{"slug": "deploy-managed-copilot-settings-via-mdm-in-vs-code-and-cli", "title": "Deploy managed Copilot settings via MDM in VS Code and CLI", "summary": "GitHub announced general availability of managed Copilot settings deployment via MDM and file-based configuration for VS Code and CLI, enabling enterprise administrators to enforce governance policies directly on devices using tools like Microsoft Intune, Jamf, or Group Policy. The settings apply consistently across VS Code and Copilot CLI regardless of developer sign-in, with native MDM taking highest precedence among delivery channels.", "body_md": "# Deploy managed Copilot settings via MDM in VS Code and CLI\n\nEnterprise administrators can now deliver managed GitHub Copilot settings directly to devices through native mobile device management (MDM) and file-based configuration, in addition to the existing server-managed channel. This is generally available for GitHub Copilot CLI and VS Code.\n\nDevice-level deployment lets you enforce Copilot governance using the same tools you already use to manage endpoints. You can push settings through Microsoft Intune, Jamf, or Group Policy, or deploy a configuration file with Chef, Puppet, or Ansible. Because settings are read from the device, they apply consistently across VS Code and Copilot CLI, regardless of how a developer signs in.\n\n[Delivery channels](#delivery-channels)\n\nYou can deliver managed settings through any of three channels, all of which use the same keys and values.\n\n**Native MDM** reads OS-level managed preferences. On Windows, settings come from the`HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\GitHubCopilot`\n\nregistry key. On macOS, they come from managed preferences for the`com.github.copilot`\n\ndomain.**File-based** reads a`managed-settings.json`\n\nfile from a well-known path (i.e,`/Library/Application Support/GitHubCopilot/managed-settings.json`\n\non macOS,`%ProgramFiles%\\GitHubCopilot\\managed-settings.json`\n\non Windows, and`/etc/github-copilot/managed-settings.json`\n\non Linux). File-based settings must be owned by`root`\n\nand cannot be world-writable or symlinked.**Server-managed** resolves settings from the developer’s signed-in GitHub account via`managed-settings.json`\n\nin your organization’s`.github-private`\n\nrepository.\n\nWhen more than one channel provides settings, the highest-precedence channel wins outright, in this order:\n\n- Native MDM\n- Server-managed\n- File-based\n\n[Supported settings](#supported-settings)\n\nThe device-level channels support the same managed setting keys as the server-managed channel, including:\n\n`permissions.disableBypassPermissionsMode`\n\n`model`\n\n`enabledPlugins`\n\n`extraKnownMarketplaces`\n\n`strictKnownMarketplaces`\n\n`telemetry.*`\n\nfor OpenTelemetry export configuration\n\nScalar settings use their dot-separated key directly, while structured settings such as `enabledPlugins`\n\nare supplied as a JSON string value. Additional keys will be added over time.\n\n[Getting started](#getting-started)\n\nTo learn how to deploy managed settings to your devices, see [Deploy Copilot managed settings](https://code.visualstudio.com/docs/enterprise/ai-settings#_deploy-copilot-managed-settings). For the full list of keys and the settings they control, see [Configure enterprise managed settings](https://docs.github.com/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings).\n\nJoin the discussion within [GitHub Community](https://github.com/orgs/community/discussions/199139).", "url": "https://wpnews.pro/news/deploy-managed-copilot-settings-via-mdm-in-vs-code-and-cli", "canonical_source": "https://github.blog/changelog/2026-07-08-deploy-managed-copilot-settings-via-mdm-in-vs-code-and-cli", "published_at": "2026-07-08 20:38:56+00:00", "updated_at": "2026-07-08 22:18:03.432482+00:00", "lang": "en", "topics": ["developer-tools", "ai-tools", "ai-policy"], "entities": ["GitHub", "GitHub Copilot", "VS Code", "Microsoft Intune", "Jamf", "Chef", "Puppet", "Ansible"], "alternates": {"html": "https://wpnews.pro/news/deploy-managed-copilot-settings-via-mdm-in-vs-code-and-cli", "markdown": "https://wpnews.pro/news/deploy-managed-copilot-settings-via-mdm-in-vs-code-and-cli.md", "text": "https://wpnews.pro/news/deploy-managed-copilot-settings-via-mdm-in-vs-code-and-cli.txt", "jsonld": "https://wpnews.pro/news/deploy-managed-copilot-settings-via-mdm-in-vs-code-and-cli.jsonld"}}