Automation & AI · Microsoft Copilot
Copilot shows people anything they have permission to open. This checklist finds the overshared files first, then sets up licenses and a pilot that tells you something.
Copilot respects permissions, including bad ones
Clean up sharing before licenses
Pilot with five to ten people
30 minutes of data collection, your report the next day, yours to keep with no obligation. Or pick a time on the calendar below. Or call 954-539-5678.
The sales pitch for Copilot (Microsoft has lately dropped the “365” and now calls it Microsoft Copilot) is that it reads your email, chats and files and answers questions about them. That’s true, and it’s useful. The catch is in how it decides what to read. Microsoft’s own documentation says Copilot only surfaces data that each user already has at least view permission for. It doesn’t invent access. It simply uses the access you’ve already given people, and it’s extremely good at finding things.
So the payroll spreadsheet someone saved to a Teams site everybody can open, the HR folder shared with “People in your organization” in 2022, the partner’s bonus letter in a OneDrive folder with a company-wide link: those were always visible to staff. Nobody went looking. With Copilot, someone asks “what are the salary bands here?” and gets an answer, with a citation.
My view is simple: fix permissions first, then buy licenses. Here is the order I’d do it in.
Pick five to ten people in different roles: someone in finance, someone who writes proposals, a manager who lives in meetings, and one skeptic (every firm has one, and they’re useful). Give them licenses for at least six weeks, because the first two weeks are mostly people learning how to ask.
Worked example. Say a 30-person firm pilots with eight people. Ask each to keep a simple tally for a month: tasks where Copilot saved time, and roughly how many minutes. If the group averages two hours saved per person per week, that’s about eight hours a month each, which is easy to weigh against the monthly license price. If it averages twenty minutes, you have an answer too, and you’ve saved yourself 22 licenses. Also ask each person to note any time Copilot showed them something they were surprised they could see. Each of those is a permission to fix before you go wider.
If you’d like someone to look at your tenant before you commit, our free Technology Health Assessment covers AI opportunities alongside security and applications. It takes 30 minutes of data collection, and the report arrives the next day, yours to keep. Book a time here.
To be honest, for most small firms the permission clean-up is worth doing whether you buy Copilot or not. Overshared payroll files are a problem with or without AI; Copilot just shortens the time before somebody finds them. If the clean-up turns into a long job, your staff can use the free Copilot Chat with their work accounts in the meantime, which answers from the web rather than your files, and learn how to write a decent prompt.
When the permissions are sensible and the pilot shows real time saved, roll it out to the roles that benefit. The broader question of where Copilot fits is in Microsoft Copilot for business, and if you want help with the rollout and the automation that often follows, that’s part of our automation and AI work.
Book it now
Choose a slot that suits you. We’ll confirm by email, collect the data with you on the call, and send your report the next day. It’s free, and the report is yours to keep with no obligation.
Prefer to talk first? Call 954-539-5678, or send the form and we’ll contact you.
It will only show files they already have permission to open. Microsoft is clear on this point. The problem is that in many small tenants, permissions are far wider than anyone intended, through company-wide sharing links, sites open to everyone and old folders nobody locked down. Copilot makes those mistakes easy to find.
No. Microsoft lists Business Basic, Standard and Premium among the plans that can add Copilot. Premium does include tools that help with readiness, such as sensitivity labels and better device and access controls, so it’s worth considering for the people who handle sensitive files.
For a tidy tenant, a few days of work spread over two or three weeks. For a tenant with years of ad hoc sharing, longer. The permission review is most of the effort; licensing and the pilot are quick.
Copilot Chat with a work account is covered by Microsoft’s enterprise data protections, and in its basic form it answers from the web rather than your files. That makes it a reasonable place for staff to learn how to write prompts while you sort out permissions. Set an AI acceptable-use policy either way.
