エンタープライズ AI コントロール用の REST API エンドポイント
REST API を使用して、エンタープライズ、エンタープライズ チーム、エンタープライズ アプリの Copilot モデル ポリシーを管理します。
Get model policies for agent apps
Use this endpoint to retrieve Copilot model policies for agent apps. The response shows which model settings can be changed and which are controlled by enterprise policy.
For models whose settings can be changed, the response shows the configured
setting or optional if no setting has been configured. For models
controlled by enterprise policy, it shows the enterprise setting or the
applicable default. These settings do not necessarily determine whether
an individual user can access a model.
Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.
OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.
"Get model policies for agent apps" のきめ細かいアクセス トークン
このエンドポイントは、次の粒度の細かいトークンの種類で動作します:
粒度の細かいトークンには次のアクセス許可セットが設定されている必要があります:
- "Enterprise AI controls" enterprise permissions (read)
"Get model policies for agent apps" のパラメーター
| 名前, タイプ, 説明 |
|---|
accept string Setting to |
| 名前, タイプ, 説明 |
|---|
enterprise string 必須The slug version of the enterprise name. |
"Get model policies for agent apps" の HTTP 応答状態コード
| 状態コード | 説明 |
|---|---|
200 | OK |
401 | Requires authentication |
403 | Forbidden |
404 | Resource not found |
503 | Service unavailable |
"Get model policies for agent apps" のコード サンプル
GHE.com でGitHubにアクセスする場合は、api.github.com を、api.SUBDOMAIN.ghe.com にある企業の専用サブドメインに置き換えます。
リクエスト例
curl -L \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer <YOUR-TOKEN>" \
-H "X-GitHub-Api-Version: 2026-03-10" \
https://api.github.com/enterprises/ENTERPRISE/copilot/apps/model-policiesOK
Status: 200{
"models": [
{
"model_name": "gpt-5.6-sol",
"display_name": "OpenAI GPT-5.6 Sol",
"policy_state": "optional",
"enterprise_policy_state": "delegate_to_teams_and_apps",
"editable": true
}
]
}Update model policies for enterprise apps
Use this endpoint to set Copilot model policies for agent apps. Set a
model to enabled to configure an apps policy, or to optional to remove
the stored apps policy for that model. Locked models cannot be updated.
Returns the apps policy state representation, including enterprise policy and editability. These states are not a final access decision for a user.
Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.
OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.
"Update model policies for enterprise apps" のきめ細かいアクセス トークン
このエンドポイントは、次の粒度の細かいトークンの種類で動作します:
粒度の細かいトークンには次のアクセス許可セットが設定されている必要があります:
- "Enterprise AI controls" enterprise permissions (write)
"Update model policies for enterprise apps" のパラメーター
| 名前, タイプ, 説明 |
|---|
accept string Setting to |
| 名前, タイプ, 説明 |
|---|
enterprise string 必須The slug version of the enterprise name. |
| 名前, タイプ, 説明 | |||
|---|---|---|---|
models array of objects 必須 | |||
Properties of |
| 名前, タイプ, 説明 |
|---|
model_name string 必須 |
policy_state string 必須Use 次のいずれかにできます: |
"Update model policies for enterprise apps" の HTTP 応答状態コード
| 状態コード | 説明 |
|---|---|
200 | OK |
401 | Requires authentication |
403 | Forbidden |
404 | Resource not found |
422 | Validation failed, or the endpoint has been spammed. |
503 | Service unavailable |
"Update model policies for enterprise apps" のコード サンプル
GHE.com でGitHubにアクセスする場合は、api.github.com を、api.SUBDOMAIN.ghe.com にある企業の専用サブドメインに置き換えます。
要求の例
curl -L \
-X PATCH \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer <YOUR-TOKEN>" \
-H "X-GitHub-Api-Version: 2026-03-10" \
https://api.github.com/enterprises/ENTERPRISE/copilot/apps/model-policies \
-d '{"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'OK
Status: 200{
"models": [
{
"model_name": "gpt-5.6-sol",
"display_name": "OpenAI GPT-5.6 Sol",
"policy_state": "enabled",
"enterprise_policy_state": "delegate_to_teams_and_apps",
"editable": true
}
]
}Get feature policies for an enterprise
Note
This endpoint is in public preview and is subject to change.
Use this endpoint to retrieve the Copilot default availability policy for new features and clients
for an enterprise. A policy state of delegate_to_organizations means each organization sets its
own default.
Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.
OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.
"Get feature policies for an enterprise" のきめ細かいアクセス トークン
このエンドポイントは、次の粒度の細かいトークンの種類で動作します:
粒度の細かいトークンには次のアクセス許可セットが設定されている必要があります:
- "Enterprise AI controls" enterprise permissions (read)
"Get feature policies for an enterprise" のパラメーター
| 名前, タイプ, 説明 |
|---|
accept string Setting to |
| 名前, タイプ, 説明 |
|---|
enterprise string 必須The slug version of the enterprise name. |
"Get feature policies for an enterprise" の HTTP 応答状態コード
| 状態コード | 説明 |
|---|---|
200 | OK |
401 | Requires authentication |
403 | Forbidden |
404 | Resource not found |
"Get feature policies for an enterprise" のコード サンプル
GHE.com でGitHubにアクセスする場合は、api.github.com を、api.SUBDOMAIN.ghe.com にある企業の専用サブドメインに置き換えます。
要求の例
curl -L \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer <YOUR-TOKEN>" \
-H "X-GitHub-Api-Version: 2026-03-10" \
https://api.github.com/enterprises/ENTERPRISE/copilot/feature-policiesOK
Status: 200{
"default_availability": {
"policy_state": "enabled"
}
}Update feature policies for an enterprise
Note
This endpoint is in public preview and is subject to change.
Use this endpoint to update the Copilot default availability policy for new features and clients
for an enterprise. Use delegate_to_organizations to let each organization set its own default.
Enterprises without organizations cannot use delegate_to_organizations.
Changing this policy does not change any Copilot feature or client policy that has already been set.
Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.
OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.
"Update feature policies for an enterprise" のきめ細かいアクセス トークン
このエンドポイントは、次の粒度の細かいトークンの種類で動作します:
粒度の細かいトークンには次のアクセス許可セットが設定されている必要があります:
- "Enterprise AI controls" enterprise permissions (write)
"Update feature policies for an enterprise" のパラメーター
| 名前, タイプ, 説明 |
|---|
accept string Setting to |
| 名前, タイプ, 説明 |
|---|
enterprise string 必須The slug version of the enterprise name. |
| 名前, タイプ, 説明 | ||
|---|---|---|
default_availability object 必須 | ||
Properties of |
| 名前, タイプ, 説明 |
|---|
policy_state string 必須The enterprise default policy applied to newly released Copilot features and clients. 次のいずれかにできます: |
"Update feature policies for an enterprise" の HTTP 応答状態コード
| 状態コード | 説明 |
|---|---|
200 | OK |
401 | Requires authentication |
403 | Forbidden |
404 | Resource not found |
422 | Validation failed, or the endpoint has been spammed. |
"Update feature policies for an enterprise" のコード サンプル
GHE.com でGitHubにアクセスする場合は、api.github.com を、api.SUBDOMAIN.ghe.com にある企業の専用サブドメインに置き換えます。
要求の例
curl -L \
-X PATCH \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer <YOUR-TOKEN>" \
-H "X-GitHub-Api-Version: 2026-03-10" \
https://api.github.com/enterprises/ENTERPRISE/copilot/feature-policies \
-d '{"default_availability":{"policy_state":"enabled"}}'OK
Status: 200{
"default_availability": {
"policy_state": "enabled"
}
}Get model policies for an enterprise
Use this endpoint to retrieve Copilot model policies for an enterprise.
For enterprises that manage Copilot through organizations, delegated models use the
policy state of delegate_to_organizations.
Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.
OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.
"Get model policies for an enterprise" のきめ細かいアクセス トークン
このエンドポイントは、次の粒度の細かいトークンの種類で動作します:
粒度の細かいトークンには次のアクセス許可セットが設定されている必要があります:
- "Enterprise AI controls" enterprise permissions (read)
"Get model policies for an enterprise" のパラメーター
| 名前, タイプ, 説明 |
|---|
accept string Setting to |
| 名前, タイプ, 説明 |
|---|
enterprise string 必須The slug version of the enterprise name. |
"Get model policies for an enterprise" の HTTP 応答状態コード
| 状態コード | 説明 |
|---|---|
200 | OK |
401 | Requires authentication |
403 | Forbidden |
404 | Resource not found |
503 | Service unavailable |
"Get model policies for an enterprise" のコード サンプル
GHE.com でGitHubにアクセスする場合は、api.github.com を、api.SUBDOMAIN.ghe.com にある企業の専用サブドメインに置き換えます。
要求の例
curl -L \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer <YOUR-TOKEN>" \
-H "X-GitHub-Api-Version: 2026-03-10" \
https://api.github.com/enterprises/ENTERPRISE/copilot/model-policiesOK
Status: 200{
"default_availability": {
"policy_state": "enabled"
},
"models": [
{
"model_name": "gpt-5.6-sol",
"display_name": "OpenAI GPT-5.6 Sol",
"policy_state": "enabled"
}
]
}Update model policies for an enterprise
Use this endpoint to update Copilot model policies for an enterprise.
For enterprises that manage Copilot through organizations, use
delegate_to_organizations to delegate a model or default availability.
Enterprises without organizations cannot use delegate_to_organizations.
Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.
OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.
"Update model policies for an enterprise" のきめ細かいアクセス トークン
このエンドポイントは、次の粒度の細かいトークンの種類で動作します:
粒度の細かいトークンには次のアクセス許可セットが設定されている必要があります:
- "Enterprise AI controls" enterprise permissions (write)
"Update model policies for an enterprise" のパラメーター
| 名前, タイプ, 説明 |
|---|
accept string Setting to |
| 名前, タイプ, 説明 |
|---|
enterprise string 必須The slug version of the enterprise name. |
| 名前, タイプ, 説明 | |||
|---|---|---|---|
default_availability object | |||
Properties of |
| 名前, タイプ, 説明 |
|---|
policy_state string 必須
次のいずれかにできます: |
models array of objects Properties of models
| 名前, タイプ, 説明 |
|---|
model_name string 必須 |
policy_state string 必須
次のいずれかにできます: |
"Update model policies for an enterprise" の HTTP 応答状態コード
| 状態コード | 説明 |
|---|---|
200 | OK |
401 | Requires authentication |
403 | Forbidden |
404 | Resource not found |
422 | Validation failed, or the endpoint has been spammed. |
503 | Service unavailable |
"Update model policies for an enterprise" のコード サンプル
GHE.com でGitHubにアクセスする場合は、api.github.com を、api.SUBDOMAIN.ghe.com にある企業の専用サブドメインに置き換えます。
要求の例
curl -L \
-X PATCH \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer <YOUR-TOKEN>" \
-H "X-GitHub-Api-Version: 2026-03-10" \
https://api.github.com/enterprises/ENTERPRISE/copilot/model-policies \
-d '{"default_availability":{"policy_state":"enabled"},"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'OK
Status: 200{
"default_availability": {
"policy_state": "enabled"
},
"models": [
{
"model_name": "gpt-5.6-sol",
"display_name": "OpenAI GPT-5.6 Sol",
"policy_state": "enabled"
}
]
}Get model policies for an enterprise team
Use this endpoint to retrieve Copilot model policy states for an enterprise team, along with the corresponding enterprise-level policies. The response shows which model policies the team can update based on enterprise policy and the available team policy controls.
For models the team can update, the response shows the team’s configured
value or optional if the team has not set one. For locked models, it shows
the enterprise’s explicit value or the applicable default availability for
eligible models. These states are not a final access decision for a user.
Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.
OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.
"Get model policies for an enterprise team" のきめ細かいアクセス トークン
このエンドポイントは、次の粒度の細かいトークンの種類で動作します:
粒度の細かいトークンには次のアクセス許可セットが設定されている必要があります:
- "Enterprise AI controls" enterprise permissions (read)
"Get model policies for an enterprise team" のパラメーター
| 名前, タイプ, 説明 |
|---|
accept string Setting to |
| 名前, タイプ, 説明 |
|---|
enterprise string 必須The slug version of the enterprise name. |
team_id integer 必須The unique identifier of the team. |
"Get model policies for an enterprise team" の HTTP 応答状態コード
| 状態コード | 説明 |
|---|---|
200 | OK |
401 | Requires authentication |
403 | Forbidden |
404 | Resource not found |
503 | Service unavailable |
"Get model policies for an enterprise team" のコード サンプル
GHE.com でGitHubにアクセスする場合は、api.github.com を、api.SUBDOMAIN.ghe.com にある企業の専用サブドメインに置き換えます。
リクエスト例
curl -L \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer <YOUR-TOKEN>" \
-H "X-GitHub-Api-Version: 2026-03-10" \
https://api.github.com/enterprises/ENTERPRISE/teams/TEAM_ID/copilot/model-policiesOK
Status: 200{
"models": [
{
"model_name": "gpt-5.6-sol",
"display_name": "OpenAI GPT-5.6 Sol",
"policy_state": "optional",
"enterprise_policy_state": "delegate_to_teams_and_apps",
"editable": true
}
]
}Update model policies for an enterprise team
Use this endpoint to update Copilot model policies for an enterprise team. Only editable model policies can be updated.
Set a model to enabled to configure a team policy, or to optional to clear
the team’s policy for that model. Locked models cannot be updated.
The response contains the same policy state information as the corresponding GET endpoint, including enterprise policies and whether each model policy can be updated. These states do not necessarily determine whether an individual user can access a model.
Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.
OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.
"Update model policies for an enterprise team" のきめ細かいアクセス トークン
このエンドポイントは、次の粒度の細かいトークンの種類で動作します:
粒度の細かいトークンには次のアクセス許可セットが設定されている必要があります:
- "Enterprise AI controls" enterprise permissions (write)
"Update model policies for an enterprise team" のパラメーター
| 名前, タイプ, 説明 |
|---|
accept string Setting to |
| 名前, タイプ, 説明 |
|---|
enterprise string 必須The slug version of the enterprise name. |
team_id integer 必須The unique identifier of the team. |
| 名前, タイプ, 説明 | |||
|---|---|---|---|
models array of objects 必須 | |||
Properties of |
| 名前, タイプ, 説明 |
|---|
model_name string 必須 |
policy_state string 必須Use 次のいずれかにできます: |
"Update model policies for an enterprise team" の HTTP 応答状態コード
| 状態コード | 説明 |
|---|---|
200 | OK |
401 | Requires authentication |
403 | Forbidden |
404 | Resource not found |
422 | Validation failed, or the endpoint has been spammed. |
503 | Service unavailable |
"Update model policies for an enterprise team" のコード サンプル
GHE.com でGitHubにアクセスする場合は、api.github.com を、api.SUBDOMAIN.ghe.com にある企業の専用サブドメインに置き換えます。
要求の例
curl -L \
-X PATCH \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer <YOUR-TOKEN>" \
-H "X-GitHub-Api-Version: 2026-03-10" \
https://api.github.com/enterprises/ENTERPRISE/teams/TEAM_ID/copilot/model-policies \
-d '{"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'OK
Status: 200{
"models": [
{
"model_name": "gpt-5.6-sol",
"display_name": "OpenAI GPT-5.6 Sol",
"policy_state": "enabled",
"enterprise_policy_state": "delegate_to_teams_and_apps",
"editable": true
}
]
}