microsoft/PAX copilotinteractions-v1.2.0

copilotinteractions-v1.2.0

Repository: microsoft/PAX

Tag: copilotinteractions-v1.2.0

Published: 2025-12-09T18:05:47Z

Prerelease: no

Release notes:

Release Notes: v1.2.0

Release Information

• Version: 1.2.0
• Release Date: 2025-12-09
• Released By: Microsoft Copilot Growth ROI Advisory Team (copilot-roi-advisory-team-gh@microsoft.com)

---

⚠️ Important Usage & Compliance Disclaimer

Please note:

While this tool helps customers better understand their Microsoft 365 Copilot interaction data, Microsoft has no visibility into the data that customers input into this script/tool, nor does Microsoft have any control over how customers will use this script/tool in their environment.

Customers are solely responsible for securing, storing, and processing all exported data in compliance with their organization's policies and all applicable laws and regulations, including but not limited to data privacy, security, and regulatory requirements (e.g., GDPR, HIPAA, PCI DSS, and data residency obligations).

This script outputs highly sensitive Copilot interaction content, including user prompts and Copilot responses, which may contain confidential, regulated, or personally identifiable information (PII). By using this script, you acknowledge and agree:

• You must implement appropriate safeguards, including encryption, access controls, and data classification, before running or sharing outputs generated by this script.
• Do not run this script on shared or unmanaged devices. Ensure that only authorized personnel have access to the exported data.
• Apply data loss prevention (DLP) policies and sensitive information detection where possible.

Microsoft provides this script "as-is" without warranties of any kind and disclaims all liability for any loss, breach, or misuse of data arising from or related to your use of this script. Microsoft does not provide support for custom modifications or downstream uses of this script. All operational risk and compliance obligations rest with you.

✅ Additional Guidance

Consult Your Compliance Team Before using this script, consult your organization's legal and compliance teams to confirm that your planned usage aligns with internal policies and external regulatory requirements.

Retention & eDiscovery Obligations Data exported by this script may fall under retention, legal hold, or eDiscovery obligations. Ensure that your organization's compliance policies are applied to any exported files.

🔐 Security Best Practices Checklist

• ☑ Rotate credentials regularly (client secrets or certificates) and never hard-code secrets in scripts.
• ☑ Run only in secure environments (managed devices, trusted networks).
• ☑ Apply encryption at rest and in transit for all exported files.
• ☑ Restrict access to exported data to authorized personnel only.
• ☑ Enable DLP and sensitivity labels to prevent accidental sharing.
• ☑ Validate storage location (e.g., secure SharePoint or encrypted file share).
• ☑ Review logs and outputs for sensitive content before distribution.
• ☑ Apply retention and deletion policies to exported data in line with compliance requirements.

🧪 Experimental Script Notice

This is an experimental script. On occasion, you may notice small deviations from metrics in the official Microsoft 365 Copilot Dashboards. We will continue to iterate based on your feedback. Currently available in English only.

---

Installation

Download v1.2.0 (This Version)

Use the direct download link below to obtain this specific version:

• Script v1.2.0: PAX_CopilotInteractions_Content_Audit_Log_Processor_v1.2.0.ps1

Related Assets

• Documentation (v1.2.0): PAX_CopilotInteractions_Content_Audit_Log_Processor_Documentation_v1.2.0.md

Prerequisites

• PowerShell: 5.1 or later (PowerShell 7+ recommended for parallel processing performance)
• Microsoft Graph PowerShell SDK: Auto-installed by script if missing (Microsoft.Graph.Authentication module)
• ImportExcel Module: Auto-installed by script if missing (required only when using -ExportWorkbook)
• Microsoft Entra ID App Registration: Required with the following Application permissions (all three required for every script run):
• AiEnterpriseInteraction.Read.All - Read Copilot interaction history for all users
• User.Read.All - Read user directory and license information
• Organization.Read.All - Read organization and related resources
• All permissions require tenant admin consent

---

Overview

Version 1.2.0 introduces a single, compliance-focused enhancement: the new -CountryCodes parameter. This addition lets administrators scope Copilot interaction exports to users whose Entra usageLocation aligns with approved ISO 3166-1 alpha-2 country codes. The feature executes before any network request so that only in-region accounts are queried, helping organizations respect data residency policies without building post-processing filters.

Key Features

1. Country-Scoped Data Collection (`-CountryCodes`)

• Accepts one or more ISO 3166-1 alpha-2 codes (for example, US, DE, JP) to limit which users are queried.
• Runs the filter before any Copilot interaction requests, ensuring out-of-scope users never leave the Entra directory cache stage.
• Works across all script modes, including incremental runs (-UseWatermark) and metadata-only exports (-OnlyUserInfo).

2. Alias and Locale Normalization

• Supports friendly country names ("United Kingdom", "Germany") by resolving them through .NET region metadata.
• Recognizes reserved aliases such as UK, GBR, and common casing variants, automatically remapping them to their canonical two-letter codes.
• Logs the normalization outcome for each supplied value so operators can verify the exact filter applied during the session.

3. Skipped User Transparency & Outputs

• Detects users without an Entra usageLocation, records the omission reason, and excludes them from collection.
• Emits a CountryFilter_Users_.txt roster listing each included user when at least one match is found; nothing is written if the...