GitHub adds enterprise-managed permissions for Copilot agents
GitHub made centrally managed permissions generally available for Copilot agent operations. Administrators can set shell commands, file reads and edits, and network domains to blocked, require approval or proceed, with team-specific policies across the Copilot app, Copilot CLI and VS Code sessions using Agent Host.
Why it matters: Organization policy can now override local settings, auto-approval and saved approvals, reducing the chance that an individual convenience setting silently weakens an enterprise agent boundary.