Enterprise managed permissions for GitHub Copilot agent operations

GASep 9, 2026VerifiedAdded Sep 22, 2026

If you administer GitHub Copilot Business or GitHub Copilot Enterprise, you can now centrally control which agent operations are blocked, require human approval, or can proceed without a prompt. Managed permissions cover shell commands, file reads and edits, and network domains.

AI agents Governance Security Observability Developer tools

Read GitHub's release notes

https://github.blog/changelog/2026-09-09-enterprise-managed-permissions-for-github-copilot-agent-operations

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Copilot releases

GitHub CopilotSep 9, 2026

Enterprise-managed sandbox in Copilot for JetBrains

This update brings support for enterprise-managed sandbox policies, cross-file cursor jumps for next edit suggestions, global project context in chat, enterprise policy diagnostics, and a new connection between terminal Copilot CLI sessions and JetBrains IDEs.

PreviewAI agentsMCPGovernanceSource

GitHub CopilotSep 10, 2026

GitHub Copilot weekly releases , September 7

This week, GitHub Copilot introduces Jira integration in Copilot app and adaptive model orchestration with Project HydraFusion in Copilot CLI. We also introduced new agent automation in Visual Studio Code and expanded enterprise controls for Copilot in JetBrains. GitHub Copilot app Turn Jira issues into action.

PreviewAI agentsPricingObservabilitySource

GitHub CopilotSep 10, 2026

MAI-Code-1-Flash deprecated

We have deprecated MAI-Code-1-Flash across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions) today, September 10, 2026. Model Deprecation date Suggested alternative MAI-Code-1-Flash 2026-09-10 MAI-Code-1.1-Flash Please update your workflows and integrations to use a supported model.

DeprecationAI agentsGovernanceObservabilitySource

GitHub CopilotSep 11, 2026

Add VS Code Agents to Copilot usage metrics

GitHub Copilot usage metrics reports now include generally available metrics for activity in the dedicated VS Code Agents window, helping you measure adoption and engagement across enterprises and organizations.

GAAI agentsPricingObservabilitySource

GitHub CopilotSep 11, 2026

Auto-resolution and analysis updates in Copilot code review

Copilot code review now resolves its own comments once you address them and writes smart commit messages for you when you apply its code suggestions. Behind the scenes, Copilot now uses a broader set of shell tools to validate the code it reviews, and an ensemble of agents produce a more thorough review within the Lite effort level.

UpdateAI agentsCoding agentsSource

GitHub CopilotSep 14, 2026

Configure cost and quality in Copilot auto model selection

GitHub Copilot auto model selection now offers three tiers: efficiency, balance, and intelligence. Choose the tier that reflects how you want auto to weigh cost, quality, and response time for each prompt. Copilot will then optimize accordingly. Efficiency prioritizes keeping costs low and suits fast, straightforward tasks.

UpdatePricingObservabilityDeveloper toolsSource

GitHub CopilotSep 4, 2026

GitHub Copilot weekly releases , August 31

This week, GitHub Copilot expands model choice and content protections, while VS Code adds new ways to manage agent sessions and get pull requests merge-ready. GitHub Copilot, general Claude Fable 5.1 is available to Copilot Pro+, Max, Business, and Enterprise users. Gemini 3.8 Flash is rolling out to Copilot Pro, Pro+, Max, Business, and Enterprise users.

GAAI agentsLLMsObservabilitySource

GitHub CopilotSep 4, 2026

GPT-6 Astra is generally available in GitHub Copilot

GPT-6 Astra from OpenAI is now available in GitHub Copilot. OpenAI’s latest general-purpose model, GPT-6 Astra, is designed for long-horizon, autonomous coding and agentic tasks.

GAAI agentsLLMsGovernanceSource

Also shipped on Sep 9, 2026

Databricks Databricks Data Intelligence PlatformSep 9, 2026

Configurable retention for system tables is in Beta

Account admins can now set an account-wide retention period from 30 to 3,650 days for supported system tables. See Configure system table data retention .

BetaDeveloper toolsSource

Databricks Unity CatalogSep 9, 2026

External secrets in Unity Catalog (Beta)

External secrets connect a Unity Catalog schema to AWS Secrets Manager. The secrets appear in Unity Catalog as read-only securable objects that you govern with Unity Catalog privileges. Databricks reads their values from AWS Secrets Manager on demand. See External secrets in Unity Catalog .

BetaGovernanceSecurityObservabilitySource

Databricks LakeflowSep 9, 2026

Celigo connector (Beta)

The Celigo connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests audit log events, such as create, update, and delete operations on resources, from Celigo (integrator.io) into Databricks. Authentication uses a Celigo integrator.io API token.

BetaData integrationObservabilityDeveloper toolsSource

Databricks LakeflowSep 9, 2026

Anysphere Organization connector (Beta)

The Anysphere Organization connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector uses the Anysphere (Cursor) Organization Admin API to ingest organization members, groups, and group members into Databricks as daily snapshots.

BetaData integrationDeveloper toolsCoding agentsSource

Databricks LakeflowSep 9, 2026

Anaplan connector (Beta)

The Anaplan connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests audit trail events and user account records from your Anaplan tenant into Databricks. Authentication uses an Anaplan CA certificate and its paired private key. See Anaplan connector .

BetaPricingData integrationSource

Snowflake Snowflake OpenflowSep 9, 2026

Openflow gen 1 deployment creation retired

You can no longer create new first generation (gen 1) Openflow deployments (BYOC or Snowflake). All new deployments are second generation (gen 2), created with CREATE OPENFLOW DEPLOYMENT or the Openflow UI. Existing gen 1 deployments continue to work unchanged, and you can still create new gen 1 runtimes on an existing gen 1 deployment.

DeprecationData integrationSource