GitHub Copilot Cloud Agent: Selective Org Control

Enterprise admins can now selectively enable Copilot Cloud Agent per organization using custom properties or new API endpoints, replacing the all-or-nothing control model.

GitHub Copilot Cloud Agent: Selective Org Control

TL;DR

  • Selectively enable Copilot Cloud Agent per organization instead of all-or-nothing
  • Use custom properties or new API endpoints to manage CCA rollout
  • Custom properties are evaluated once at configuration time — no auto-sync if properties change later

New

  • Selective CCA enablement — Enterprise admins can now enable Copilot Cloud Agent for specific organizations individually or via organization custom properties, replacing the previous all-or-nothing approach.
  • Three new REST API endpointsPUT to set policy state, POST to add organizations to the enabled list, and DELETE to disable CCA for organizations.
  • AI Controls UI management — Configure CCA policies directly in the AI Controls settings page under "Agent" → "Copilot Cloud Agent" → "Enabled for selected organizations".

Important

  • Custom properties evaluated once — Organizations won't automatically enable or disable if custom properties are added, removed, or modified after initial configuration. You must manually update the policy.

Update via GitHub Enterprise Cloud. See the REST API documentation for endpoint details and the CCA management guide for UI walkthrough.

Source: GitHub Changelog