Copilot Billing Governance¶

Governance for Copilot consumption billing — PAYG and prepaid credit policies, a switch-on-pathway entitlement engine, per-agent caps, and pre-enforcement coverage-gap analysis.

Mapped Controls¶

3.5, 1.18, 1.14

Prerequisites¶

Role	Requirement
`m365-admin`	Microsoft 365 admin for Copilot billing and credit policy read/configuration in the Microsoft 365 admin center.
`azure-admin`	Azure subscription Owner or Contributor for the pay-as-you-go (PAYG) billing subscription backing metered Copilot consumption.
`security-admin`	Entra security-group administrator to register maker, audience, and billing groups in the admission-gated group registry.
`power-platform-admin`	Power Platform Admin or System Administrator for Dataverse schema deployment and scheduled flows.

Dependencies¶

Verification¶

Run the coverage-gap analysis in monitor-only mode and confirm per-agent rows are written to fsi_cbgcoveragegap.

Documentation¶

Document
Architecture
Dataverse Schema
Entitlement Contract
Flow Configuration
Owner Attestation Workflow
Prerequisites

View source on GitHub { .md-button }