Limited Availability: Horizon Delegate Tool Approvals and Permissions

Before Horizon Delegate takes an action in the remote desktop, such as running a command, changing a file, or using a tool, it can pause and ask the user to approve the action.

Tool access modes

Users select a tool access mode in the Horizon Delegate panel. Horizon Delegate remembers the selection and uses it in later sessions.

• Standard - Actions that policy already allows run without a prompt. When an action still needs a decision, Horizon Delegate shows an approval request in the conversation.
• Allow all - Actions run without a prompt and are still audited. Use this mode only for trusted, automated, or unattended pools. Horizon Delegate asks the user to confirm before it turns on this mode.

Administrators can set the default mode with the Default permission mode group policy setting. In this setting, the Default value corresponds to the Standard mode. Users can change the mode in the Horizon Delegate panel, subject to GitHub Copilot policies. See Administrator control and Horizon Delegate Group Policy Settings.

Approval requests

An approval request shows the action that Horizon Delegate wants to take and any warning that applies to it. The user can select one of the following options.

• Allow once
• Allow for this session
• Don't ask again in this workspace - This option is available only when a workspace folder is selected. The approval applies only to that folder, and it does not carry over when the user selects a different workspace folder.
• Deny

If the connection drops while an approval request is open, the request appears again when the user reconnects, including from another device. The action does not proceed until the user responds.

Administrator control

Administrators can control tool access in the following ways.

• Default permission mode group policy setting - Sets the tool access mode that Horizon Delegate uses by default. This setting is a default, not an enforced mode. If a user selects a mode in the Horizon Delegate panel, the user's saved selection takes precedence over this setting. See Horizon Delegate Group Policy Settings.
• GitHub Copilot managed permission policies - Permission policies that an administrator sets for GitHub Copilot are enforced by GitHub Copilot. The Horizon Delegate tool access mode and user approvals cannot override them. These policies can govern supported agent operations and can turn off the Allow all mode by using the permissions.disableBypassPermissionsMode managed setting. When Allow all is turned off, it appears as unavailable in the Horizon Delegate panel. If Allow all is turned off while a session uses it, Horizon Delegate changes the session to Standard.

For information about GitHub Copilot policies, see GitHub Copilot enterprise policies and GitHub Copilot organization policies in the GitHub documentation. For information about the setting that turns off Allow all, see Enterprise-managed settings now support bypass permission controls in the GitHub changelog.