Forum Discussion

ArefHalmstrand's avatar
Oct 10, 2025
Solved

Conditional Access on web grounding for Copilot

Hello everyone,

Does someone know if it is possible to block web grounding for specific users through Conditional Access? 

Best regards,
Aref Halmstrand

  • Hello,

    This was solved by navigating to config.office.com,

    Create a new Config Policy and allow web grounding in Copilot for a security group. 
    In our case, we had to ensure there was no GPO that created a conflict with the policy to make sure it is also configured correctly on client applications.

4 Replies

  • Hello,

    This was solved by navigating to config.office.com,

    Create a new Config Policy and allow web grounding in Copilot for a security group. 
    In our case, we had to ensure there was no GPO that created a conflict with the policy to make sure it is also configured correctly on client applications.

  • Manoj_ManoVerse's avatar
    Manoj_ManoVerse
    Copper Contributor

    https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-all-users-copilot-ai-security  this link will let us know which service principal you need to target and Web grounding is controlled by connected service settings so you can disable web search for specific users or group , features can be controlled by license assignment , group based policies to allow specific group or department to use web grounding https://learn.microsoft.com/en-us/copilot/microsoft-365/manage-public-web-access

  • Manoj_ManoVerse's avatar
    Manoj_ManoVerse
    Copper Contributor

    Yes, it can be possible  by creating new service principal and new policy there.

Resources