Guide

How to implement Microsoft Copilot Studio: licensing, preparation and a plan for your first agent

This guide is for managers and administrators in companies working on Microsoft 365 that want to build their first AI agent in Copilot Studio. We explain what the tool costs to use, what to prepare before you start and how to protect your data. You also get a plan for your first agent, from choosing the process to launching it in Teams.

Author: Kacper Włodarczyk, CEO of ALGORCOMPPublished: May 09, 2026Reading time: 11 min readAI / AI agentsFor: Mid-sized company
Team planning a Microsoft Copilot Studio implementation

What Copilot Studio is and when it makes sense for your company

Microsoft Copilot is a ready-made assistant: it writes emails, summarises meetings and searches documents. Copilot Studio is for something else – you use it to build your own agent for a specific process. The agent answers questions based on selected documents and can carry out actions in systems, such as submitting a request or checking an order’s status.

Copilot Studio makes most sense in a company that already works on Microsoft 365, keeps its documents in SharePoint and uses Teams. The agent then uses the same accounts and permissions as employees. You will find typical first uses in the list below.

It is not always a good choice. If a process follows fixed rules and does not require language understanding, ordinary automation in Power Automate will be cheaper and more reliable. If the company works on Google Workspace, it is better to look for tools from that environment.

  • HR: questions about leave, work regulations, benefits and procedures for new employees.
  • IT: answers to repetitive questions and logging tickets in the help desk system.
  • Technical knowledge: finding procedures and instructions, e.g. for production staff.
  • Order handling: checking an order’s status or stock availability in the ERP at a salesperson’s request.

What Copilot Studio costs: credits, packs and licences

With Copilot Studio you do not pay a licence for each agent user. You pay in credits for the agents’ work: for answers, searches in documents and actions in systems. The prices in the table below are Microsoft list prices in US dollars, as of October 2026.

How many credits a single conversation uses depends on its complexity. An answer from a simple, pre-scripted scenario costs less than an answer generated from documents or an action carried out in a system. Microsoft provides a calculator where you enter the type of agent and the expected traffic.

Credits from a pack expire at the end of the month. If the company uses more than it bought, Microsoft may restrict the agents. That is why it is more sensible to pay for usage during the pilot and choose a pack after a few weeks of measurement.

Ways to pay for Copilot Studio (Microsoft list prices, October 2026)
OptionHow it worksWhen it fits
Credit packUSD 200 a month for 25,000 credits shared across the whole organisation; unused credits expireAgents running permanently, with known traffic
Pay-as-you-goA bill in your Azure subscription for the credits actually used in the month, with no commitmentPilots and agents with variable traffic
Prepaid planAn annual pool of credits bought in advance; Microsoft quotes savings of up to 20%Larger, predictable usage
Microsoft 365 Copilot licenceLets you build agents that extend Copilot; licence holders do not use credits for some uses in Teams, SharePoint and CopilotCompanies that are giving Copilot to employees anyway
Trial licenceYou can build and test an agent, but you cannot publish itThe administrator’s first experiments
Designing agent architecture in the Microsoft environment

What to prepare before anyone starts building an agent

Configuring the agent itself takes less time than you might think. Most of the work goes into preparing the process, the documents and the permissions. The list below lets you check whether your company is ready.

If one of the points is not met, that does not rule out the project. But it must go into the schedule as a separate task with a named owner.

  • One process and one person responsible for it. Ideally a department manager who knows the exceptions and can approve the agent’s answers.
  • A measure of success written down before the start, e.g. the share of questions the agent answers without human help.
  • Up-to-date documents in one place. Every document the agent uses should have a single current version and an owner.
  • Reviewed SharePoint permissions. The agent acts on behalf of the signed-in user, so a folder open to the whole company is also open to the agent.
  • Separate environments: a test environment for building and a production environment for employees. In Power Platform, an environment is a separate space with its own data and permissions.
  • A list of people who may build agents. The administrator grants this right to a group in Microsoft Entra ID, not to all employees.

What an agent is made of: instructions, knowledge, actions and channels

Every agent in Copilot Studio has four layers. The table below shows them using the example of an agent that answers employees’ HR questions.

The order matters. Publishing in Teams is the last step, not the first. If you do not take care of knowledge and boundaries first, users will get a nice chat window on top of a poorly prepared process.

The four layers of an agent, using an HR agent as an example
LayerWhat it isExampleWhat to watch out for
InstructionsA description of the agent’s role and the rules it must follow“You answer questions about leave and work regulations. You refer questions about pay to HR.”Instructions that are too general produce off-topic answers
KnowledgeThe documents and pages the agent draws its answers fromWork regulations and the leave procedure in SharePointOld versions of documents lead to wrong answers
ActionsConnections to systems through Power Automate or ready-made connectors; called Tools in the productChecking the number of leave days and submitting a requestThe greater the impact on data, the more important permissions and activity logging become
ChannelsThe places where employees talk to the agentMicrosoft Teams and Microsoft CopilotAn agent on a website without sign-in is available to anyone
AI agent built in Copilot Studio answering an employee in Microsoft Teams based on company documents

An agent in Copilot Studio is only as good as the documents you give it, and only as secure as the permissions it inherits.

A plan for your first agent, from choosing the process to launch

A pilot of the first agent usually takes 8–12 weeks. Most of that time goes into preparing knowledge and testing, not into work in Copilot Studio itself. The plan below assumes the twelve-week option.

Our case study of a knowledge assistant for production engineers, built in Copilot Studio and made available in Teams, shows what such an agent looks like in practice.

  • Weeks 1–2: scope. The process owner describes which questions the agent answers, what it does not do and when it hands a case to a person. You agree the measure of success together.
  • Weeks 3–4: preparation. Tidying up documents and permissions, a test environment, pay-as-you-go billing, a list of testers.
  • Weeks 5–7: build. Instructions, connecting knowledge, one or two actions in systems and first tests within the project team.
  • Weeks 8–9: testing with a group of 10–20 employees on a set of test questions, with corrections to instructions and documents.
  • Weeks 10–12: publication in Teams for the whole group, short training and a weekly review of results with the process owner.

How to test the agent before publication

Before launch, prepare a set of test questions with model answers, e.g. 50–100 questions collected from the department that answers them today. The set should cover typical questions, difficult ones and ones the agent should not answer.

Copilot Studio has a built-in automatic evaluation of the agent against a set of questions, but the process owner has the final say. They decide whether the quality is good enough for launch. Repeat the same set after every major change to instructions or documents.

  • Is the answer correct and consistent with the current document?
  • Does the agent point to the document it took the answer from, so that the employee can check it?
  • When asked an out-of-scope question, does the agent say it does not know and point to a contact person?
  • Is an employee without permission to a given folder prevented from getting an answer based on that folder?
  • Does an action in a system, such as submitting a request, result in a correct entry, and are errors reported clearly?

Security: settings the administrator should check

By default, a new agent requires sign-in with a company account in Microsoft Entra ID. However, the person building the agent can choose the no-sign-in option. Then anyone with the link can talk to the agent and ask about the documents connected to it.

These risks are limited with data protection policies in the Power Platform admin center. Microsoft’s documentation calls them data policies, and previously DLP policies (data loss prevention). They let you block publication without sign-in, selected knowledge sources and selected channels.

A separate decision concerns AI models. In Copilot Studio you can choose Anthropic models (Claude), but in the EU they are switched off by default. Once enabled, data is processed outside Microsoft’s EU Data Boundary, so it is worth making this decision together with your data protection officer.

  • Block the publication of agents without sign-in, unless you are deliberately building an agent for customers on your website.
  • Define permitted knowledge sources, e.g. only selected SharePoint sites, and block those you do not need, such as public websites.
  • Block channels the company does not use, such as WhatsApp or Facebook.
  • Separate the test environment from production and decide who approves the publication of a new version of an agent.
  • Decide whether Anthropic models may be used in the company, and record that decision in your AI usage policy.

After launch: what to measure and how to develop the agent

Launching the agent is the start of the work, not the end of the project. Copilot Studio shows conversation statistics, and credit usage is visible in the Power Platform admin center. It is worth reviewing this data every week during the first few months.

The most valuable item is the list of questions the agent could not answer. It usually points to a missing or outdated document rather than an error in the agent. Correcting a document often achieves more than changing the instructions.

Remember the AI Act too. If the agent talks to customers, from 2 August 2026 it must tell them they are dealing with AI (Article 50).

  • What share of conversations end without the case being handed to a person?
  • How many questions go unanswered, and what topics do they concern?
  • How many employees from the target group used the agent in a given week?
  • How many credits does the agent use, and does the purchased pack match the traffic?

The most common mistakes when implementing Copilot Studio

These mistakes recur regardless of industry and company size. Almost none of them stem from the limitations of the tool itself.

  • A first agent that is too broad. The agent gets dozens of knowledge sources and many tasks at once, so the quality of answers is uneven and users quickly lose trust.
  • Connecting the whole of SharePoint without a review. The agent starts quoting outdated versions of procedures or documents that should not be widely available.
  • No knowledge owner. Nobody is responsible for updating the documents, so after a few months the agent gives out old information.
  • Building directly in the production environment. Every change goes straight to employees, including untested ones.
  • A credit pack bought ‘just in case’. Unused credits expire every month, so an oversized pack is a permanent, unnecessary cost.
  • No rules for people who build agents. Departments create their own agents, and the administrator does not know where they are published or what data they use.

Related topics in the knowledge base

Read next

FAQ

Copilot Studio in your company – frequently asked questions

Questions that managers and administrators ask after their first experiments with Copilot Studio.

How does a Copilot Studio agent differ from an agent created in SharePoint?
A user with a Microsoft 365 Copilot licence can create a SharePoint agent in a few minutes, and it answers questions based on a selected site or files. You need Copilot Studio when the agent has to carry out actions in systems, combine several sources or work outside Microsoft 365, e.g. on a website.
What happens when the credits run out?
When usage exceeds the purchased pool, Microsoft may restrict the agents, up to and including refusing service. Set up usage notifications in the admin center, or link the environment to pay-as-you-go billing. The excess will then go on your Azure bill instead of blocking the agent.
Can a Copilot Studio agent serve customers on our website?
Yes, through the website channel. Bear in mind, however, that such conversations use credits and that the agent must disclose that it is AI. The documents connected to such an agent must be ones you are comfortable showing to any visitor.
Who in the company should build agents?
At first, the Power Platform administrator together with the process owner. Once the rules are in place, the right to build can be given to other trained people through a group in Microsoft Entra ID. It is not worth opening this up to everyone from day one.
Can one agent serve several departments?
Technically yes, but to start with it is better to build separate agents for HR, IT or sales. Each one then has a single owner, its own knowledge sources and its own tests. It is also easier to judge which of them really saves time.

About this page

About the author

Kacper Włodarczyk — CEO of ALGORCOMP

Kacper Włodarczyk

CEO of ALGORCOMP

Kacper specializes in implementing Microsoft 365 Copilot, Copilot Studio, Power Platform (Power Automate, Power Apps, SharePoint) and AI agents for mid-sized B2B companies in Poland. He leads dozens of projects covering AI strategy, Power Platform governance, document workflow automation and sales processes. In his writing he focuses on the practical side of AI adoption in organizations — from the first proof of concept to company-wide rollout — with particular attention to data security, compliance (GDPR, NIS2, the AI Act) and return on investment.

Meet the team

Want to build your first agent in Copilot Studio?

In a free consultation we will choose a process for your first agent, check whether your documents and permissions are ready and plan the pilot. We will prepare a detailed quote after that conversation.

Featured

Related articles