Copilot Studio 2025 Notes

WIP 

Copilot Studio is amazing, the licensing is complex, the AI integration is excellent. Architects really need to understand Licensing and billing or AI will get out of control.  The Purview and governance looks very good.

MS Build 2025: 

MCP Server in Preview - possible to collect data from other AI services or write back.

Connector Kit - So can add custom connectors to from Power Platform Connectors including Copilot Studio - sounds great.

Agent Flow - Added functionality added to Power Automate flows (Copilot Studio aware), deployed via solutions.

Licensing

You need to be aware:

• M365 agents - need all end users to have M365 copilot licences, retail $20/user.
• Copilot Studio - Makes need copilot studio AI Studio/maker licence $30/retail, users don't need any licence to use but ..
• Each prompt generates multiple messages, these are all billable (complex to calculate)
• (If you use Copilot Studio and it calls Azure AI Foundry, also bills Tokens (also complex to estimate)
• Copilot Studio is using AI Foundry connector, it is a Premium connector)

Microsoft Purview Summary

Purview covers:

• Information Protection - Discover, Classify & Protect data such as documents and emails. Tagging and AIP labels can be applied manually or automatically.  Lots of built-in pattern classifiers such as credit cards and PII data are Sensitive Information Type (SIT), which uses expressions like RegEx to identify types of information example [A-Z]{2}[0-9]{6}[A-D]{1} for a UK National Insurance Number.  The dictionary allows one to add words to customise discovery and automatic tagging and labelling for each organisation and industry.  Can also build custom SITs based on specific patterns.  Activity Explorer and Content Explorer help understand the data information architecture and usage.  
• Data Loss Prevention (DLP) - Block unauthorised actions
• Inside Risk Prevention (IRP) - Identify risky behaviour inside the org
• Adaptive protection - adjusts policies like DLP policies based on the risk identified using ML/AI.  Applies stricter measures as risks are identified.

Microsoft End-Point/device Protection: Microsoft Purview allows a company to create end-device DLP policies, push them to all client devices, and protect data within the company.

Notes on Data Protection:

• Uses SharePoint Information Rights Management for SharePoint.
• Used to ensure your data meets criteria to ensure standards compliance such as HIPPA, BIM, GxP.
• Retention labels are used to track and manage sensitive data.

Microsoft Purview DLP End-device Policies

Overview: Microsoft Purview allows a company to create end-device DLP policies and push them to all client devices and protect data within the company.

Create policies. It takes up to 2 hours to update end-client devices and show them on the "Device Monitoring" dashboard.  Client Analyser tool - check endpoint client devices are getting the latest policies, and can speed it up.  The device obviously has to be online to get the latest update.