Skip to content

Non-interactive sessions bypass disableBypassPermissionsMode managed setting #4528

Open

Description

@im-aIex

Describe the bug

Non-interactive (-p / --prompt) with --allow-all / --yolo grant permissions automatically even when .github-private/copilot/managed-settings.json is configured with:

{
  "permissions": {
    "disableBypassPermissionsMode": "disable"
  }
}

Attempting to run /allow-all / /yolo within the interactive shell correctly states:

Bypass permissions mode has been disabled by policy. Contact your administrator for more information.

Affected version

1.0.80

Steps to reproduce the behavior

  1. Configure "disableBypassPermissionsMode": "disable".
  2. Pass --yolo -p {prompt} to copilot CLI.

Expected behavior

yolo mode is ignored and tool calls are denied.

Additional context

No response

Activity

  1. added theissue type on Aug 19, 2026
  2. added
    area:enterpriseGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settings
    area:non-interactiveNon-interactive mode (-p), CI/CD, ACP protocol, and headless automation
    area:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions
    and removed on Aug 20, 2026
  3. patniko commented on Oct 26, 2026

    @patniko
    Collaborator

    Thanks for the report. We've shipped fixes in this area since this was filed (most recently in Copilot CLI v1.0.87), and we believe this may now be resolved. Could you retest on the latest release (Copilot CLI v1.0.103) and let us know whether you still see it? If we don't hear back in a couple of weeks, we may close this issue — you can always reopen it.

    Triaged as part of a Copilot SDK backlog review, with help from GitHub Copilot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:enterpriseGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settingsarea:non-interactiveNon-interactive mode (-p), CI/CD, ACP protocol, and headless automationarea:permissionsTool approval, security boundaries, sandbox mode, and directory restrictionsmore-info-needed

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions