Bite 1 / 7
Lesson 6.1

Assigning licences

You'll be able to Assign Copilot licences to a target cohort using the Microsoft 365 admin center.

Target whole teams

Assign Copilot licences in the Microsoft 365 admin center. Provision the user's Microsoft 365 licence first, then add Copilot. Target whole teams via an Entra security group, not scattered individuals.

Assigning licences

  1. Provision M365 — ensure the user has the base Microsoft 365 licence.
  2. Group — use the Entra security group for the cohort.
  3. Assign — add Copilot via the admin center (or PowerShell).
  4. Verify — use the Copilot License Details diagnostic to confirm.

Check what you know

Where do you assign Copilot licences?

Where do you assign Copilot licences?
Takeaway

Assign licences to whole teams via an Entra group in the admin center.

Lesson 6.2

Enabling security features at deploy time

You'll be able to Name the security actions to take as Copilot goes live.

Deploy-time guardrails

  1. Disable EEEU — turn off 'everyone except external users' at the tenant level.
  2. Proactive audit — enable Purview Audit for Copilot activity.
  3. Restricted Access Control — apply RAC to business-critical sites.
  4. Access reviews — start reviews on overshared sites.

Check what you know

Which is a deploy-time security action?

Which is a deploy-time security action?
Takeaway

Going live: disable EEEU, turn on audit, apply RAC, review overshared sites.

Lesson 6.3

Configuring the apps

You'll be able to Explain where Copilot becomes available across the Microsoft 365 apps.

Copilot across the apps

Once licensed and on a supported channel, Copilot appears across Teams, Outlook and the Office apps, plus the Copilot app and m365copilot.com. Confirm the apps are updated and Copilot is enabled.

Check what you know

Where does Copilot become available for a licensed user?

Where does Copilot become available for a licensed user?
Takeaway

Licensed and on a supported channel, Copilot shows up across Teams, Outlook and Office.

Lesson 6.4

Running the pilot

You'll be able to Run a structured pilot: select early adopters, validate configuration, gather feedback.

Pilot loop

  1. Select — early adopters from the first teams.
  2. Validate — confirm configuration and access behave as expected.
  3. Gather — collect structured feedback against the use cases.
  4. Refine — adjust before expanding to the next group.

Check what you know

What is the pilot mainly for?

What is the pilot mainly for?
Takeaway

Pilot to validate and learn — refine before the next group, not after.

Lesson 6.5

The Copilot Control System

You'll be able to Describe the Copilot Control System and its three pillars.

The governance surface

The Copilot Control System is where you manage Copilot and agents across the tenant. It has three pillars: security and governance, management controls (licensing, agent lifecycle, customisation), and measurement and reporting.

Three pillars

audit, retention, eDiscovery and compliance for Copilot and agents.

Check what you know

How many pillars does the Copilot Control System have?

How many pillars does the Copilot Control System have?
Takeaway

The Copilot Control System governs Copilot and agents across three pillars.

Lesson 6.6

Deploy then operate

You'll be able to Explain Microsoft's deploy-then-operate split for the data foundation.

Get live with guardrails, then govern

Microsoft's data-foundation guidance is deploy-then-operate: get Copilot broadly deployed with oversharing guardrails in place, then move into ongoing governance. Deployment is the start of operation, not the end of the project.

Check what you know

What does 'deploy then operate' mean here?

What does 'deploy then operate' mean here?
Takeaway

Deploy with guardrails, then operate — go-live is the start of the standing job.

Wrap-up

Sources & notes

Everything here traces to Microsoft Learn, retrieved June 2026.

Accuracy flags

  • No statistics are claimed in this stage.
Fonts (Anton, Archivo Black, Inter) stand in for the licensed LearningBites faces — swap before publishing. Microsoft's Copilot and agent surface changes monthly; re-verify before reuse.