Set up your Microsoft tenant for Copilot Managed Runtime
A Microsoft IT admin must approve the Lovable enterprise app in Microsoft Entra and enable external app deployments in Power Platform. This one-time configuration allows team members to deploy Lovable apps into your organization through Copilot Managed Runtime.
A Microsoft tenant IT admin who needs to enable organization members to publish Lovable apps to Microsoft Copilot Managed Runtime.
Do this, in order
- 1
In the Microsoft Entra admin center, find and add the enterprise application named Lovable managed apps.
This connects Lovable to your organization's directory so builders can sign in with their corporate accounts.
- 2
Select Consent on behalf of your organization and accept the requested permissions, or run the admin consent URL with your tenant ID.
Granting organization-wide consent prevents individual builders from being blocked by approval requests when they connect.
- 3
In the Power Platform admin center, go to your environment group rules and turn on Allow external artifact deployment.
Lovable compiles applications outside of Microsoft, so environments must be explicitly allowed to accept external code.
- 4
Allow builders to create their own developer environments or give them a specific Environment ID to target.
Published apps need an assigned Microsoft environment to live and run in.
- 5
In Lovable workspace settings under Connectors, open Admin settings, select App + chat connectors, and set Microsoft Copilot Managed Runtime to Admins or Editors & admins.
The connector remains disabled in Lovable workspaces until an admin grants permission to create connections.
Words decoded
- Microsoft Entra
- Microsoft's cloud identity service that manages user accounts, passwords, and app access for an organization.
- Tenant
- Your company's private, dedicated slice of Microsoft cloud services.
- Admin consent
- An IT manager's one-time approval that authorizes an app to work for everyone in the company.
- Power Platform environment
- A secure container inside Microsoft that holds, manages, and executes an organization's apps and data.
- User-delegated permissions
- Access rights where an app acts strictly on behalf of the signed-in user, never doing more than that person is allowed to do.
Where people get stuck
- Choosing Lovable SSO instead of Lovable managed apps in Microsoft Entra, which only configures login for Lovable instead of the Copilot connector.
- Failing to check Consent on behalf of your organization, causing builders to see 'Needs admin approval' errors at sign-in.
- Skipping the Allow external artifact deployment rule in Power Platform, which blocks apps from publishing.
- Leaving the connector permission set to No one in Lovable admin settings, which hides it from team members.
- Corporate network firewalls or proxies inspecting TLS traffic, which can silently break the embedded app preview.
The short version, steps, decoder and prompt on this page are written automatically from Lovable's own documentation and can lag or misread it. The official page is always the authority.