Why This Matters

Org governance ensures consistency, cost control, and compliance across all teams.

Concept Explained

Org policy covers: seat allocation (who gets seats), model allowlist (which models users can pick), content filter (Block/Allow), training opt-out, audit.

How It Works

Define policy. Enforce via Policy API. Allocate seats based on roles. Set model allowlist. Audit compliance monthly.

Step-by-Step Tutorial

1. Define policy

2. Enforce

3. Allocate seats

4. Set model allowlist

5. Audit

Real-World Example

A regulated org enforced: seats for engineers only, allowlist [GPT-5, Claude], Block filter, opt-out. Audited monthly. Passed compliance audit.

Example Prompts / Commands / Code

"""# Copilot Org Policy

## Seats
- Engineers: yes
- QA: yes
- Designers: no (no code work)
- Managers: case-by-case

## Models allowed
- GPT-5
- Claude
- (No Gemini — not approved by legal)

## Content filter
- Block (org-wide, enforced)

## Training opt-out
- Enabled (Business plan, default)

## Audit
- Monthly: verify all settings
- Quarterly: review policy
- Annually: legal review
"""

"""# Apply policy
set_org_policy(
    allowed_models=['gpt-5', 'claude'],
    content_filter='block',
    training_opt_out=True
)

# Allocate seats
engineers = get_engineers()
for eng in engineers:
    if not has_copilot_seat(eng):
        add_seat(eng)

# Audit
def audit():
    policy = get_org_policy()
    assert policy['allowed_models'] == ['gpt-5', 'claude']
    assert policy['content_filter'] == 'block'
    assert policy['training_opt_out'] == True
    # Check all engineers have seats
    # Check non-engineers don't
"""

Common Mistakes

• No policy — everyone does what they want.
• Policy not enforced — drift.
• No audit — compliance unknown.
• Over-restrictive — devs can't work effectively.

Best Practices

• Define policy: seats, models, filter, opt-out.
• Enforce via Policy API.
• Allocate seats based on roles.
• Set model allowlist (enough variety for tasks).
• Audit monthly.

Troubleshooting

Practical Exercise

Professional Challenge

Frequently Asked Questions

Further Reading

• Copilot for business

Official References

• Copilot for business

Related lessons: PR-11, PR-41