Collaborators, who have authoring permissions for a shared agent, can always chat with it. However, you can also grant users permission to chat with an agent in Copilot Studio without granting them authoring permissions.
To grant users permission to only chat with the agent, you can either:
Share your agent with a security group.
Share your agent with everyone in your organization.
Note
When sharing an agent for chat you can't share it with:
Microsoft 365 groups.
Individual users directly. To manage individual user access, add or remove users from the security group.
To author agents in Copilot Studio, makers need at least the Environment Maker role. The Bot Author role is deprecated. When a maker shares an agent for co-authoring, the other user is granted the Bot Contributor and Environment Maker roles. Users in these roles can only access agents they created or that have been shared with them. Additionally, makers must have the prvAssignRole privilege, included in the System Administrator and System Customizer roles, to share an agent for co-authoring. If the new co-author holds the Environment Maker role, the original maker doesn't need the prvAssignRole privilege.
Share an agent with security groups
You can share an agent with security groups so their members can chat with it.
Open the agent you want to share in Copilot Studio.
On the top menu bar, select the More icon (…) and then select Share.
Enter the name of every security group that you would like to share the agent with.
Review the permissions for each security group.
If you want to let the users know you shared the agent with them, select Send an email invitation to new users.
Note
Users can only receive an email invitation if their security group has email enabled. Alternatively, select Copy link and then share the link directly with the users to inform them they can now chat with your agent.
Select Share to share the agent with the security groups you specified.
Share an agent with everyone in the organization
You can share your agent to allow everyone in the same organization as the agent to chat with it.
Open the agent you want to share in Copilot Studio.
On the top menu bar, select the More icon (…) and then select Share.
Select Everyone in <OrganizationName> (where <OrganizationName> is your organization's name).
Select User - can use the agent.
Note
Copilot Studio doesn't send email invitations to everyone in an organization. You can select Copy link and then share the link directly with the users to inform them they can now chat with your agent.
Select Share to share the agent with everyone in the organization.
Share your agent with other users so they can chat with the agent or collaborate to author it.
A user can always chat with an agent if it was created in the same team. You can also share agents with users outside of a team.
Share an agent with security groups
You can share an agent with security groups so their members can chat with it.
Open the agent you want to share in Copilot Studio for Teams.
Select Share at the top of the Overview page.
Enter the security group name that you would like to share the agent with.
Note
You can only share an agent with security groups. You can't share with individual users directly.
You can manage individual user access by adding or removing users from the security group.
If you want to let users know you shared the agent with them, select Send an email invitation to new users.
Note
Users can only receive an email invitation if their security group has email enabled. Alternatively, select Copy link and then share the link directly with the users to inform them they can now install the agent in Microsoft Teams and chat with it.
Select Share to share the agent with the security group you specified.
Share an agent with everyone in the organization
You can share your agent to allow everyone in the same organization as the agent to chat with it.
Open the agent you want to share in Copilot Studio for Teams.
Select Share at the top of the Overview page.
Select Everyone in <OrganizationName> (where <OrganizationName> is your organization's name).
Select User - can use the chatbot.
Note
Copilot Studio doesn't send email invitations to everyone in an organization. You can select Copy link and then share the link directly with the users to inform them they can now install the agent in Microsoft Teams and chat with it.
Select Share to share the agent with everyone in the organization.
Sharing an agent with individual users gives them permission to view, edit, configure, share, and publish the agent. They can't delete the agent.
Note
You can only share an agent with users who have a Microsoft Copilot Studio per user license. Users who don't have a license can sign up for a free trial.
Open the agent you want to share in Copilot Studio.
On the top menu bar, select the More icon (…) and then select Share.
Enter the name or email address of each user that you would like to share the agent with.
Note
When sharing an agent for collaborative authoring you can only share it with individual users in your organization.
Review the permissions for each user.
If you want to let your new collaborators know you shared the agent with them, select Send an email invitation to new users.
Select Share to share the agent with the users you specified.
Important
If a user wasn't already a member of the environment for the shared agent, it can take up to 10 minutes before the agent becomes available in Copilot Studio for this user.
You can always collaborate with others when building agents in the Copilot Studio app for Teams. This means other members of your team can make changes, and you can see who else is editing a topic.
Your Microsoft Teams roles determine your permissions in the team where you create an agent:
Team Owners can create, view, edit, and configure all agents in teams they own.
Team Members can create, edit, and configure their own agents. They can view the other team members' agents.
Note
If you are an owner for a Microsoft Entra ID group associated with a team, without being a member of that team, you might not be able to see the team in the Power Apps and Copilot Studio apps in Microsoft Teams. To resolve this issue, add yourself to the team. It can take a few minutes before the team becomes visible to you.
To share an agent with other users for collaboration, you must add them to your team. It can take up to 15 minutes before a new team member sees the team in the Copilot Studio app for Teams.
When you select the Agents tab on the top menu bar, you can see a list of your teams. Select a team to see the agents in that team.
Tip
My agents shows all the agents you created and is an easy way for you to find your agent across multiple teams. You can find agents created by other team members by selecting the team.
Select the name of an agent to open it for editing.
If you select the check mark next to the name of an agent, a secondary menu bar appears. From this menu bar, you can go straight to the Topics or Analytics page for your agent. You can also select Edit to go to the Overview page.
If you select the Options icon (…) next to the name of an agent you can then select Edit to go to the Overview page, or go to the Topics or Analytics pages.
If you rename, restore, or delete a team, it could take up to 2 hours for the changes to be reflected in the Copilot Studio app.
Collaborate on agents
After you shared an agent with other users, they can all edit its topics.
On the Topics page, the Editing column shows who's working on topics. Select a person's icon to quickly chat with them in Teams or send them an email.
This information can help prevent conflicts when multiple authors are working on the same topic.
Note
The list of authors in the Editing column is only refreshed when the page is loaded.
When a topic is open for editing, icons at the top of the authoring canvas also show who's currently working on this topic.
If an author doesn't make any changes to the topic, disconnects their computer, or closes the browser window, they're considered to have abandoned the topic. After 30 minutes of inactivity, the user isn't identified as editing the topic.
Occasionally, multiple authors might make changes to a topic and attempt to save their changes concurrently. For example, you might open and start editing a topic. Your coworker opens the same topic, makes a small change, and saves it. Then, when you've finished editing the topic, and attempt to save it, Copilot Studio detects a conflict. When a conflict happens Copilot Studio prevents you from overwriting your coworker's changes, by offering you two options:
Select Discard changes to reload your agent with the latest changes (discarding your work).
Select Save copy to save a copy of the topic (keeping your changes in a copy of the topic).
If you save your changes as a new topic, you can then review your coworker's changes, merge the two topics, and delete the copy once you're done.
You can stop sharing an agent with individual users, a security group, or everyone in your organization.
Stop sharing with security groups
On the top menu bar, select the More icon (…) and then select Share.
Select the X icon next to each security group you want to stop sharing the agent with.
Select Share to stop sharing the agent with these security groups.
Stop sharing with everyone in the organization
On the top menu bar, select the More icon (…) and then select Share.
Select Everyone in <OrganizationName> (where <OrganizationName> is your organization's name).
Select None.
Select Share to stop sharing the agent with everyone in the organization.
Stop sharing an agent with individual users
You can stop sharing an agent with a user, and any shared user can stop the agent from being shared with other users, except for the owner. Owners always have access to their agents.
On the top menu bar, select the More icon (…) and then select Share.
Select the X icon next to each user you want to stop sharing the agent with.
Select Share to stop sharing the agent with these users.
You can stop sharing an agent with security groups or everyone in your organization.
Note
When you stop sharing an agent, affected users can't access the agent after their current conversation has timed out (after 30 minutes of idle time).
Stop sharing with security groups
Select Share at the top of the Overview page.
Select the X icon next to each security group you want to stop sharing the agent with.
Select Share to stop sharing the agent with these security groups.
Stop sharing with everyone in the organization
Select Share at the top of the Overview page.
Select Everyone in <OrganizationName> (where <OrganizationName> is your organization's name).
Select None.
Select Share to stop sharing the agent with everyone in the organization.
Users who don't have access to flows in a shared agent can still run these flows by using the Test panel in Copilot Studio.
Test your agents to make sure users who chat with them have the required permissions to run the Power Automate flows.
To let other users edit or add flows, you must share them in Power Automate. You can open flows directly from the topic where the flow is used.
Select View flow details to go to the flow's details page in Power Automate.
Select Edit in the Owners section.
Enter the name or email address of the user you want to give editing permissions to.
Assign environment security roles
If you're a System Administrator, you can assign and manage environment security roles when sharing an agent.
The Environment security roles section shows when you share an agent and only if you're a System Administrator. It lets you share agents with users who don't have sufficient environment permissions to use Copilot Studio.
You must be a System Administrator of the environment where the agent is located to view and add security roles.
Note
You can only assign security roles when sharing an agent. You can't remove security roles when sharing. For full security role management, use the Power Platform admin center.
Assign the Environment Maker security role during agent sharing
When sharing an agent, if a user doesn't have sufficient permissions to use Copilot Studio in the environment, you're notified that the Environment Maker security role is assigned to the user so they can use the agent.
Assign the Transcript Viewer security role during agent sharing
When sharing an agent, you can assign the Transcript Viewer security role to users who don't have conversation transcript access.
Depending on the content and target audience of the agent, consider granting transcript access only to users who have the appropriate privacy training.
Important
Conversation transcript access is managed by environment security roles. After assigning the Transcript Viewer security role to a user, that user can access conversation transcripts for all agents that they create or are shared with them in the environment.
By default, only admins have the Transcript Viewer role. We recommend you create a new environment for your agents to control which users can view conversation transcripts.
Insufficient environment permissions
Users in an environment must have the Environment Maker security role before an agent can be shared with them.
A system administrator for the environment must assign the Environment Maker security role to a user before you share an agent with them. If you have the System Administrator security role, you can assign the Environment Maker role to users when you share agents.
Publish your Microsoft Copilot Studio agent to the web, Teams and Microsoft 365 Copilot, Facebook, or even use an existing Azure Bot Service framework.
Use the security and governance controls in Power Platform and Microsoft 365 to manage the security of your data when creating, publishing, and using agents built with Copilot Studio.