Posts

How to “Disable” GitHub Copilot Harness Agents in Copilot Studio

Image
Copilot Studio governance How to “Disable” GitHub Copilot Harness Agents in Copilot Studio One policy is not enough. Copilot Credits contain consumption. A Dataverse plug-in can reject the final save into the environment - but it cannot stop earlier harness authoring and testing. Together, both layers form a practical control. Author Lukáš Oplt 12 min read September 2026 Two layers for governing GitHub Copilot harness agents Power Platform capacity controls contain consumption while a Dataverse PreValidation plug-in prevents the agent from being saved to the environment. COPILOT STUDIO GOVERNANCE There is no single off switch. Control consumption and persistence as separate decisions. 01 · CONTAIN CONSUMPTION Copilot Credits Environment allocation · no tenant pool Covers authoring, testing and runtime 02 · BLOCK THE SAVE Dataverse plug-in Synchronous bot Create · PreValidation Does not intercept earlier harness activity BLOCKING THE SAVE DOES NOT REFUND THE BUILD. The GitHub...
Post a Comment
Read more

What to Choose When Creating an Agent in the Microsoft Ecosystem

What to Choose When Creating an Agent in the Microsoft Ecosystem. An overview of all options for creating an AI agent in the Microsoft ecosystem—categorized by purpose, licensing, developers, and development method. Author Lukáš Oplt 12 min read August 2026 Microsoft AI agent platform spectrum A spectrum from guided Microsoft 365 agents through Copilot Studio to custom agents built with Microsoft Foundry and Agent Framework. MICROSOFT AI AGENT DECISION GUIDE One ecosystem. Different responsibilities. Choose by operating model — not by demo speed. GUIDED M365 experiences Agent Builder SharePoint agents Fast start · narrow scope LOW-CODE Copilot Studio Knowledge + actions Channels + workflows Governed process delivery CODE-FIRST Custom agent platform M365 Agents SDK · Foundry Microsoft Agent Framework Maximum control · full ownership FASTER TO START MORE CONTROL · MORE RESPONSIBILITY Microsoft currently offers several ways to create an AI agent. You can create an agent on SharePoint i...
Post a Comment
Read more

Stop Letting Employees Own Production Flows

Image
Power Automate · Ownership · ALM Stop letting employees own production flows. A flow is not production-ready while its continuity depends on one person's account, license, password, role, or employment. By Lukáš Oplt 10 min read Governance Production flow ownership moving from an employee to a service principal A fragile employee identity is replaced with a managed service principal while connection references link the production flow to governed connections. EMPLOYEE ACCOUNT SOLUTION-AWARE FLOW CONNECTION REF Owner ≠ every connection SERVICE PRINCIPAL A maker builds an automation, tests it, and publishes it. Months later the maker changes role, loses a premium license, accepts a new Conditional Access policy, or leaves the company. The business process stops even though nobody changed the flow. This is not a rare technical edge case. It is a predictable ownership failure. A production automation needs an operating identity with a lifecycle designed around the process...
Post a Comment
Read more

Power Pages Finally Has Server-Side JavaScript — Here Are the Boundaries

Image
Power Pages · JavaScript · Security Server-side JavaScript is here. Learn the boundaries first. Power Pages server logic can move sensitive operations out of the browser. It is also a constrained platform runtime—not a small Node.js server hidden inside your site. By Lukáš Oplt 11 min read Power Pages Browser calling secure Power Pages server logic Client JavaScript sends a CSRF-protected request to a server logic endpoint, which applies web roles and table permissions before accessing Dataverse or an external API. POWER PAGES CLIENT CSRF TOKEN /_api/serverlogics/... SERVER LOGIC ECMAScript 2023 web roles · table permissions allowed domains · timeout DATAVERSE REST API Power Pages customization has long forced an uncomfortable choice: expose integration logic in client-side JavaScript, route everything through another service, or accept that a requirement does not belong in the site. Server logic adds a new option. A page can call JavaScript that runs inside the Power ...
Post a Comment
Read more