submits a prompt, Copilot can only access the data that the admin has permissions to, which includes the [RBAC roles](../fundamentals/role-based-access-control.md) and [Intune scope tags](../fundamentals/scope-tags.md) assigned to them. - If you want your admins to access all your Intune data in Copilot for Security, then use the following role in Microsoft Entra ID: + If you want your admins to access all your Intune data in Security Copilot, then use the following role in Microsoft Entra ID: - Intune Service Administrator (also known as Intune Administrator) For more information on roles and authentication, go to: - - [Roles and authentication in Microsoft Copilot for Security](/security-copilot/authentication) + - [Roles and authentication in Microsoft Security Copilot](/security-copilot/authentication) - [Role based access control (RBAC) in Intune](../fundamentals/role-based-access-control.md) - [Use RBAC and scope tags for distributed IT in Intune](../fundamentals/scope-tags.md) -- You can access your Intune data in the [Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989) and Copilot in the [Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431). For more information on Copilot in Intune vs. Copilot for Security, and other common questions, go to the [Microsoft Copilot in Intune FAQ](copilot-intune-faq.md). - -## Open Copilot for Security and enable Intune +- You can access your Intune data in the [Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989) and Copilot in the [Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431). For more information on Copilot in Intune vs. Security Copilot, and other common questions, go to the [Microsoft Copilot in Intune FAQ](copilot-intune-faq.md). -To use the Intune capabilities in Copilot for Security, enable the Intune plugin. +## Enable the Security Copilot integration in Intune + +To use the Intune capabilities in Security Copilot, enable the Intune plugin. -1. Go to [Microsoft Copilot for Security](https://go.microsoft.com/fwlink/?linkid=2247989) and sign in with your credentials. +1. Go to [Security Copilot](https://go.microsoft.com/fwlink/?linkid=2247989) and sign in with your credentials. 2. In the prompt bar, select **Sources** (right corner). - :::image type="content" source="./media/security-copilot/security-copilot-sources.png" alt-text="Screenshot that shows the plugin sources that are available, enabled, and disabled in Microsoft Copilot for Security."::: + :::image type="content" source="./media/security-copilot/security-copilot-sources.png" alt-text="Screenshot that shows the plugin sources that are available, enabled, and disabled in Microsoft Security Copilot."::: 3. In **Manage sources**, turn on Microsoft Intune: - :::image type="content" source="./media/security-copilot/intune-plug-in-enabled.png" alt-text="Screenshot that shows the Microsoft Intune plug-in source is enabled in Microsoft Copilot for Security."::: + :::image type="content" source="./media/security-copilot/intune-plug-in-enabled.png" alt-text="Screenshot that shows the Microsoft Intune plug-in source is enabled in Security Copilot."::: > [!NOTE] - > Some roles can enable or disable plugins. For more information, go to [Manage plugins in Microsoft Copilot for Security](/security-copilot/manage-plugins). + > Some roles can enable or disable plugins. For more information, go to [Manage plugins in Microsoft Security Copilot](/security-copilot/manage-plugins). -## Use the built-in features +### Use the built-in features -In Copilot for Security, there are built in system features that are helpful for Intune admins. For a walkthrough of Copilot for Security, go to [Navigating Microsoft Copilot for Security](/security-copilot/navigating-security-copilot). +In Security Copilot, there are built in system features that are helpful for Intune admins. For a walkthrough of Security Copilot, go to [Navigating Microsoft Security Copilot](/security-copilot/navigating-security-copilot). This section describes some of the features that are helpful for Intune admins. -### System capabilities +#### System capabilities Capabilities are built-in features that can get data from the different plugins that you enable, including Microsoft Intune. When you use a prompt to ask something about your Intune data, like apps assigned to a user or device details, your prompts use these Intune capabilities. To view the list of Intune built-in system capabilities for Intune, use the following steps: -1. In the [Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989) prompt bar, select the Copilot prompts icon > **See all system capabilities**. +1. In the [Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989) prompt bar, select the Copilot prompts icon > **See all system capabilities**. - :::image type="content" source="./media/security-copilot/security-copilot-system-capabilities.png" alt-text="Screenshot that shows how to select the prompts icon and system capabilities in Microsoft Copilot for Security."::: + :::image type="content" source="./media/security-copilot/security-copilot-system-capabilities.png" alt-text="Screenshot that shows how to select the prompts icon and system capabilities in Security Copilot."::: 2. In the Microsoft Intune section, there's a list of all the built-in capabilities for Intune. You can select any of the capabilities and get more information about that capability. -### Sessions - -When you use prompts in the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) or in the Copilot for Security portal, the sessions are saved. To see the saved sessions, use the following steps: +#### Sessions -1. In the [Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989), go to the menu > **My sessions**. +When you use prompts in the [Microsoft Intune admin center](https://go.microsoft.com/fwlink/?linkid=2109431) or in the Security Copilot portal, the sessions are saved. To see the saved sessions, use the following steps: - :::image type="content" source="./media/security-copilot/security-copilot-menu-my-sessions.png" alt-text="Screenshot that shows the Microsoft Copilot for Security menu and My sessions with previous sessions in Copilot for Security portal."::: +1. In the [Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989), go to the menu at the top left > **My sessions**. 2. When you select a session, your previous prompts and results are shown. Every session also has a session ID in the URL. You can share this session ID with others to review the same prompt session. For example, your session ID is something like `https://securitycopilot.microsoft.com/sessions/023d1c61-f3c7-4702-8924-075a1058900d`. -## Sample prompts for Intune +## Sample Intune prompts -You can create your own prompts in Copilot for Security to get information about your Intune data. This section lists some ideas and examples. +You can create your own prompts in Security Copilot to get information about your Intune data. This section lists some ideas and examples. ### Before you begin @@ -143,8 +158,8 @@ You can create your own prompts in Copilot for Security to get information about You can also save your prompts in a promptbook for future use. For more information, go to: - - [Prompting in Microsoft Copilot for Security](/security-copilot/prompting-security-copilot) - - [Using promptbooks in Microsoft Copilot for Security](/security-copilot/using-promptbooks) + - [Prompting in Microsoft Security Copilot](/security-copilot/prompting-security-copilot) + - [Using promptbooks in Microsoft Security Copilot](/security-copilot/using-promptbooks) ### General information about your Intune data @@ -196,22 +211,22 @@ Get the **similarities and differences** between two devices, like the complianc ## Provide feedback -Your feedback on the Intune integration with Copilot for Security helps with development. To provide feedback, in Copilot for Security, use the feedback buttons at the bottom of each completed prompt. +Your feedback on the Intune integration with Security Copilot helps with development. To provide feedback, in Security Copilot, use the feedback buttons at the bottom of each completed prompt. -:::image type="content" source="./media/security-copilot/security-copilot-prompt-feedback.png" alt-text="Screenshot that shows how to submit feedback on the prompt results in Microsoft Copilot for Security."::: +:::image type="content" source="./media/security-copilot/security-copilot-prompt-feedback.png" alt-text="Screenshot that shows how to submit feedback on the prompt results in Security Copilot."::: Whenever possible, and when the result isn't what you expect, write a few words explaining what can be done to improve the outcome. If you entered Intune-specific prompts and the results aren't Intune related, then include that information. -## Data processing and privacy +## Privacy and data security in Security Copilot -For more information about data privacy in Copilot for Security, go to [Privacy and data security in Microsoft Copilot for Security](/security-copilot/privacy-data-security). +For more information about data privacy in Security Copilot, go to [Privacy and data security in Microsoft Security Copilot](/security-copilot/privacy-data-security). When you interact with the Security Copilot to get Intune data, the Security Copilot pulls that data from Intune. The prompts, the Intune data that's retrieved, and the output shown in the prompt results is processed and stored within the Security Copilot service. -When you use Copilot for Security to get Intune data, Copilot for Security also has access to the data and permissions defined by the [RBAC roles](../fundamentals/role-based-access-control.md) and [Intune scope tags](../fundamentals/scope-tags.md) assigned to you. +When you use Security Copilot to get Intune data, Security Copilot also has access to the data and permissions defined by the [RBAC roles](../fundamentals/role-based-access-control.md) and [Intune scope tags](../fundamentals/scope-tags.md) assigned to you. ## Related articles -- [What is Microsoft Copilot for Security?](/security-copilot/microsoft-security-copilot) -- [Privacy and data security in Microsoft Copilot for Security](/security-copilot/privacy-data-security) +- [What is Microsoft Security Copilot?](/security-copilot/microsoft-security-copilot) +- [Privacy and data security in Microsoft Security Copilot](/security-copilot/privacy-data-security) - [Use Microsoft Copilot in Intune](copilot-intune-overview.md) diff --git a/memdocs/intune/fundamentals/intune-planning-guide.md b/memdocs/intune/fundamentals/intune-planning-guide.md index 2d39a8ba885..364d89ec669 100644 --- a/memdocs/intune/fundamentals/intune-planning-guide.md +++ b/memdocs/intune/fundamentals/intune-planning-guide.md @@ -332,7 +332,7 @@ Managing devices is a relationship with different services. Intune includes the - **[Microsoft Copilot in Intune](../copilot/copilot-intune-overview.md)** is a generative-AI security analysis tool. It accesses your Intune data and can help you manage your policies and settings, understand your security posture, and troubleshoot device issues. - Copilot in Intune is licensed through Microsoft Copilot for Security. For more information, go to [Get started with Microsoft Copilot for Security](/copilot/security/get-started-security-copilot). + Copilot in Intune is licensed through Microsoft Security Copilot. For more information, go to [Get started with Microsoft Security Copilot](/copilot/security/get-started-security-copilot). - **[Intune Suite](intune-add-ons.md)** provides advanced endpoint management and security features, like remote help, Microsoft Cloud PKI, Endpoint Privilege Management, and more. The Intune Suite is available as a separate license. diff --git a/memdocs/intune/fundamentals/what-is-intune.md b/memdocs/intune/fundamentals/what-is-intune.md index a4fde607378..b06c27beef2 100644 --- a/memdocs/intune/fundamentals/what-is-intune.md +++ b/memdocs/intune/fundamentals/what-is-intune.md @@ -120,7 +120,7 @@ For more information, go to [Intune Suite add-on features](intune-add-ons.md). ✅ **Use Microsoft Copilot in Intune for AI-generated analysis** -Copilot in Intune is available and has capabilities that are powered by Copilot for Security. +Copilot in Intune is available and has capabilities that are powered by Security Copilot. Copilot can summarize existing policies, give you more setting information, including recommended values and potential conflicts. You can also get device details and troubleshoot a device. diff --git a/memdocs/intune/toc.yml b/memdocs/intune/toc.yml index cb747aa1eea..685c2b099db 100644 --- a/memdocs/intune/toc.yml +++ b/memdocs/intune/toc.yml @@ -187,8 +187,9 @@ items: href: ./copilot/copilot-devices.md - name: FAQ href: ./copilot/copilot-intune-faq.md - - name: Intune plugin in Copilot for Security + - name: Intune plugin in Security Copilot href: ./copilot/security-copilot.md + - name: Endpoint analytics items: - name: Overview