Document actual Azure licence-report limits and unreleased status
Record the synthetic S4/S6 review, exact coverage limits and verified disposable-resource cleanup without identifying the benchmark environment.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b9a6835b-97dc-4e01-a9bd-1193fbd5fc53
Document the Licence activity report (unreleased)
Adds a Licence activity guide and links it from the sidebar, Web Portal and
Security Model pages. The page is explicitly labelled as describing an
unreleased feature, because it is not in the current stable release.
The guide leads with interpretation rather than clicks, because almost every
way of getting this report wrong is a reading error: assigned users overlap
across SKUs and must not be summed; unknown coverage is not a measured zero and
must never place someone in the least-active list; supporting action counts are
snapshot averages, not manufactured daily totals; and the bands describe
frequency within available samples, not a common unit of work across products.
Also records the limits an operator will actually hit: 1-100 most/least and
page size, 100-character search, 1-10,000 pages, top-50 demographic breakdowns,
a 100-option-per-dimension filter catalogue that says when it truncates, the
five- and two-minute cache lifetimes, four concurrent shared report loads, the
30-second deadline and the 1 MiB response cap.
Includes the measured scale limit honestly: on a synthetic 300,000-user,
50-SKU database the 180-day window did not finish inside the 20-second command
timeout, so very large tenants should use shorter windows and will see a
retryable error rather than a slow page. That measurement was local rather than
Azure SQL and is labelled as such.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b9a6835b-97dc-4e01-a9bd-1193fbd5fc53
Document the fuller Copilot audit-field capture, and correct the build number
The Copilot page described the usage-report and interaction-history imports but
nothing from the work that persists the audit fields the importer previously
parsed and threw away. Adds sections for interaction contexts (every context, not
just the first file or meeting) and AI system plugins, extends the accessed-
resource and database-table tables, and records the no-backfill consequence: the
Management Activity API only retains content for about 7 days, so these fields
populate for newly imported interactions only.
Also corrects a statement that is now wrong: prompt messages ARE imported (IDs and
sizes only, never text), where the page previously said user prompts are not
tracked.
Five pages cited "Stable build 1791" for the Copilot reporting work, the Teams
add-on removal and the interaction-history import. That build does not exist -
nothing was published between 1756 and 1807, because 1796 and 1806 were only ever
drafts. Corrected to 1807 throughout.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Document the Copilot usage report and interaction history imports
Stable build 1791 added two Graph-based Copilot imports and removed per-user
Teams apps tracking. None of it was in the wiki, and the pages still told admins
to grant a permission the product no longer uses and to set a config flag that no
longer exists.
New permission - the important one:
AiEnterpriseInteraction.Read.All, for the Copilot AI interaction history
(prompt history) import. Unlike every other permission the solution needs, the
installer does NOT request or grant this one - an Entra admin has to add it to
the runtime app registration and consent to it explicitly. It also needs the
M365_COPILOT_BUSINESS_CHAT service plan per user, and in practice a
UserGroupsFilter scope, because the endpoint is one HTTP call per user and an
unscoped run at the 200k-user design target means 200k calls per cycle.
Removed permission:
TeamsAppInstallation.ReadForUser.All is no longer used anywhere in the code
(verified) and can be revoked. It existed for the per-user Teams app-install
tracking this release removes.
Also corrected: GraphUserApps still appeared in the ImportJobSettings examples on
the manual-setup and troubleshooting pages, so anyone following them would have
configured a flag that no longer exists. The occurrence in Release Notes.md is a
quoted historical payload and is deliberately left alone.
Privacy is now stated explicitly rather than left to be inferred. Security Model
previously said "Nothing about your tenant leaves your environment", which is not
true once Cognitive Services is configured: prompt text is sent to Azure AI
Language, and while the text itself is not stored, the extracted keywords ARE -
and a keyword can amount to a whole short prompt. That claim is now qualified and
a "Copilot prompt content" section spells out the three states (import off,
import on without cognitive, import on with cognitive) and the three controls
that bound it.
Pages changed:
Prerequisites - permission table, plus a section on the three
prerequisites for interaction history
Configuration Reference - GraphCopilotUsageReports and CopilotInteractionHistory
flags; GraphUserApps marked removed; stale Redis key
Copilot - full sections for both new imports
Data Collection - what each import stores, and the removed-feature notice
Security Model - Copilot prompt content
Installation / Troubleshooting - stale ImportJobSettings examples
All cross-page anchors were verified to resolve against the real headings, and
the diff was scanned for GUIDs, tenant domains, SharePoint URLs and addresses -
none added.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 87347b97-407c-4dbe-bae5-e8880d0fc77d
Wiki: finish branding modernisation + fix two malformed Analytics tables
- Modernise generic 'Office 365' platform references to 'Microsoft 365' across
the wiki (44 occurrences), now that the product is 'Microsoft 365 Advanced
Analytics'. The real 'Office 365 Management [Activity] API' name and code
identifiers (Office365ActivityImporter, o365_client_applications) are preserved.
- Analytics - Data model: fix the malformed 'Usage metrics' table (the header had
two columns but the data row had four; the stray cells duplicated the
App-per-platform table below).
- Analytics: de-indent the Runbooks table so it renders reliably (it was indented
under a list item).
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wiki: add Configuration reference + Security & permissions model pages; link from sidebar and install flow
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>