Data policy example - Configure a policy for knowledge sources for agents

You can use data policies to configure which knowledge sources across environments that agent authors can connect to for data. Doing so can help prevent data exfiltration.

For more information about other data policy configurations, see Configure data policies for agents.

Configure data policy for knowledge sources for agents in Power Platform admin center

To configure a data policy for knowledge sources, follow these steps:

1. Sign in to the Power Platform admin center.

2. On the side navigation, select Security, and then select Data and privacy. The Data protection and privacy page opens.

3. Select Data policy. The Data policies page opens.

4. Create a new data policy, or choose an existing data policy to edit:

   • If you want to create a new data policy, select New Policy. For detailed instructions, see Create a data policy.
   • If you want to choose an existing data policy to edit, select the data policy and select Edit Policy. For detailed instructions, see Edit a data policy.

5. Select Next. The Add an environment page opens.

   • If you want to add an environment to your data policy, select the environment in the Available tab and select Add to policy.
   • If you want to remove an environment from your data policy, select the environment in the Added to policy tab and select Remove from policy.

6. Select Next. The Assign connectors page opens.

7. Use the search box and type "Knowledge source" to find the connectors pertaining to agent knowledge sources. The following connectors should appear in the results:

   • Knowledge source with SharePoint and OneDrive in Copilot Studio
   • Knowledge source with public websites and data in Copilot Studio
   • Knowledge source with documents in Copilot Studio

8. Select the connector's More actions icon (⋮), and then select any of the following options:

   • Move to Business
   • Block
   • Configure connector

9. Select Next.

10. Review your policy, then select Create policy if you're creating a new policy or Update policy if you're editing an existing policy.

If admins want to allow or deny SharePoint endpoints their makers can use as knowledge sources in Copilot Studio, they can use Data policy connector endpoint filtering instead of blocking it.

Confirm data policy enforcement

You can confirm that this connector is being used in the data policy from Copilot Studio.

1. Open your agent from the environment where the data policy is applied.
2. Go to the Knowledge tab, select Add knowledge, and add a SharePoint knowledge source.

If the policy is enforced, an error banner with a Details button appears. On the Channels page, expand the error link and select the Download button to see details. The Published button is disabled when there's a data policy violation.

In the details file, a row appears for each violation. If a knowledge source has a data policy violation, a row appears for the knowledge page and for each generative answers node that uses that knowledge source.