Enterprise managed settings reference

Reference for the enterprise managed settings schema used by Copilot clients.

In this article

Note

This feature is in public preview and subject to change.

Use this reference to understand the currently supported keys in managed-settings.json.

For deployment methods, see Configuring enterprise-managed settings.

Precedence rules

When multiple settings sources are present, clients apply settings in this order:

  1. Server-managed settings
  2. MDM-managed settings
  3. File-based settings
  4. User-level settings

MDM-managed settings take precedence. If MDM-managed settings are not available, clients apply server-managed settings before file-based settings.

Supported keys

KeyTypeAccepted valuesPurpose
permissions.disableBypassPermissionsModestring"disable"Disables bypass or YOLO-style allow-all behavior
enabledPluginsobjectKey format: PLUGIN-NAME@MARKETPLACE-NAME; value: trueEnables specific plugins by key
extraKnownMarketplacesobjectNamed marketplace object with source.source ("github") and source.repo (OWNER/REPO)Adds plugin marketplaces that users can access
strictKnownMarketplacesarrayArray of marketplace objects with source values ("github" with repo, or "git" with url)Restricts plugin installation to explicitly listed marketplaces
modelobjectdefault set to a supported model nameDefines default model governance settings
telemetryobjectenabled (boolean), endpoint (string), protocol ("otlp-http" or "otlp-grpc"), captureContent (boolean), lockCaptureContent (boolean), serviceName (string), resourceAttributes (object), headers (object)Configures OpenTelemetry export for VS Code

Example configuration

The following example shows these keys in one managed settings file.

{
  "permissions": {
    "disableBypassPermissionsMode": "disable"
  },
  "enabledPlugins": {
    "my-plugin@agent-skills": true
  },
  "extraKnownMarketplaces": {
    "agent-skills": {
      "source": {
        "source": "github",
        "repo": "OWNER/REPO"
      }
    }
  },
  "strictKnownMarketplaces": [
    {
      "source": "github",
      "repo": "OWNER/REPO"
    }
  ],
  "model": {
    "default": "MODEL-NAME"
  },
  "telemetry": {
    "enabled": true,
    "endpoint": "https://otel-collector.example.com",
    "protocol": "otlp-http",
    "captureContent": false,
    "lockCaptureContent": true,
    "serviceName": "copilot",
    "resourceAttributes": {
      "deployment.environment": "production"
    },
    "headers": {
      "Authorization": "Bearer TOKEN"
    }
  }
}