Managing GitHub Copilot Extensions

About managing GitHub Copilot Extensions

Before you install Copilot Extensions in your organization, you should set a usage policy for your organization. Setting a usage policy allows you to enable or disable Copilot Extensions for all members of your organization, limiting your security risk. See "Setting a policy for GitHub Copilot Extensions in your organization."

Additionally, after you install a Copilot Extension in your organization, you can view and manage the permissions for that extension. See "Managing permissions for a GitHub Copilot Extension in your organization."

Setting a policy for GitHub Copilot Extensions in your organization

1. In the upper-right corner of GitHub, select your profile photo, then click Your organizations.
2. Next to the organization, click Settings.
3. In the sidebar, under "Code, planning, and automation", click Copilot, and then click Policies.
4. In the "Copilot Extensions" section, select the dropdown menu, then enable or disable Copilot Extensions for your organization.

Managing permissions for a GitHub Copilot Extension in your organization

After you have installed a Copilot Extension in your organization, you can view the permissions the extension has in your organization, and why those permissions are necessary. If you do not want the Copilot Extension to have the listed permissions, you can suspend or uninstall the extension.

1. In the upper-right corner of GitHub, select your profile photo, then click Your organizations.
2. Next to the organization, click Settings.
3. In the sidebar, under "Third-party Access," click GitHub Apps. A list of the GitHub Apps installed on your organization will be displayed.
4. Optionally, to filter your installed GitHub Apps for Copilot Extensions, select the Filter: dropdown menu, then click Copilot Extensions.
5. Next to the Copilot Extension you want to review or modify, click Configure.
6. In the "Permissions" section, review the permissions listed for the Copilot Extension. Optionally, you can block the Copilot Extension's access to your organization in one of two ways:
   • To indefinitely suspend the Copilot Extension's access to resources in your organization while keeping the extension installed, in the "Danger zone" section, click Suspend.
   • To uninstall a Copilot Extension completely, in the "Danger zone" section, click Uninstall.

Next steps

After you have set a Copilot Extensions policy, you can install Copilot Extensions for your organization. See "Installing GitHub Copilot Extensions for your organization."