Copilot is only as good as your tenant’s readiness. In this full-day, admin-focused workshop, you’ll learn how to prepare, configure, and govern Microsoft 365 for a secure-by-default Copilot rollout—anchored in real-world patterns from SharePoint & OneDrive, Microsoft Purview, SharePoint Advanced Management, Microsoft Defender for Cloud Apps, and Copilot Studio.
Morning (principles & design): Start by baselining your environment with reporting that surfaces oversharing and sensitive-data risks (personally identifiable information (PII), payment card information (PCI), credit card numbers, Social Security numbers (SSNs), financial data, etc.) and reveals AI/SaaS usage. Learn how to translate Acceptable Use Policies (AUP), Generative AI policies (GenAI), and Agent Publishing Policies into technical controls: Purview Data Loss Prevention (DLP) and sensitivity labels, SharePoint Advanced Management guardrails, and Microsoft Defender for Cloud Apps discovery/governance—aligned to insider-risk mitigation without crushing productivity.
Afternoon (demos & labs): Build what you learned. Implement policy-driven configurations in SharePoint Advanced Management, Microsoft Purview, SharePoint & OneDrive, and Microsoft Defender for Cloud Apps, then configure Power Platform environments for Copilot Studio agents—covering administration, publishing, security, and DLP. You’ll explore environment groups/rules/routing, connector and integration guardrails (including MCP integrations), and a licensing posture that supports both Copilot-licensed and non-licensed users at scale.
You’ll leave with:
•A practical deployment and administration playbook for M365 Copilot
•A proven approach to detect/limit oversharing and sensitive data exposure
•Policy-to-configuration mappings you can implement immediately
•An agent governance model for Copilot Studio that scales securely across environments and teams