Get started with Microsoft Copilot for Microsoft 365

Microsoft Copilot for Microsoft 365 is an AI-powered productivity tool that uses large language models (LLMs) and integrates your data with the Microsoft Graph and Microsoft 365 Apps. It works alongside popular Microsoft 365 Apps such as Word, Excel, PowerPoint, Outlook, Teams, and more. Copilot provides real-time intelligent assistance, enabling users to enhance their creativity, productivity, and skills. This article covers how you can prepare your organization for Copilot. These steps can be thought of in three primary phases:

  1. Optimizing for Search
  2. Update channels and apps
  3. Provision Copilot licenses

Before you begin

Before you can access Copilot, you must meet these requirements:

You must have one of the following subscription plans to purchase Microsoft Copilot for Microsoft 365. You can purchase Copilot for Microsoft 365 licenses through the Microsoft 365 admin center on the Purchase Services page, Microsoft partners, or Microsoft account team. You can purchase as many Copilot for Microsoft 365 licenses as you have prerequisite licenses.

Your users must have one of the following base licenses to be eligible for a Copilot for Microsoft 365 license. Prerequisite licenses include:

  • Microsoft 365 E5
  • Microsoft 365 E3
  • Microsoft 365 F1
  • Microsoft 365 F3
  • Office 365 E1
  • Office 365 E3
  • Office 365 E5
  • Office 365 F3
  • Microsoft 365 Business Basic
  • Microsoft 365 Business Premium
  • Microsoft 365 Business Standard
  • Microsoft 365 A5 for faculty*
  • Microsoft 365 A3 for faculty*
  • Office 365 A5 for faculty*
  • Office 365 A3 for faculty*

*Available via Enrollment for Education Solutions (EES) or Cloud Solution Provider only.

Note

Customers with Education or Business subscriptions that do not include Teams can still purchase Copilot for Microsoft 365 licenses.

Microsoft Copilot for Microsoft 365 provides the ability for users to find and access their content through natural language prompting. Copilot ensures data security and privacy by adhering to existing obligations and integrating with your organization's policies. It utilizes your Microsoft Graph content with the same access controls as other Microsoft 365 services. To get the most out of Copilot, you should consider optimizing data and content for Search, to ensure optimal secure access. To learn more about privacy with Microsoft Copilot for Microsoft 365, see Data, Privacy, and Security for Microsoft Copilot for Microsoft 365.

Applying principles of Just Enough Access

From the SharePoint admin center, you can review SharePoint site access to check permissions and access to ensure data is secure, prioritizing sites that contain sensitive information.

Screenshot showing the SharePoint admin center active sites panel.

You can check on site privacy by going to Active Sites, then selecting a site, and going to Settings. Setting a site as Private means that only users in your organization with access to the site will find it. You can also review access under the Membership tab, as well as site owners, members, and visitors.

Note

A helpful strategy to balance effort and maximizing impact is to establish a data definition for sensitivity and consider prioritizing the review of SharePoint sites, focusing first on the most critical repositories, then deploying licenses to users and piloting Copilot and implementing a process to iterate through the rest of your repositories in parallel with expanding user base. This provides a consistent loop of feedback from users to continually refine access without delaying deployment. Jump to the deployment section below for a more detailed strategy to deploy and drive adoption.

With an eligible license, you can set up auto-classifiers for content on a SharePoint site by going to the site, selecting the Settings icon on the top right, going to Library Settings, and adjusting default sensitivity labels. This feature ensures that content created or edited inherits this label. Content that is moved to the site without appropriate labels will trigger a notification.

Copilot and multiple account access

Copilot features for Excel, Word, PowerPoint, and OneNote will work seamlessly for users who have multiple Microsoft accounts (work/school account or personal account) signed into a single Windows session when one of those accounts has a Copilot Pro or Copilot for Microsoft 365 license assigned. For example, when a user on their work machine with a Copilot for Microsoft 365 license opens a document from their personal OneDrive, they'll be able to use Copilot in the document. Or when a Copilot Pro user signs in on their work device with their Microsoft account (MSA), they'll be able to use Copilot with Office files stored on their OneDrive or in SharePoint document libraries.

As an admin, you can turn off a user's ability to add a Microsoft account to their work device, which prevents these users with Copilot Pro from being able to see Copilot features with their Microsoft 365 apps on their work device. For steps on how to do this, see Set up tenant restrictions. You'll need to set up tenant restriction policies for each of the Microsoft 365 apps.

If you'd like to prevent Entra IDs from your tenant being used on non-managed machines which may have access to Copilot, you can use Conditional Access to prevent access to tenant resources on non-compliant devices.

Note

In sovereign tenants where Copilot for Microsoft 365 is not available, even if a device has multiple accounts signed in and one of those accounts has Copilot, users will still be blocked from using Copilot features.

Configure advanced policies with Microsoft Purview

Screenshot showing the Microsoft Purview screen for sensitivity labels.

In the Microsoft Purview compliance portal, you can create sensitivity labels by navigating to the Labels tab to customize policies to best fit your data sensitivity classifications. You can also configure auto-labeling by navigating the Auto-labeling menu on the left navigation, under Information protection. Select a label or create a new label policy, and configure protections for content that has the label applied.

These labels can also be applied based on content found within documents using data loss prevention (DLP) policies. These policies allow labels to be automatically applied when specific types of content are identified in a document, for example, personally identifiable information like addresses, tax information or passport numbers. You can also DLP policies to trainable classifiers that identify categories of content like source code, financial documents, HR and more. You can also set up endpoint DLP policies that would restrict users from actions like copying content to clipboard or removable USB devices or printing.

Audit Copilot activity in Microsoft Purview

All activity from Copilot for Microsoft 365 can be discoverable using content search in the Microsoft Purview portal for audit and review. From the Microsoft Purview portal, you can initiate an audit from the Audit tab on the left navigation. You can also apply retention policies to retain content in prompts and responses based on your organization requirements. eDiscovery and communication compliance policies are also supported for Copilot for Microsoft 365 activity through the Purview portal, allowing you to set up flags for any content matches policies configured. For example, you can set up a policy to flag for activity that includes specific words or code names.

For more information on data security and compliance configurations using Microsoft Purview, see Microsoft Purview data security and compliance protections for Microsoft Copilot.

Review your privacy settings for Microsoft 365 Apps because those settings might have an effect on the availability of Microsoft Copilot for Microsoft 365 features. For more information, see Microsoft Copilot for Microsoft 365 and policy settings for connected experiences.

Update channels

Microsoft Copilot for Microsoft 365 will follow Microsoft 365 Apps' standard practice for deployment and updates, being available in all update channels, except for Semi-Annual Enterprise Channel. Preview channels include Current Channel (Preview) and Beta Channel. Production channels include Current Channel and then Monthly Enterprise Channel. Preview channels are a great option to validate the product before rolling out to the rest of organization. To learn more, see Overview of update channels, and Microsoft 365 Insider channels.

We recommend Current Channel, because it provides your users with the newest Microsoft 365 app features as soon as they're ready and provides the best experience for a fast-moving product like Copilot for Microsoft 365. If you need more predictability of when these new Microsoft 365 app features are released each month, we recommend Monthly Enterprise Channel.

There are multiple ways you can manage channels for user devices. To learn more, see Change update channel of Microsoft 365 to enable Copilot.

Provision Copilot for Microsoft 365 licenses

After you’ve prepared your organization for Copilot, you can manage Microsoft Copilot for Microsoft 365 licenses from the Microsoft 365 admin center. You can assign licenses to individual users or to groups of users, as well as reassign licenses to other users.

To access license management in the Microsoft 365 admin center, go to Billing > Licenses.

You can also assign licenses in bulk to groups of users through the Azure admin center or assign licenses to users with PowerShell. For more information, see Assign Microsoft 365 licenses to users.

To learn more about the steps to deploy Copilot for your organization, see Enable users for Microsoft Copilot for Microsoft 365.

Configure settings for Copilot

As an admin, you can manage Microsoft Copilot experiences for your organization by using the controls available in the Microsoft 365 admin center. You can view the status of Copilot license assignments, access the latest information on Copilot, manage data security and compliance controls, submit feedback on behalf of users, configure plugins and permissions, and enable the use of web data as grounding data in Copilot.

You can manage these settings by using the Copilot page in the Microsoft 365 admin center. To learn more, see Manage Microsoft Copilot for Microsoft 365 with the Copilot page.

Plan for deployment and measure adoption, impact, and sentiment

The myriad uses of Copilot for Microsoft 365 across the various Microsoft 365 apps provides opportunities for users to find value in different ways.

Accelerating adoption to get to value

We recommend approaching adoption of Copilot by leveraging adoption. To do so:

  1. Identify users across various business groups in your organization, ideally with high usage of existing Microsoft 365 features. You can identify these users by reviewing usage metrics in the Microsoft 365 admin center.

  2. Assign these users Copilot for Microsoft 365 licenses and onboard them using the resources available on Microsoft’s adoption hub, including the user onboarding kit.

  3. As these users get more comfortable with using Copilot, they should be able to speak to how they use it best, and where it’s most valuable for them. This provides you with product champions that can help other users adoption Copilot across your organization.

With your established community of early adopters or Champions, they can better speak to their peers within their organization and contextualize the value of Copilot to best suit their needs. This framework also provides IT departments with a scalable way to handle questions through Champions, developing a team of experts across your organization. To learn more about driving adoption, visit the Microsoft Copilot adoption hub.

The Microsoft Copilot Dashboard (Preview) from Viva Insights helps organizations maximize the value of Copilot for Microsoft 365 by providing organizational leaders and IT decision makers insights into readiness, adoption, impact, and user sentiment.

Access the Microsoft Copilot Dashboard (Preview) from Viva Insights here.

Review this article to learn more about the Microsoft Copilot Dashboard (Preview) from Viva Insights.

More resources