Microsoft 365 Copilot is licensed as a per-user add-on on top of a qualifying base plan. The licensing itself is simple. The decisions around it — who gets a seat, and what has to be true of your tenant first — are where the real work sits.
Prerequisites
Copilot requires an existing Microsoft 365 subscription. Business Basic, Business Standard, Business Premium, E3, and E5 all qualify, as do the equivalent Office 365 plans. It cannot be purchased standalone.
- A qualifying Microsoft 365 or Office 365 base license per Copilot user
- Users on the Current Channel or Monthly Enterprise Channel for Office apps
- Exchange Online mailboxes — on-premises mailboxes limit functionality significantly
- OneDrive provisioned for each licensed user
The prerequisite nobody lists: permission hygiene
Copilot operates strictly within each user's existing permissions. It cannot access anything a user could not already open. This is the correct security model, and it is also why deployments go wrong.
Most organizations have SharePoint sites shared more broadly than anyone remembers, files in folders inherited from a reorganization three years ago, and a company-wide site nobody has audited. All of that content was technically accessible before Copilot. The difference is that nobody could find it.
Audit sharing before deployment, not after the first uncomfortable question. At minimum: review company-wide sharing links, check permissions on HR and finance sites, remove stale guest access, and apply sensitivity labels to content that warrants them.
Who should get a seat
Copilot pays back for people whose work is document, email, and meeting heavy. It pays back much less for people whose work happens in a line-of-business application, on a production floor, or in a specialized tool.
| Role type | Typical value | Where it shows up |
|---|---|---|
| Sales and account management | High | Call summaries, follow-ups, proposal drafts |
| Legal and compliance | High | Document review, summarization, drafting |
| Finance and analysis | Moderate to high | Excel analysis, report narrative |
| Executive and management | High | Meeting catch-up, inbox triage |
| Engineering | Moderate | Documentation; GitHub Copilot fits coding better |
| Frontline and operations | Low | Limited document and email workload |
Running a pilot that tells you something
- 1.Select 20 to 50 users across two or three distinct role types
- 2.Baseline how those people currently spend time on the target tasks
- 3.Provide role-specific training — unprompted adoption is consistently poor
- 4.Run for a full quarter; the first fortnight measures novelty, not value
- 5.Review usage telemetry alongside qualitative feedback before expanding
The most common failure mode is licensing broadly, providing no training, and concluding a year later that Copilot did not deliver. Usage reporting almost always shows that the seats were simply never used.