A manufacturing CFO in Troy sat across the table from me last October, furious. His team had turned on 45 Microsoft 365 Copilot licenses the week prior. Within forty-eight hours, an entry-level logistics coordinator typed a casual prompt into Word and pulled up an unredacted spreadsheet containing executive compensation, bonus structures, and pending severance packages.
The software didn't hack anything. It didn't break through a firewall. It simply indexed a SharePoint folder that an HR manager had marked "Anyone with the link can view" back in the summer of 2021.
That is the reality of Microsoft 365 Copilot. The sales pitch from Redmond makes it sound like magic you flip on with a company credit card. In practice, turning it on inside an uncleaned tenant is the fastest way to expose every lazy permissions decision your managers have made over the last decade.
The Base Licensing Math Nobody Mentions
Copilot costs $30 per user per month as an add-on. It is billed annually at $360 per seat. If you have 50 knowledge workers, you are signing up for an extra $18,000 annual commitment right out of the gate. But that sticker price assumes your underlying tenant is already built the way Microsoft wants it.
Copilot requires qualifying base licenses. You need Microsoft 365 Business Standard, Business Premium, E3, E5, or the matching Office 365 enterprise tiers. If half your warehouse or field team sits on basic Exchange Online Plan 1 or Microsoft 365 Apps for Business, you have to upgrade those users to higher tiers before you can even assign a Copilot license. That can easily add another $10 to $20 per user per month to your baseline before you pay a single dollar for the AI tool itself.
In the reviews we run, companies frequently discover they are already bleeding cash on unused software. We routinely find duplicate accounts, former employees whose mailboxes still hold active E3 seats, and orphaned Visio or Project subscriptions quietly billing month after month. Before you spend a dime on Copilot seats, comb through your tenant to strip out existing Microsoft 365 licensing waste. Paying for Copilot on top of bloated base subscriptions is pure margin surrender.
The Permissions Fire Drill: Copilot Respects Bad Access Rules
Microsoft keeps repeating one line: *Copilot only sees what the user has access to.*
They pitch this as a security feature. In truth, it is the number one operational headache for mid-market businesses. Most companies with 30 to 200 employees suffer from chronic oversharing in Microsoft 365. Over five or six years of rapid hiring, people create public Teams channels for private projects, save financial files to root SharePoint directories, and email direct links with tenant-wide view permissions.
Under normal conditions, security by obscurity protects you. Nobody looks at the "General Corporate" document library from four years ago because nobody remembers the folder path or cares to look. Copilot destroys security by obscurity in half a second. It crawls and surfaces any file the user's account has read permissions for, regardless of where that file lives or how deeply it was buried in the subfolder tree.
Before you deploy Copilot to a single desk, you have to audit and lock down:
- SharePoint sites set to "Public" or open to "Everyone except external users"
- Broken permission inheritance on folders holding financial models or HR records
- Stale guest and contractor access accounts sitting in Entra ID
- Legacy direct-share links created by staff who left the company three years ago
- Sensitive files that lack sensitivity labels and Data Loss Prevention policies
We run into this constantly when building out a broader cybersecurity and risk framework for clients. If your internal access policies are sloppy, Copilot will broadcast that sloppiness to your entire staff on day one.
What Does Your Data Hygiene Actually Look Like?
If you ask your IT manager or your outside managed service provider if your data permissions are locked down, what do you think they will tell you? They will almost always tell you things look fine.
Are they running automated discovery scans against your tenant, or are they guessing?
They are usually guessing. Finding out what is actually exposed requires running access reviews, auditing SharePoint site ownership, and reviewing data sensitivity labels across the environment. Aligning your internal boundaries with frameworks like the NIST Cybersecurity Framework ensures that access rights follow actual job roles rather than ad-hoc file sharing from an old office move. The FTC cybersecurity guidance for small business emphasizes the exact same principle: give people access to what they need to do their jobs today, and nothing more.
If you have customer banking details, proprietary formulas, or payroll files sitting in shared folders, fix the folder architecture first. Do not buy licenses and pray employees will ignore the search bar.
Technical Prerequisites That Catch IT Off Guard
Beyond licensing and permissions, Copilot has strict infrastructure requirements that lean IT teams often miss:
- Update Channel Configuration: Copilot features require Office apps running on the Current Channel or Monthly Enterprise Channel. If your organization locks Office apps to the Semi-Annual Enterprise Channel for stability, Copilot features simply will not show up in Word, Excel, or PowerPoint until you push a group policy change.
- Web Search Integration: By default, Copilot can query Bing to ground its answers in public internet data. You need to decide whether your corporate policy allows tenant prompts to interact with external search indexing, especially if your staff handles regulated client data.
- OneDrive and Cloud Migration: If your staff still keeps active project files on local C: drives or an unmapped on-premises file server in the back closet, Copilot cannot read them. The data has to live in SharePoint or OneDrive to be indexed by Microsoft Graph.
- Network Firewalls: Copilot generates sustained web-socket traffic and requires direct connectivity to Microsoft endpoints. Network firewalls running aggressive deep packet inspection can degrade performance or drop the real-time chat connection entirely.
Getting these details sorted out fits directly into a sensible cloud and modern workplace strategy. You want the underlying plumbing solid before you start paying the monthly user toll.
How to Pilot Without Setting Money on Fire
Do not buy Copilot for everyone at once. We tell clients to run a controlled rollout with 5 to 15 users across specific, measurable roles.
I have a strong opinion on this: keep the executive team out of the initial pilot group. Executives rarely spend six hours a day working inside Word, Excel, and dense Outlook threads to give you meaningful feedback on workflow utility. Instead, hand those pilot licenses to:
- Proposal writers who draft responses to RFPs and customer questionnaires
- Operations managers who spend their afternoons summarizing long email chains and multi-party Teams meetings
- Financial analysts who build summary tables from dense operational data
- Customer support supervisors who draft standard operating procedures and internal training guides
Track their actual output for sixty days. If an employee only uses Copilot to summarize two emails on a Tuesday, take the license back and reassign it. That is not an acceptable return on a $360 annual commitment.
Through our independent AI advisory and assessments, which start at $2,500, we help leadership teams build concrete usage criteria and data boundaries so you only pay for seats that generate measurable business value.
FAQ
Can Microsoft use our internal business data to train its public AI models? No. Microsoft's commercial terms for Copilot specify that customer data inside your tenant is not used to train base foundation models. Prompts, responses, and data accessed through Microsoft Graph stay within your service boundary. However, the data is visible to anyone inside your company who has existing read permissions to that file.
Is Copilot available on a month-to-month commitment? Microsoft generally requires an annual commitment for Copilot licenses, even if you pay monthly. That means once you assign a seat, you carry that financial obligation for the full twelve-month term. This makes proper pilot planning essential before signing a broad agreement.
What is the difference between free Copilot and Copilot for Microsoft 365? The free version provides web-grounded chat with commercial data protection when users sign in with an Entra ID work account. Copilot for Microsoft 365 ($30/user/month) integrates directly into Word, Excel, PowerPoint, Teams, and Outlook, connecting directly to your company's internal files and emails via Microsoft Graph.
Sources
If you want an objective eye on your Microsoft tenant, licensing costs, and data permissions before rolling out new AI tools, let's talk. You can book a free 15-minute review with our team to see where your permissions gaps and cost leaks are hiding.