Skip to main content

Notifications

Copilot Studio - Bot Administration
Unanswered

Prevent web authors from allowing public access

(0) ShareShare
ReportReport
Posted on by 18

Is there any way a web author could publish a bot to a public web address and allow public access to the chatbot?

  • TimAfflerbach Profile Picture
    TimAfflerbach 18 on at
    Re: Prevent web authors from allowing public access

    Ok, that works.  Thank you very much Henry!  Love the support!  I have another Q re: my PVA License.  I'll submit the Q in another topic.

  • HenryJammes Profile Picture
    HenryJammes on at
    Re: Prevent web authors from allowing public access

    As far as I know, in my tests, it worked for both versions - but I encourage you to test and provide feedback, as the feature is in

  • TimAfflerbach Profile Picture
    TimAfflerbach 18 on at
    Re: Prevent web authors from allowing public access

    Ok, great, but "Should" concerns me.  

  • HenryJammes Profile Picture
    HenryJammes on at
    Re: Prevent web authors from allowing public access

    Oh got it - no the DLP policy feature is itself in preview but it should apply across both versions of PVA, the current one (production) and the unified authoring version (preview).

  • TimAfflerbach Profile Picture
    TimAfflerbach 18 on at
    Re: Prevent web authors from allowing public access

    Thank you for that Henry, but that option is not available if the user creates a "for Production" bot, leaving the company vulnerable.  Correct?

  • HenryJammes Profile Picture
    HenryJammes on at
    Re: Prevent web authors from allowing public access

    Well, the feature is in preview, but in my tests it worked well, at the tenant level. I was able to block non-authenticated chatbots globally and also create specific exceptions, at the environment level.

    With DLP policies, you can control what security settings and channels are available to your bot makers.

  • TimAfflerbach Profile Picture
    TimAfflerbach 18 on at
    Re: Prevent web authors from allowing public access

    Thank you Henry!  Awesome support!

    So, what this article is saying  is that we can block non AD auth from the admin side.  But it is only available in Preview?  Meaning, right now, if someone has a PVA for web license, they can share their PVA "Build for Production" bot and share it to Facebook for public access?

  • HenryJammes Profile Picture
    HenryJammes on at
    Re: Prevent web authors from allowing public access

    Hi @TimAfflerbach,

     

    Yes, Data Loss Prevention (DLP) policies can help you achieve that.

    Apply data loss prevention policies to chatbots - Power Virtual Agents | Microsoft Learn

    They're currently in

     

    Henry

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Microsoft Kickstarter Events…

Register for Microsoft Kickstarter Events…

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Announcing Forum Attachment Improvements!

We're excited to announce that attachments for replies in forums and improved…

Leaderboard

#1
WarrenBelz Profile Picture

WarrenBelz 145,445

#2
RandyHayes Profile Picture

RandyHayes 76,287

#3
Pstork1 Profile Picture

Pstork1 64,741

Leaderboard

Featured topics