MDM: GitHub Copilot

GitHub Copilot has two centralized levers, so you rarely touch individual machines. For the manual setup, see the GitHub Copilot connect page.

Enterprise owners can add the TapPass model provider key in enterprise settings, once. The custom model then appears in Copilot Chat, the Copilot CLI, and the IDEs for every seat on Copilot Business or Copilot Enterprise, with no per-developer setup. Org admins can gate availability with Copilot policy.

This is the primary rollout path and needs no device MDM.

If you also want to pin the model selection in the editor, push managed settings through your MDM:

• VS Code: distribute a managed settings.json (for example through Intune’s managed-app configuration or a configuration profile) that selects the TapPass provider and model. This keeps developers on the governed model by default.
• JetBrains and Xcode: pin the Copilot model in the shared or managed profile your team already distributes.

Issue a TapPass key per developer (or per team) rather than one shared key, so each developer is a distinct governed identity. See three ingredients.

In a managed IDE, confirm the TapPass provider is present, the model is selected, and a Copilot request produces a governed event in the TapPass console.