# GitHub — Enterprise managed permissions for GitHub Copilot agent operations

- Company: GitHub (github.com)
- Announced: 2026-09-09T20:08:14+00:00
- Category: capability-change
- Coverage: not counted
- Announcement: yes
- Group: announcements
- Source: https://github.blog/changelog/2026-09-09-enterprise-managed-permissions-for-github-copilot-agent-operations
- Record: https://forck.live/items/9619-enterprise-managed-permissions-for-github-copilot-agent-operations
- Subject: Copilot

GitHub introduced enterprise managed permissions for Copilot agent operations, allowing administrators to centrally control which agent operations are blocked, require human approval, or can proceed without a prompt. The controls cover shell commands, file reads and edits, and network domains, and are generally available in the GitHub Copilot app, GitHub Copilot CLI, and Visual Studio Code sessions that use Agent Host.

## Evidence

Verbatim from https://github.blog/changelog/2026-09-09-enterprise-managed-permissions-for-github-copilot-agent-operations:

> If you administer GitHub Copilot Business or GitHub Copilot Enterprise, you can now centrally control which agent operations are blocked, require human approval, or can proceed without a prompt.

---

Record: https://forck.live/items/9619-enterprise-managed-permissions-for-github-copilot-agent-operations
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md