🗺️ Course Module Map

🏠 Module 1: Microsoft 365 Copilot Admin Overview

Microsoft 365 Copilot is an AI assistant that combines the power of Large Language Models (LLMs) with your organisation’s data in Microsoft Graph. Every prompt is grounded in the data the signed-in user already has permission to access — Copilot does not give users access to content they couldn’t already reach; it simply makes existing access faster and more intelligent.

Where Copilot Is Managed

Copilot Product Family — Disambiguation

🏗 Module 2: Licensing & User Enablement

Microsoft 365 Copilot requires a Microsoft 365 Copilot add-on licence assigned on top of an eligible base Microsoft 365 or Office 365 licence. The base licence must be M365 Business Premium, E3, E5, F3, or equivalent — Copilot is not available as a standalone purchase without an eligible base plan.

Microsoft 365 Copilot Prerequisites

Connect-MgGraph -Scopes "User.ReadWrite.All","Directory.ReadWrite.All"

# Get the Microsoft 365 Copilot SKU and available seat count
Get-MgSubscribedSku | Where-Object {$_.SkuPartNumber -like "*COPILOT*"} |
  Select-Object SkuId,SkuPartNumber,ConsumedUnits,@{N="Available";E={$_.PrepaidUnits.Enabled - $_.ConsumedUnits}} |
  Format-Table -AutoSize

# Assign Copilot licence to a user
$CopilotSkuId = (Get-MgSubscribedSku | Where-Object {$_.SkuPartNumber -eq "Microsoft_365_Copilot"}).SkuId
$UserId = (Get-MgUser -Filter "UserPrincipalName eq 'pilot@contoso.com'").Id

Set-MgUserLicense -UserId $UserId `
  -AddLicenses @{SkuId = $CopilotSkuId} `
  -RemoveLicenses @()
Write-Host "Copilot licence assigned."

# Get all users with Copilot licence
Get-MgUser -All -Property DisplayName,UserPrincipalName,AssignedLicenses |
  Where-Object {$_.AssignedLicenses.SkuId -contains $CopilotSkuId} |
  Select-Object DisplayName,UserPrincipalName |
  Format-Table -AutoSize

🔒 Module 3: Data Security & Privacy Controls

The most important thing for administrators to understand about Microsoft 365 Copilot’s data model is that Copilot only accesses data the user already has permission to see. It uses the user’s own identity and permissions when querying Microsoft Graph — Copilot does not have elevated privileges and cannot access content the signed-in user cannot access through normal M365 experiences.

How Copilot Accesses Data — The Permission Model

💻 Module 4: Copilot in Microsoft 365 Apps

Microsoft 365 Copilot is embedded directly into the desktop and web versions of the core Microsoft 365 apps. Each app provides Copilot capabilities specific to that app’s context — drafting in Word, data analysis in Excel, presentation generation in PowerPoint, email summarisation in Outlook, and meeting intelligence in Teams.

Copilot Capabilities Per App (2025–2026)

Connect-MgGraph -Scopes "OrgSettings.ReadWrite.All","Reports.Read.All"

# Get Copilot usage report (last 28 days)
Invoke-MgGraphRequest -Method GET `
  "https://graph.microsoft.com/beta/reports/getMicrosoft365CopilotUsageUserDetail(period='D28')" `
  -OutputFilePath "CopilotUsageReport.csv"
Write-Host "Copilot usage report exported."

# Get per-app active user counts for Copilot
$Summary = Invoke-MgGraphRequest -Method GET `
  "https://graph.microsoft.com/beta/reports/getMicrosoft365CopilotUsageSummary(period='D28')"
$Summary.value |
  Select-Object ReportDate,
    WordAiAssistanceEngagedUserCount,
    ExcelAiAssistanceEngagedUserCount,
    OutlookAiAssistanceEngagedUserCount,
    TeamsAiAssistanceEngagedUserCount |
  Format-Table -AutoSize

# Count all Copilot-licensed users in the tenant
$CopilotSkuId = (Get-MgSubscribedSku | Where-Object {$_.SkuPartNumber -like "*Copilot*"}).SkuId
$Licensed = Get-MgUser -All -Property DisplayName,AssignedLicenses |
  Where-Object {$_.AssignedLicenses.SkuId -contains $CopilotSkuId}
Write-Host "Total Copilot-licensed users: $($Licensed.Count)"

💬 Module 5: Microsoft 365 Copilot Chat

Microsoft 365 Copilot Chat (formerly Microsoft 365 Business Chat / BizChat) is the cross-app AI assistant available at m365.cloud.microsoft and within Microsoft Teams — it provides a unified conversational AI experience grounded in the user’s entire M365 data estate including emails, files, Teams messages, calendar, and connected Graph data.

Copilot Chat Key Capabilities

📁 Module 6: SharePoint & Content Management for Copilot

Copilot’s ability to surface SharePoint content depends on the Microsoft 365 semantic index (formerly the BING enterprise semantic index) — which crawls and understands all SharePoint content the user can access. Admins can restrict Copilot’s SharePoint content access at the site level using SharePoint Advanced Content Search (SACS) — marking specific sites as excluded from Copilot search while keeping them accessible in SharePoint itself.

Connect-SPOService -Url "https://contoso-admin.sharepoint.com"

# Exclude a sensitive site from Copilot semantic index
Set-SPOSite -Identity "https://contoso.sharepoint.com/sites/ConfidentialLegal" `
  -IsDataAccessRestricted $true
Write-Host "Site excluded from Copilot semantic index."

# Get all sites currently restricted from Copilot
Get-SPOSite -Limit All |
  Where-Object {$_.IsDataAccessRestricted -eq $true} |
  Select-Object Url,Title |
  Format-Table -AutoSize

# Pre-rollout sharing audit: sites with external sharing enabled
Get-SPOSite -Limit All |
  Where-Object {$_.SharingCapability -ne "Disabled"} |
  Select-Object Url,Title,SharingCapability,StorageUsageCurrent |
  Export-Csv -Path "SiteSharingAudit.csv" -NoTypeInformation

🤖 Module 7: Copilot Studio

Microsoft Copilot Studio (copilotstudio.microsoft.com) is the low-code platform for building custom AI agents — declarative agents that can be embedded in Microsoft 365 Copilot, deployed as standalone bots in Teams, or published to websites. It replaces the older Power Virtual Agents product.

Copilot Studio Agent Types

📊 Module 8: Agents & Extensions

Microsoft 365 Copilot can be extended with first-party Microsoft agents, third-party agents from the M365 app marketplace, and custom agents built in Copilot Studio. Graph connectors bring external data into the M365 semantic index, making it available to Copilot alongside native M365 content.

Agent & Extension Types

📊 Module 9: Adoption & Usage Analytics

The Microsoft Copilot Dashboard (available in Viva Insights and the Microsoft 365 Admin Center) is the primary tool for measuring Copilot adoption — tracking active users, per-app usage rates, and self-reported productivity sentiment from users who respond to Copilot usage surveys.

Copilot Adoption Maturity Model

🔒 Module 10: Information Protection & Copilot

Microsoft Purview information protection capabilities apply to Copilot interactions — ensuring that sensitive data is protected when users interact with AI. Sensitivity labels applied to files are honoured by Copilot — Copilot will label outputs based on the most restrictive label of the source content referenced.

Connect-IPPSSession -UserPrincipalName admin@contoso.com

# Search audit log for all Copilot interaction events (last 7 days)
Search-UnifiedAuditLog `
  -StartDate (Get-Date).AddDays(-7) `
  -EndDate (Get-Date) `
  -RecordType CopilotInteraction `
  -ResultSize 5000 |
  Export-Csv -Path "CopilotAuditLog.csv" -NoTypeInformation
Write-Host "Copilot audit log exported."

# Count Copilot interactions per user (last 30 days)
Search-UnifiedAuditLog `
  -StartDate (Get-Date).AddDays(-30) `
  -EndDate (Get-Date) `
  -RecordType CopilotInteraction `
  -ResultSize 5000 |
  Group-Object UserIds |
  Select-Object Name,Count |
  Sort-Object Count -Descending |
  Format-Table -AutoSize

🧠 Module 11: Purview AI Hub & Data Security Posture

The Microsoft Purview AI Hub (purview.microsoft.com → AI Hub) provides a dedicated dashboard for monitoring and governing AI-related data risks in your tenant — specifically focused on Microsoft 365 Copilot and Azure OpenAI Service usage.

AI Hub Key Capabilities

🎓 Module 12: Certification & Readiness Alignment

📚 References

• 🔗 Microsoft 365 Copilot Overview — Microsoft Learn
• 🔗 Copilot Data Privacy & Security — Microsoft Learn
• 🔗 Adopt Microsoft 365 Copilot — Microsoft Learn
• 🔗 Microsoft Copilot Studio — copilotstudio.microsoft.com
• 🔗 Microsoft 365 Admin Center → Copilot — admin.microsoft.com