Skip to content

Commit

Permalink
Merge pull request #16593 from Erikre/erikre-copilot2411-29369510
Browse files Browse the repository at this point in the history
erikre-copilot2411-29369510
  • Loading branch information
Erikre authored Nov 13, 2024
2 parents 6cb3cbd + e807b3b commit 6f40a89
Show file tree
Hide file tree
Showing 7 changed files with 47 additions and 50 deletions.
6 changes: 3 additions & 3 deletions memdocs/intune/copilot/copilot-devices.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ keywords: security copilot, intune, microsoft intune, copilot, device informatio
author: Erikre
ms.author: erikre
manager: dougeby
ms.date: 04/01/2024
ms.date: 11/08/2024
ms.topic: how-to
ms.service: microsoft-intune
ms.subservice:
Expand All @@ -31,7 +31,7 @@ ms.collection:

# Use Microsoft Copilot in Intune to troubleshoot devices (public preview)

Microsoft Copilot for Security is a generative-AI security analysis tool that can help your organization get information quickly. Copilot is [built into Microsoft Intune](copilot-intune-overview.md). It can help IT admins manage and troubleshoot devices.
Microsoft Security Copilot is a generative-AI security analysis tool that can help your organization get information quickly. Copilot is [built into Microsoft Intune](copilot-intune-overview.md). It can help IT admins manage and troubleshoot devices.

Copilot uses your Intune data. Admins can only access the data that they have permissions to, which includes the [RBAC roles](../fundamentals/role-based-access-control.md) and [scope tags](../fundamentals/scope-tags.md) assigned to them. For more information, see [Microsoft Copilot in Intune FAQ](copilot-intune-faq.md).

Expand All @@ -50,7 +50,7 @@ This article describes how to use Copilot to manage and troubleshoot device issu
- To use Copilot in Intune, make sure Copilot is enabled. For more information, see:

- [Microsoft Copilot in Intune](../copilot/copilot-intune-overview.md#before-you-begin)
- [Get started with Microsoft Copilot for Security](/security-copilot/get-started-security-copilot)
- [Get started with Microsoft Security Copilot](/security-copilot/get-started-security-copilot)

- When you use the Copilot prompts to troubleshoot your devices, you are within the scope of the device you select.

Expand Down
48 changes: 24 additions & 24 deletions memdocs/intune/copilot/copilot-intune-faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ keywords: security copilot, intune, microsoft intune, copilot, faq
author: Erikre
ms.author: erikre
manager: dougeby
ms.date: 04/01/2024
ms.date: 11/08/2024
ms.topic: how-to
ms.service: microsoft-intune
ms.subservice:
Expand Down Expand Up @@ -37,25 +37,25 @@ This article answers common questions about using Microsoft Copilot in Intune. F

### How can I control access to Copilot in Intune?

When you set up Copilot for Security, you determine the Copilot role that your admins can have (owner or contributor), as described in [Roles and authentication in Microsoft Copilot for Security](/security-copilot/authentication). There are also Microsoft Entra roles that can control access to Copilot for Security.
When you set up Security Copilot, you determine the Copilot role that your admins can have (owner or contributor), as described in [Roles and authentication in Microsoft Security Copilot](/security-copilot/authentication). There are also Microsoft Entra roles that can control access to Security Copilot.

The Copilot for Security roles or the Microsoft Entra roles that you configure control access to Copilot in Intune. There aren't any Intune-specific roles-based access controls (RBAC) for Copilot in Intune.
The Security Copilot roles or the Microsoft Entra roles that you configure control access to Copilot in Intune. There aren't any Intune-specific roles-based access controls (RBAC) for Copilot in Intune.

After you enable Intune in Copilot for Security, your Intune admins can see the Copilot features in the Intune admin center. But they can only access the data that they have permission to. Copilot honors existing [Intune RBAC roles](../fundamentals/role-based-access-control.md) and [Intune scope tags](../fundamentals/scope-tags.md) that are assigned to your admins.
After you enable Intune in Security Copilot, your Intune admins can see the Copilot features in the Intune admin center. But they can only access the data that they have permission to. Copilot honors existing [Intune RBAC roles](../fundamentals/role-based-access-control.md) and [Intune scope tags](../fundamentals/scope-tags.md) that are assigned to your admins.

So, if an admin tries to access Intune data that they don't have permissions to, they get the following error message:

`You don't have permission to access this feature. Reach out to your IT administrator for help.`

If you want access to Copilot in Intune, contact the Copilot for Security workspace owner in your organization. If you want access to all your Intune data, contact your Intune administrator.
If you want access to Copilot in Intune, contact the Security Copilot workspace owner in your organization. If you want access to all your Intune data, contact your Intune administrator.

### Can I use Copilot for Security if I'm not an Intune admin, and vice versa?
### Can I use Security Copilot if I'm not an Intune admin, and vice versa?

Yes. Access to Copilot for Security is managed by using Copilot for Security or Microsoft Entra roles. For more information, see [Roles and authentication in Microsoft Copilot for Security](/security-copilot/authentication).
Yes. Access to Security Copilot is managed by using Security Copilot or Microsoft Entra roles. For more information, see [Roles and authentication in Microsoft Security Copilot](/security-copilot/authentication).

If you're an Intune admin and have the correct Copilot for Security or Microsoft Entra role assigned to you, you can use Copilot for Security to get insights about your Intune data.
If you're an Intune admin and have the correct Security Copilot or Microsoft Entra role assigned to you, you can use Security Copilot to get insights about your Intune data.

Copilot for Security is scoped to all your embedded services.
Security Copilot is scoped to all your embedded services.

If you're an Intune admin or IT admin and only want Intune data, you should use [Copilot in Intune](copilot-intune-overview.md). Its scope is only Intune data, and its capabilities are integrated into the relevant areas of the Intune admin center.

Expand All @@ -65,44 +65,44 @@ If you're a security admin, you can use [Copilot in Intune](copilot-intune-overv

### How do I turn on Intune capabilities?

In the [Microsoft Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989), select **Sources** (prompt bar > right corner), and enable the Microsoft Intune plug-in. This plug-in allows you to access your Intune data and use the Copilot features in the Intune admin center.
In the [Microsoft Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989), select **Sources** (prompt bar > right corner), and enable the Microsoft Intune plug-in. This plug-in allows you to access your Intune data and use the Copilot features in the Intune admin center.

For more information about managing plug-ins, see [Manage plug-ins in Copilot for Security](/security-copilot/manage-plugins).
For more information about managing plug-ins, see [Manage plug-ins in Security Copilot](/security-copilot/manage-plugins).

### Can I use capabilities for other Copilot services in the Intune admin center?

No. Copilot in Intune in the Intune admin center is available only for Intune capabilities.

You can't get insights from other Microsoft services, like Microsoft Defender, Microsoft Entra, and Microsoft Purview. To get insights from other Microsoft services, you can use the [Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989).
You can't get insights from other Microsoft services, like Microsoft Defender, Microsoft Entra, and Microsoft Purview. To get insights from other Microsoft services, you can use the [Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989).

### How much does Copilot in Intune cost?

Copilot in Intune is included with Copilot for Security. Copilot for Security uses security compute units (SCUs). There aren't any other licensing requirements or Intune-specific licenses for using Copilot in Intune.
Copilot in Intune is included with Security Copilot. Security Copilot uses security compute units (SCUs). There aren't any other licensing requirements or Intune-specific licenses for using Copilot in Intune.

For more information about SCUs, see:

- [Get started with Microsoft Copilot](/security-copilot/get-started-security-copilot)
- [Manage capacity in Copilot for Security](/security-copilot/manage-usage)
- [Manage capacity in Security Copilot](/security-copilot/manage-usage)

### Is there a limit on the prompt output?

Copilot in Intune is bound by any token limits in Copilot for Security. For more information, see [Copilot for Security FAQ - Token limits](/security-copilot/faq-security-copilot#how-is-copilot-for-security-dealing-with-a-token-limit).
Copilot in Intune is bound by any token limits in Security Copilot. For more information, see [Security Copilot FAQ - Token limits](/security-copilot/faq-security-copilot#how-is-copilot-for-security-dealing-with-a-token-limit).

## Copilot for Security vs. Copilot in Intune
## Security Copilot vs. Copilot in Intune

### Does Copilot for Security give admins more access to Intune data than is available in the Intune admin center?
### Does Security Copilot give admins more access to Intune data than is available in the Intune admin center?

No. The Intune capabilities in Copilot for Security are built using the existing Microsoft Graph APIs, which are the same APIs that the Intune admin center uses. Both Copilot experiences use the same Intune capabilities.
No. The Intune capabilities in Security Copilot are built using the existing Microsoft Graph APIs, which are the same APIs that the Intune admin center uses. Both Copilot experiences use the same Intune capabilities.

### To get Intune insights, should I use Copilot for Security or Copilot in Intune?
### To get Intune insights, should I use Security Copilot or Copilot in Intune?

To use Copilot with your Intune data, you can use Copilot in Intune or Copilot for Security. Here's a comparison of the two experiences:
To use Copilot with your Intune data, you can use Copilot in Intune or Security Copilot. Here's a comparison of the two experiences:

| Feature | Copilot in Intune | Copilot for Security |
| Feature | Copilot in Intune | Security Copilot |
|---|---|---|
| **Access and data insights** | This Copilot is embedded in the Intune admin center and is scoped to only show Intune data.<br/><br/> Intune admins should use Copilot in Intune for Intune-only tasks. | This Copilot is a standalone experience. It can access other embedded services, like Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and Microsoft Intune. <br/><br/>It accesses the same Intune capabilities as Copilot in Intune. |
| **Open prompting** | Intune provides a set of prompts you can use. There isn't an open prompt. There are plans to include an open prompt in the future (no ETA).| Can use open prompts or use [promptbooks](/security-copilot/using-promptbooks). |
| **Prompt history** | The prompt/response history isn't available in the Intune admin center. To view the prompt history, use Copilot for Security.<br/><br/>The prompts can look different compared with the prompts shown in Intune, as Intune enters the prompt for you. | You can review the prompt/response history even when the prompt is submitted in the standalone or embedded experience. |
| **Prompt history** | The prompt/response history isn't available in the Intune admin center. To view the prompt history, use Security Copilot.<br/><br/>The prompts can look different compared with the prompts shown in Intune, as Intune enters the prompt for you. | You can review the prompt/response history even when the prompt is submitted in the standalone or embedded experience. |
| **Target audience** | Focus is the IT admin/IT Pro. | Focus is the Security Operations Center (SOC) and can be used by IT admins. |

## Feedback and troubleshooting Copilot
Expand All @@ -122,9 +122,9 @@ Other things you can try:
- If you're working with Microsoft to debug the issue, support might ask you for the session ID. To get the session ID, you can:

- Use the F12 developer tools in your browser. This information shows the capabilities that Copilot uses.
- In the [Copilot for Security portal](https://go.microsoft.com/fwlink/?linkid=2247989), you can view the prompt sessions and session IDs from the Intune embedded experience.
- In the [Security Copilot portal](https://go.microsoft.com/fwlink/?linkid=2247989), you can view the prompt sessions and session IDs from the Intune embedded experience.

## Related articles

- [Microsoft Copilot for Security FAQ](/security-copilot/faq-security-copilot)
- [Microsoft Security Copilot FAQ](/security-copilot/faq-security-copilot)
- [Microsoft Copilot in Intune](copilot-intune-overview.md)
Loading

0 comments on commit 6f40a89

Please sign in to comment.