Document the fuller Copilot audit-field capture, and correct the build number
The Copilot page described the usage-report and interaction-history imports but
nothing from the work that persists the audit fields the importer previously
parsed and threw away. Adds sections for interaction contexts (every context, not
just the first file or meeting) and AI system plugins, extends the accessed-
resource and database-table tables, and records the no-backfill consequence: the
Management Activity API only retains content for about 7 days, so these fields
populate for newly imported interactions only.
Also corrects a statement that is now wrong: prompt messages ARE imported (IDs and
sizes only, never text), where the page previously said user prompts are not
tracked.
Five pages cited "Stable build 1791" for the Copilot reporting work, the Teams
add-on removal and the interaction-history import. That build does not exist -
nothing was published between 1756 and 1807, because 1796 and 1806 were only ever
drafts. Corrected to 1807 throughout.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Document the Copilot usage report and interaction history imports
Stable build 1791 added two Graph-based Copilot imports and removed per-user
Teams apps tracking. None of it was in the wiki, and the pages still told admins
to grant a permission the product no longer uses and to set a config flag that no
longer exists.
New permission - the important one:
AiEnterpriseInteraction.Read.All, for the Copilot AI interaction history
(prompt history) import. Unlike every other permission the solution needs, the
installer does NOT request or grant this one - an Entra admin has to add it to
the runtime app registration and consent to it explicitly. It also needs the
M365_COPILOT_BUSINESS_CHAT service plan per user, and in practice a
UserGroupsFilter scope, because the endpoint is one HTTP call per user and an
unscoped run at the 200k-user design target means 200k calls per cycle.
Removed permission:
TeamsAppInstallation.ReadForUser.All is no longer used anywhere in the code
(verified) and can be revoked. It existed for the per-user Teams app-install
tracking this release removes.
Also corrected: GraphUserApps still appeared in the ImportJobSettings examples on
the manual-setup and troubleshooting pages, so anyone following them would have
configured a flag that no longer exists. The occurrence in Release Notes.md is a
quoted historical payload and is deliberately left alone.
Privacy is now stated explicitly rather than left to be inferred. Security Model
previously said "Nothing about your tenant leaves your environment", which is not
true once Cognitive Services is configured: prompt text is sent to Azure AI
Language, and while the text itself is not stored, the extracted keywords ARE -
and a keyword can amount to a whole short prompt. That claim is now qualified and
a "Copilot prompt content" section spells out the three states (import off,
import on without cognitive, import on with cognitive) and the three controls
that bound it.
Pages changed:
Prerequisites - permission table, plus a section on the three
prerequisites for interaction history
Configuration Reference - GraphCopilotUsageReports and CopilotInteractionHistory
flags; GraphUserApps marked removed; stale Redis key
Copilot - full sections for both new imports
Data Collection - what each import stores, and the removed-feature notice
Security Model - Copilot prompt content
Installation / Troubleshooting - stale ImportJobSettings examples
All cross-page anchors were verified to resolve against the real headings, and
the diff was scanned for GUIDs, tenant domains, SharePoint URLs and addresses -
none added.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 87347b97-407c-4dbe-bae5-e8880d0fc77d
Configuration Reference: full ImportJobSettings example (all flags)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 37f03090-2e24-45ff-b406-4d3cae3a6d50
Document ImportPowerPlatform, ResolveCopilotResourceMetadata and AUDIT_PERBATCH_DEDUP_CACHE
Power Platform is now an opt-in ImportJobSettings workload; Copilot resource
resolution and the audit dedup-cache rebuild are new tuning settings.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 37f03090-2e24-45ff-b406-4d3cae3a6d50
Importer aggressiveness: add Teams interval, force flag, and 'Forcing a re-import' (clearing last-run flags) section
Reflects PR #162 review fixes: GraphTeamsImportIntervalHours, ForceGraphMetadataImport, High=every-cycle, in-memory fallback note, and redis-cli DEL instructions for the unprefixed gate keys.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Document importer CPU aggressiveness settings (pnp/Microsoft365-Analytics-Insights#161/#162)
Add 'Reducing importer CPU usage (aggressiveness)' section to Configuration Reference covering ImportAggressiveness, MaxAuditReportLoadConcurrency, ImportCyclePauseMinutes, GraphMetadataImportIntervalHours and ImportStartStaggerMinutes; cross-link from Monitoring System Performance checklist.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wiki: finish branding modernisation + fix two malformed Analytics tables
- Modernise generic 'Office 365' platform references to 'Microsoft 365' across
the wiki (44 occurrences), now that the product is 'Microsoft 365 Advanced
Analytics'. The real 'Office 365 Management [Activity] API' name and code
identifiers (Office365ActivityImporter, o365_client_applications) are preserved.
- Analytics - Data model: fix the malformed 'Usage metrics' table (the header had
two columns but the data row had four; the stray cells duplicated the
App-per-platform table below).
- Analytics: de-indent the Runbooks table so it renders reliably (it was indented
under a list item).
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wiki: modernise product name to 'Microsoft 365 Advanced Analytics' + accuracy/structure polish
- Standardise the product name to Microsoft 365 Advanced Analytics (was a mix of
'Office 365 Advanced Analytics [Engine]', 'M365 Advanced Analytics', 'O365...').
Code identifiers (Office365ActivityImporter), the Office 365 Management Activity
API name and the literal 'O365 Adv Analytics Setup Rule' firewall rule are
deliberately preserved.
- Replace legacy docs.microsoft.com links with learn.microsoft.com.
- Tie the monitoring trio together: Health Alerts and Monitoring now cross-link
Monitoring system performance and vice-versa.
- Verify: fix informal wording and add a 'What good looks like' pass/fail checklist.
- Troubleshooting: point fatal-exception reports at GitHub Issues (with a
redact-secrets warning) instead of an unaddressed 'please email'.
- Manual setup: clarify the importer uses the App Insights connection string, with
the instrumentation key still needed for AITracker/legacy logging.
- Architecture & costs: document the basis for the ~EUR170/month estimate.
- CSP page: add deployment/context cross-links.
- Align the Analytics page title with the sidebar ('Activity & Usage Analytics').
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wiki: add Configuration reference + Security & permissions model pages; link from sidebar and install flow
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>