Document the Copilot usage report and interaction history imports
Stable build 1791 added two Graph-based Copilot imports and removed per-user
Teams apps tracking. None of it was in the wiki, and the pages still told admins
to grant a permission the product no longer uses and to set a config flag that no
longer exists.
New permission - the important one:
AiEnterpriseInteraction.Read.All, for the Copilot AI interaction history
(prompt history) import. Unlike every other permission the solution needs, the
installer does NOT request or grant this one - an Entra admin has to add it to
the runtime app registration and consent to it explicitly. It also needs the
M365_COPILOT_BUSINESS_CHAT service plan per user, and in practice a
UserGroupsFilter scope, because the endpoint is one HTTP call per user and an
unscoped run at the 200k-user design target means 200k calls per cycle.
Removed permission:
TeamsAppInstallation.ReadForUser.All is no longer used anywhere in the code
(verified) and can be revoked. It existed for the per-user Teams app-install
tracking this release removes.
Also corrected: GraphUserApps still appeared in the ImportJobSettings examples on
the manual-setup and troubleshooting pages, so anyone following them would have
configured a flag that no longer exists. The occurrence in Release Notes.md is a
quoted historical payload and is deliberately left alone.
Privacy is now stated explicitly rather than left to be inferred. Security Model
previously said "Nothing about your tenant leaves your environment", which is not
true once Cognitive Services is configured: prompt text is sent to Azure AI
Language, and while the text itself is not stored, the extracted keywords ARE -
and a keyword can amount to a whole short prompt. That claim is now qualified and
a "Copilot prompt content" section spells out the three states (import off,
import on without cognitive, import on with cognitive) and the three controls
that bound it.
Pages changed:
Prerequisites - permission table, plus a section on the three
prerequisites for interaction history
Configuration Reference - GraphCopilotUsageReports and CopilotInteractionHistory
flags; GraphUserApps marked removed; stale Redis key
Copilot - full sections for both new imports
Data Collection - what each import stores, and the removed-feature notice
Security Model - Copilot prompt content
Installation / Troubleshooting - stale ImportJobSettings examples
All cross-page anchors were verified to resolve against the real headings, and
the diff was scanned for GUIDs, tenant domains, SharePoint URLs and addresses -
none added.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 87347b97-407c-4dbe-bae5-e8880d0fc77d
docs: replace FTP deployment guidance with HTTPS
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 92f5afee-7f31-4689-983b-c414c8429041
Wiki: finish branding modernisation + fix two malformed Analytics tables
- Modernise generic 'Office 365' platform references to 'Microsoft 365' across
the wiki (44 occurrences), now that the product is 'Microsoft 365 Advanced
Analytics'. The real 'Office 365 Management [Activity] API' name and code
identifiers (Office365ActivityImporter, o365_client_applications) are preserved.
- Analytics - Data model: fix the malformed 'Usage metrics' table (the header had
two columns but the data row had four; the stray cells duplicated the
App-per-platform table below).
- Analytics: de-indent the Runbooks table so it renders reliably (it was indented
under a list item).
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wiki: stage the manual install, nest monitoring, flesh out cert auth/product notes
Manual installation (447-line page) split into an overview/index plus three
ordered stage pages so each phase is digestible and navigable:
- Manual Install Azure Resources (storage, App Insights, App Service, SQL,
Redis, Service Bus, Cognitive)
- Manual Install Deploy Binaries (publish web-jobs/website, app settings)
- Manual Install Web Tracking and Config (AITracker, SPFx extension, reply
URLs, filtered URLs)
The parent keeps its filename so inbound links still resolve; each stage has
prev/next navigation; in-page section references became cross-page links; the
Uninstall deep link to #deploy-aitracker-via-powershell was repointed.
Sidebar: nest the three manual-install stages under Manual installation, and
nest Health alerts + System performance under Monitoring.
Certificate authentication: add intro, a How it works summary (Key Vault, the
required O365AdvancedAnalytics CN, the UseClientCertificate setting) and a
Prerequisites section; tidy the verify-logs heading.
Product notes: clearer intro and cross-links (anchors preserved for inbound
links from Configuration reference and Troubleshooting).
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wiki: modernise product name to 'Microsoft 365 Advanced Analytics' + accuracy/structure polish
- Standardise the product name to Microsoft 365 Advanced Analytics (was a mix of
'Office 365 Advanced Analytics [Engine]', 'M365 Advanced Analytics', 'O365...').
Code identifiers (Office365ActivityImporter), the Office 365 Management Activity
API name and the literal 'O365 Adv Analytics Setup Rule' firewall rule are
deliberately preserved.
- Replace legacy docs.microsoft.com links with learn.microsoft.com.
- Tie the monitoring trio together: Health Alerts and Monitoring now cross-link
Monitoring system performance and vice-versa.
- Verify: fix informal wording and add a 'What good looks like' pass/fail checklist.
- Troubleshooting: point fatal-exception reports at GitHub Issues (with a
redact-secrets warning) instead of an unaddressed 'please email'.
- Manual setup: clarify the importer uses the App Insights connection string, with
the instrumentation key still needed for AITracker/legacy logging.
- Architecture & costs: document the basis for the ~EUR170/month estimate.
- CSP page: add deployment/context cross-links.
- Align the Analytics page title with the sidebar ('Activity & Usage Analytics').
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wiki polish: remove empty Troubleshooting stub, frame Manual Setup, tidy CSP page
- Troubleshooting: delete the empty [TBD] 'Unexpected/Missing SharePoint Page
Properties' section (duplicate of the populated section; not in the TOC).
- Installation – Manual Setup: add a pre-flight intro pointing to Prerequisites,
App Registrations Setup and the Configuration reference, and flagging it as the
by-hand fallback to the installer-driven install.
- Enable CSP for AITracker: rewrite the stub with a proper heading, fix the
'enabled' typo, explain why it matters, and use a real markdown doc link.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wiki cleanup: fix broken links, missing headings, outdated paths
Docs: rename GUID media files to descriptive names and update database schema
- Rename 178 GUID-named wiki images to descriptive names derived from
page context and section headings (e.g. a196d0f6ee3d1e7b6059fd8f7eeed03b.png
→ deployment-guidance-aad-in-azure-portal.png)
- Update all image references across 13 markdown files
- Remove dead link references in Deployment Guidance
- Database Schema: add missing Copilot section (13 tables), plus
undocumented tables in Teams, Web Sessions, Audit, and Miscellaneous sections
- Analytics Data model: fix incorrect Copilot table names
(event_copilot_chats → copilot_chats, etc.)
- Fix "Platoform" typo → "Platform"
Updated Installation – Manual Setup (markdown)
Updated Installation – Manual Setup (markdown)
Updated Installation – Manual Setup (markdown)
Updated Installation – Manual Setup (markdown)
Updated Installation – Manual Setup (markdown)