Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
[This article is prerelease documentation and is subject to change.]
Important
- You need to be part of the Frontier preview program to get early access to Microsoft 365 Copilot Cowork. Frontier connects you directly with Microsoft's latest AI innovations. Frontier previews are subject to the existing preview terms of your customer agreements. As these features are still in development, their availability and capabilities may change over time.
- If Cowork isn't visible in Microsoft Admin Center Agent management, ensure that the admin account is also enrolled in Frontier (Copilot -> Settings -> Frontier).
- This is a preview feature.
- Preview features may have restricted functionality. These features are available before an official release so that customers can get early access and provide feedback.
- For more information, go to our Microsoft Product Terms.
Microsoft 365 Copilot Cowork is available to all Microsoft 365 Copilot tenants. IT administrators can control who has access to it, deploy it on behalf of users, and pin it in the Copilot experience using the same governance tools in Microsoft 365 Copilot.
Default availability
By default, Cowork is available to all licensed users in your tenant. This means:
- You can discover and install it yourself from the Agent Store.
- It's not pre-installed or pre-pinned for you—no action is required to enable it.
- If you don't want to use it, you can simply leave it uninstalled.
Admins can change this default at any time.
How to find and install Cowork
You can discover Cowork through the Agent Store, the built-in marketplace within Microsoft 365 Copilot.
In Microsoft 365 Copilot (web or desktop):
- Open Microsoft 365 Copilot.
- In the left navigation pane, select All agents under the Agents header.
- Search for Cowork and select Add.
In Microsoft Teams:
- In the right navigation pane, select Open Agents and bots.
- Search for Cowork and select Add.
Once you add it, Cowork appears in your list in the Copilot rail.
Note
You can only install Cowork if your organization makes it available to you. If you restrict access to specific groups, only those users see it in the Agent Store.
Learn more about how users interact with Cowork in Use agents in Microsoft 365 Copilot.
Control access with the Microsoft 365 admin center
You manage Cowork the same way you manage any agent, through the Microsoft 365 admin center.
Navigation: admin.microsoft.com > Copilot > Agents > All agents.
From there, find Cowork and select it to manage its settings. The key availability controls are:
| Setting | Effect |
|---|---|
| Available to all users | All licensed Copilot users in your tenant can find and install Cowork (default). |
| Available to specific users or groups | Only the users or security groups you specify can find and install Cowork. |
| Blocked | No users in your tenant can access Cowork. |
To restrict access to specific security groups or user segments, select Available to specific users or groups and add the relevant groups. This approach works best for phased rollouts or departmental pilots.
Note
Country or region-based scoping isn't a supported option for agent availability. Use security groups to represent geographic or organizational segments.
Get a full walkthrough of these controls in Manage agents in the Microsoft 365 admin center.
Pre-install Cowork for your users
Instead of waiting for users to install Cowork themselves, admins can deploy it on behalf of all users or a specific group. Deploying an agent automatically installs it, and users don't need to take any other action.
To deploy Cowork:
- In the admin center, select Copilot > Agents > All agents.
- Select Cowork.
- Under Deploy to, select Entire organization or Specific users/groups.
- Select Deploy.
When you deploy Cowork, it's installed for the target users and appears in their list. The deployment process accepts users' permissions on their behalf.
Learn more in Deploy agents in Microsoft 365 Copilot.
Pre-pin Cowork in the Copilot rail
Pinning makes Cowork persistently visible in the Copilot rail (the right-side panel) without the user needing to open the store. Pinning is a separate step from deployment—an agent must be deployed before it can be pinned.
To pin Cowork for your users:
- In the admin center, select Copilot > Agents > Manage pinned agents.
- Select Add a pinned agent > Cowork.
- Choose whether to pin it for the entire organization or specific groups.
- Save your changes.
You'll see Cowork in the Copilot rail the next time you open Copilot. If you prefer, you can unpin admin-pinned agents from your own view.
Learn more in Manage pinned agents for Microsoft 365 Copilot.
Manage plugins
Cowork supports plugins from the Microsoft 365 App Store that add skills and connectors to extend what Cowork can do. As an admin, you control which plugins are available, how they're deployed, and who can use them.
For the full admin guide on plugin deployment, availability controls, connector authentication, and monitoring, see Manage plugins for Cowork.
Microsoft Agent 365 integration
Cowork integrates with Agent 365 to provide access to Dynamics 365 services through plugin connectors. When a user connects a Dynamics 365 plugin (such as Dynamics 365 Customer Service or Dynamics 365 Sales), Cowork communicates with Agent 365 to route requests to the appropriate environment.
As an admin, you don't need to configure Agent 365 separately. The integration uses the same Microsoft Entra ID authentication that your Dynamics 365 environments already rely on. Users select their target environment during the plugin connection flow.
Note
Agent 365 connectivity requires that users have appropriate Dynamics 365 licenses and permissions in the target environment.
Security and compliance
Microsoft 365 Copilot applies the same security and compliance controls to Cowork as it does to all agents.
Data loss prevention
Microsoft Purview DLP policies apply to Copilot agent interactions. Copilot agents, including Cowork, block sensitive information from being processed. This sensitive information includes content that matches DLP rules or documents with sensitivity labels. Learn more in Learn about the Microsoft 365 Copilot location for DLP.
Audit logs
Microsoft Purview audit logs capture all interactions with Cowork under Copilot activities. Log entries include the agent name, agent ID, and version. Audit Standard provides these logs at no extra cost. Learn more in Audit log activities for Microsoft 365 Copilot.
Data residency
By default, Cowork stores conversation content in your tenant's local region geography. It also supports Advanced Data Residency (ADR) and Multi-Geo configurations. Learn more in Data residency for Microsoft 365 Copilot.