Audience
IT, Security, and Operations administrators.
Goal
Launch a secure and governed Copilot Enterprise workspace that scales without creating policy debt.
5 steps to Copilot rollout
- Assess readiness: Check your organisation’s data, security, and compliance to prepare for Copilot.
- Assign Copilot licenses: Purchase and assign Copilot licences to eligible users.
- Validate app and network requirements: Ensure Microsoft 365 apps are updated and network settings support Copilot.
- Configure security and compliance: Set up sensitivity labels, DLP, auditing, and eDiscovery to protect data.
- Communicate policies and train users: Share AI guidelines, acceptable use policies, and provide training to all users.
Assess readiness
Run Copilot readiness report
How to do it:- Go to Microsoft 365 Admin Centre.
- Navigate to Reports > Usage > Microsoft 365 Copilot.
- Open the “Readiness” tab.
- First, review which users, apps, and environments are ready for Copilot.
- Then, review app and network compatibility for all users.
- Note any issues or ineligible users for follow-up.
Review data locations and permissions
How to do it:- Go to SharePoint Admin Centre and OneDrive Admin Centre.
- Run sharing and permissions reports.
- Identify overshared or sensitive content.
- Restrict access to sensitive data and archive outdated files.
- Document changes and confirm only appropriate users have access.
Check security and compliance controls
How to do it:- Go to Microsoft Purview Compliance Portal.
- Review which sensitivity labels are currently applied to confidential data.
- Check if Data Loss Prevention (DLP) policies are already active and working.
- Verify that auditing and eDiscovery features are enabled.
- Assess existing compliance policies to identify gaps before Copilot deployment.
Assign Copilot licenses
Confirm licensing eligibility
Where to go:- Microsoft 365 Admin Centre → Billing → Your products
- Check your current subscription (E3, E5, Business Standard, etc.).
- Confirm your plan is eligible for Copilot add-on.
- Reference: Copilot Licensing Guide
Purchase Copilot licenses
Where to go:- Microsoft 365 Admin Centre → Billing → Purchase services
- Search for “Copilot” in Purchase services.
- Select the Copilot licence add-on.
- Complete the purchase for the required number of users.
- Reference: Set Up Microsoft 365 Copilot and Assign Licenses
Assign licenses to users or groups
Where to go:- Microsoft 365 Admin Centre → Users → Active users
- Select the users or groups you want to assign Copilot licences to.
- Click “Manage product licences.”
- On the Licences and apps tab, check “Copilot for Microsoft 365.”
- Save changes and verify licence assignment.
- Reference: Assign a Copilot for Microsoft 365 license
Validate app and network requirements
Check Microsoft 365 app versions
Where to go:- Microsoft 365 Admin Centre → Health → Software updates
- Ensure Word, Excel, PowerPoint, Outlook, and Teams are updated to the latest versions.
- Reference: Copilot App Requirements
Confirm network and privacy settings
Where to go:- Microsoft 365 Admin Centre → Settings → Org settings → Services
- Verify network connectivity to Microsoft 365 endpoints.
- Ensure privacy settings allow Copilot features.
- Reference: Copilot Network Requirements
Configure security and compliance
Apply sensitivity labels and Data Loss Prevention (DLP)
Where to go:- Microsoft Purview Compliance Portal → Information protection → Labels & DLP
- Create and assign sensitivity labels to confidential data.
- Set up DLP policies to prevent unauthorised sharing or leaks.
- Reference:
Enable auditing and eDiscovery
Where to go:- Microsoft Purview Compliance Portal → Solutions → Audit & eDiscovery
- Turn on audit logging to track Copilot activity.
- Set up eDiscovery to find and manage Copilot-related data for compliance.
- Reference:
Review and update compliance policies
Where to go:- Microsoft Purview Compliance Portal → Policies → Compliance management
- Review existing compliance policies for Copilot use.
- Update retention, privacy, and access policies as needed.
- Reference: Microsoft 365 Copilot privacy and security
Communicate policies and train users
Share AI guidelines and acceptable use policies
Where to go:- SharePoint, Viva, or Teams
- Publish clear AI guidelines and acceptable use policies for Copilot.
- Make policies easily accessible to all users.
- Reference: Microsoft 365 Copilot adoption guide and overview for IT admins
All resources
Assess readiness
- Copilot Readiness Report Guide
- SharePoint Advanced Management
- Microsoft 365 Copilot privacy and security
Assign Copilot licenses
- Copilot Licensing Guide
- Set Up Microsoft 365 Copilot and Assign Licenses
- Assign a Copilot for Microsoft 365 license
Validate app and network requirements
Configure security and compliance
- Create and publish sensitivity labels
- Learn about data loss prevention
- Get started with auditing solutions
- Get started with eDiscovery
- Microsoft 365 Copilot privacy and security
Communicate policies and train users
- Microsoft 365 Copilot adoption guide and overview for IT admins
- Copilot Success Kit – Microsoft Adoption
- Get started with Microsoft 365 Copilot - Training
FAQ: Most commonly asked questions
Why can't I assign Copilot licences?
Why can't I assign Copilot licences?
Check if your subscription is eligible and you have enough licences. Only certain plans support Copilot. If not on an eligible plan, contact IT or procurement to upgrade your subscription before proceeding.
Copilot features are missing for some users. What should I do?
Copilot features are missing for some users. What should I do?
Make sure their Microsoft 365 apps are updated and they have the correct licence assigned.
Why is Copilot not installing?
Why is Copilot not installing?
Check app version, deployment settings, and network connectivity. Update apps if needed. If apps are old or internet blocks Microsoft, update Office to the newest version and allow Microsoft sites in your network settings.
How do I protect sensitive data with Copilot?
How do I protect sensitive data with Copilot?
Apply sensitivity labels and DLP policies in Microsoft Purview Compliance Portal before rollout.
What if users see confidential info they shouldn't?
What if users see confidential info they shouldn't?
Review and restrict permissions in SharePoint and OneDrive. Use sensitivity labels and access controls.
How do I track Copilot usage and compliance?
How do I track Copilot usage and compliance?
Enable audit logging and eDiscovery in Purview. Run usage and readiness reports regularly.
What if my organisation isn't on an eligible subscription?
What if my organisation isn't on an eligible subscription?
Contact IT or procurement to upgrade your plan before assigning Copilot licences.
How do I communicate policies to users?
How do I communicate policies to users?
Share guidelines and acceptable use policies via Teams, SharePoint, or email. Keep messages clear and simple. If users resist training, start with a small pilot group to show real productivity benefits.
What's the biggest risk to watch out for?
What's the biggest risk to watch out for?
Accidental data leaks from overshared files or incorrect permissions. Always review data access before rollout.
My security labels or DLP rules aren't working properly. What should I do?
My security labels or DLP rules aren't working properly. What should I do?
First check if labels are applied in the right order because priority matters. Then review policy settings in Microsoft Purview to fix conflicts. If you’re still unsure, ask your compliance officer for help before continuing rollout.
Who should I contact for help?
Who should I contact for help?
Reach out to your IT admin or Microsoft support if you encounter issues you can’t resolve.