cd /news/ai-safety/enterprise-managed-settings-now-supp… · home topics ai-safety article
[ARTICLE · art-31543] src=github.blog ↗ pub= topic=ai-safety verified=true sentiment=· neutral

Enterprise-managed settings now support bypass permission controls

GitHub has added a new governance capability to enterprise-managed settings, allowing administrators to disable bypass permission controls for Copilot CLI and VS Code. The setting prevents automatic approval of permission prompts, enhancing security for Copilot Business and Enterprise users.

read1 min views1 publishedJun 17, 2026

We’re adding our first governance capability to the enterprise-managed settings configuration. Enterprise administrators can now set disableBypassPermissionsMode

to "disable"

in the enterprise-managed settings.json

to prevent GitHub Copilot CLI and VS Code from automatically skipping permission prompts (also known as “yolo mode” or auto-approve).

Add disableBypassPermissionsMode

to .github-private/.github/copilot/settings.json

. GitHub Copilot automatically pulls and applies these settings for users licensed through your enterprise account with Copilot Business or Copilot Enterprise. If you’ve already configured a source organization for custom agents, this setting uses that same .github-private

repository. You can confirm that your configuration is active on the Agents page under AI controls in your enterprise settings.

This builds on the enterprise-managed plugins for Copilot CLI and VS Code capabilities launched earlier. VS Code v1.122+ already respects enterprise-managed settings including this policy. The new supported path for AI standards is copilot/managed-settings.json, with backward compatibility for .github/copilot/settings.json

.

To learn more, see Disabling automatic command approval in Copilot clients. Join the discussion within GitHub Community.

── more in #ai-safety 4 stories · sorted by recency
── more on @github 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/enterprise-managed-s…] indexed:0 read:1min 2026-06-17 ·