In short
- Roll out Microsoft Copilot with a small pilot group, a handful of recurring tasks and a 90-day plan. Licensing everyone at once mostly produces scattered experiments.
- The key condition: sort out permissions in SharePoint and OneDrive first. Copilot shows each user everything that user can open, including files that are accidentally shared with the whole organisation.
- Set limits for agents that are billed per use, train people by role, and measure at 30, 60 and 90 days. Only then decide whether to expand.
How do you roll out Microsoft Copilot in your team without it turning into an expensive trial? Start small: a pilot group of people who do the same kind of work, three or four tasks where they save time straight away, and a fixed date to review. Hand out more licences after that, not before.
The step most organisations skip comes before the first licence. Copilot follows the permissions you already have. If a folder with salaries or quotes is open to the whole company by mistake, Copilot can use that content in an answer. Below are seven steps for the rollout, from permissions to measurement.
What does Copilot cost, briefly?
Chat and writing in Word, Excel, PowerPoint, Outlook and Teams come with a fixed licence per user. Work you hand to agents, such as Cowork, is paid per use in Copilot Credits. How that works and which settings to configure is covered in What will Microsoft Copilot cost now that agents are billed per use?
Rolling out Copilot in seven steps
Microsoft's adoption guide splits a rollout into five phases: plan, implement, adopt, manage and improve. The steps below follow that outline, adapted for a small or mid-sized organisation without a dedicated adoption team.
1. Get SharePoint and OneDrive permissions in order
According to Microsoft, Copilot only surfaces organisational data "to which individual users have at least view permissions" (Microsoft Learn). Copilot does not give anyone new access. It does expose what has been shared too widely. This is called oversharing: files that more people can open than need to, often through a link shared with "everyone in the organisation".
What to do:
- Run the data access governance reports in the SharePoint admin centre. They show, among other things, sites with broad permissions and heavily used sharing links.
- Check your default sharing link. Microsoft notes that SharePoint defaults to the most permissive option (Microsoft Learn).
- Use Restricted Content Discovery for sensitive sites. That keeps the content out of Copilot and organisation-wide search, while leaving the site's permissions unchanged.
Microsoft says the SharePoint Advanced Management tools are included with the Copilot licence (Microsoft Learn, blueprint). Give the clean-up to someone who knows the folders, not to IT alone.
2. Pick a pilot group that shares the same work
Microsoft recommends starting with users who share a process or department and are willing to go first. That beats ten enthusiasts from ten departments: people doing the same work can swap examples and prompts, and you can compare their results.
For a smaller organisation, ten to twenty people is a workable size, with one colleague as the point of contact (Microsoft calls this a champion).
Everyone without a licence already has Copilot Chat. It is included with a Microsoft 365 subscription, but without a Copilot licence it cannot reach users' mail, calendar or files; people can still upload a file themselves (Microsoft Learn). So include that group in your rules on what may and may not go in.
3. Start with tasks that save time immediately
Don't give the pilot group an open brief like "just try it". Choose three or four tasks that come up every week:
- Outlook: summarise a long email thread and draft a first reply.
- Teams meetings: a summary with action points. Note that under the default policy, Copilot in meetings only works if a transcript is saved. An admin can also allow a during-the-meeting-only option without a saved transcript. Every participant who uses Copilot needs a licence (Microsoft Learn).
- Word: a first draft of a recurring document, such as a proposal or report, based on an existing example.
- Excel: ask questions about a table and have it build a formula or summary. Always check the result yourself.
Record how long each task takes today. Without that baseline, there is nothing to compare against at 90 days.
4. Set limits before anyone uses agents
Agents such as Cowork, and advanced work in SharePoint and OneDrive, are billed per use. In the Microsoft 365 admin centre, set an organisation-level and a per-user limit, and scope the policy to the pilot group. Turn off "Auto-apply new services". It is on by default, which means new Microsoft agents can start using credits automatically (Microsoft Learn).
If you also use Dynamics 365 or Power Apps, keep an eye on Work IQ. It has been in preview since 30 September and lets Copilot and agents work with your sales and customer data, within the user's permissions (Microsoft). The Work IQ API is billed in Copilot Credits. Leave it out of a first pilot.
5. Run Copilot training by role and agree the rules
A licence is not training. The EU AI Act requires every organisation that uses AI, even if it is only Copilot, to take measures that support its staff's AI literacy. How to approach and document that is explained in AI literacy in your organisation.
For a Copilot pilot, that means:
- A short baseline for everyone: what Copilot can see, why you check its answers, what must not go in.
- A hands-on session for the pilot group: practising on their own tasks from step 3, not on demo examples.
- One page of rules: which tools, which data and who checks the output. There is a template in Using AI safely.
- A place to share: a Teams channel where the group posts useful prompts and mistakes.
You don't have to build the baseline yourself. Microsoft's Copilot Skilling Center offers free training material by role, including for leaders, champions, IT admins and business users. It does not replace the hands-on session with your own tasks, which is what our Copilot training is for.
Keep a record of who has had which training. That is your evidence under the AI Act.
6. Measure at 30, 60 and 90 days
Microsoft gives no fixed timeframes. We suggest three checkpoints:
| When | What you look at |
|---|---|
| 30 days | Is everyone using it? Where do people get stuck? |
| 60 days | Time per task against the baseline |
| 90 days | Expand, adjust or stop |
There are two sources for the numbers. The usage report in the Microsoft 365 admin centre shows active users, usage by app and the most used agents (Microsoft Learn). The Copilot Dashboard in Viva Insights can be viewed without an extra licence. With fewer than 50 Copilot licences you see readiness, adoption and impact; benchmarks and survey results need 50 or more (Microsoft Learn).
Microsoft itself notes that Copilot is unlikely to be the only cause of changes in those numbers. So ask the pilot group too: which tasks are faster, and which are not?
7. Expand only after a decision
After 90 days you know which tasks save time and what the agents cost. Then expand department by department, in the same order: permissions, tasks, training, measurement.
When is Copilot not the obvious choice?
Copilot is strong when your team works in Outlook, Word, Excel and Teams and its documents live in SharePoint. If the work mostly happens outside Microsoft 365, in a CRM, Google Drive or separate systems, Copilot has little to work with. ChatGPT or Claude often fit better then, or a mix: Copilot for office work, a second tool for long analyses or coding. How to make that choice is covered in ChatGPT, Claude or Copilot for your team.
If your SharePoint permissions are a mess and you have no time to tidy them, hold off on broad licensing. Copilot will surface that problem faster.
Where to start this week
Run the data access governance reports and choose the department for your pilot. With that group, write down three tasks and how long they take today. In 90 days you can then show what Copilot delivers.
Sources
- Microsoft Learn, Data, Privacy, and Security for Microsoft Copilot, updated 18 August 2026
- Microsoft Learn, Microsoft Copilot deployment blueprint: oversharing, updated 18 August 2026
- Microsoft Learn, Get ready for Microsoft Copilot with SharePoint Advanced Management, updated 18 August 2026
- Microsoft Adoption, The essential guide to Microsoft 365 Copilot adoption: Plan, accessed 15 October 2026
- Microsoft Adoption, Microsoft Copilot Skilling Center, accessed 15 October 2026
- Microsoft Learn, Frequently asked questions about Copilot Chat, updated 18 August 2026
- Microsoft Learn, Manage Microsoft Copilot in Teams meetings and events, updated 11 August 2026
- Microsoft Learn, Usage-based billing and cost management for Copilot Credits, updated 2 October 2026
- Microsoft, Work IQ: business and workplace intelligence in the flow of work, 25 September 2026
- Microsoft Learn, Microsoft Copilot reports for admins, updated 17 September 2025
- Microsoft Learn, Microsoft Copilot Dashboard, updated 29 September 2026
