Skip to content

Team AI training guide · By Yes AI

Before Copilot training: what IT should check

Published 6 min read

Copilot training goes wrong in predictable ways: half the room has a different Copilot from the other half, a search exercise surfaces a spreadsheet nobody should see, or a feature the trainer planned on is switched off. Each of these is a check IT can do beforehand. This guide lists them, based on Microsoft's documentation as of October 2026.

Quick answer

Before Copilot training, confirm which Copilot experience each attendee has, because Copilot Chat and the licensed Microsoft Copilot draw on different data. For licensed users, review SharePoint, OneDrive and Teams permissions first: Copilot only surfaces content a user can already view, so overshared files can appear in answers. Then confirm admin settings such as web search and agents, record a usage baseline and agree the data rules for the session.

IT administrator and team leader in a Geelong office reviewing file-sharing settings on a monitor

Which Copilot does each attendee have?

Microsoft now uses two main names: Microsoft Copilot for the licensed product, previously Microsoft 365 Copilot, and Microsoft Copilot Chat for the experience included with eligible Microsoft 365 licences. Microsoft says older names may still appear during the transition. The two behave differently. Copilot Chat is mainly grounded in the web and whatever the user provides, with extra grounding in Outlook for eligible users. The licensed product can reason across a user's emails, meetings, chats and files. Ask IT for a list of attendees showing which they have, and ask attendees to check the label in their own apps before the session.

  • Microsoft 365 Copilot (Premium) or (Pro): the user has the add-on licence.
  • Microsoft 365 Copilot (Basic): no add-on licence, standard access to Copilot in the Office apps.
  • Copilot Chat (Basic): no add-on licence and no Copilot chat in Word, Excel, PowerPoint or OneNote.

Why do file permissions matter before training?

Microsoft's documentation states that Copilot only surfaces organisational data to which individual users have at least view permissions, and advises using the permission models in services such as SharePoint so the right people have access to the right content. Copilot does not grant new access. It does make existing access easier to find. A finance spreadsheet shared with the whole organisation years ago may never have been opened by most staff, yet a licensed user asking about budgets could see it cited. Training exercises that ask Copilot to find or summarise information are where this tends to surface.

Microsoft publishes a deployment blueprint for securing and governing Copilot built around three areas: remediating oversharing, setting up guardrails and meeting regulations. It notes that SharePoint Advanced Management, which helps manage sharing and access across SharePoint, is included with the Microsoft Copilot licence.

Which admin settings change what attendees see?

Several administrator settings decide whether a feature the trainer plans to demonstrate will exist on the day. Microsoft's documentation describes the main ones, listed below. Check them from an ordinary attendee account as well as an administrator's, because a trainer who rehearses on an IT account can find the room sees something different. Settle each one before exercises are written so that nobody designs a task around a feature the organisation has switched off.

  • Optional connected experiences: turning these off can remove web search from Copilot.
  • Connected experiences that analyse content: turning these off removes Copilot features from Word, Excel, PowerPoint, Outlook and OneNote.
  • Agents: administrators choose which agents are allowed, and users only get allowed agents they have installed or been assigned.
  • Third-party models: administrators decide whether models from providers such as Anthropic and OpenAI are used, and extra terms may apply.

What should staff be told about their data?

Staff often ask whether Microsoft reads or trains on what they type. Microsoft's documentation says prompts, responses and data accessed through Microsoft Graph are not used to train foundation models, and that eligible work and school accounts receive enterprise data protection. It also says each interaction is stored as the user's Copilot activity history, which administrators can search and retain through Microsoft Purview and which users can delete through the My Account portal. Tell staff all of this plainly. Then explain that your own policy still decides what information may go into Copilot, because the vendor's terms do not settle every internal rule.

How should exercises differ for licensed and unlicensed staff?

In a mixed room, design two versions of the key exercises. Copilot Chat users work from text or files they paste or upload, such as drafting a client update from fictional notes or summarising an uploaded procedure, plus Outlook tasks where their account supports them. Licensed users can practise work that crosses sources, such as asking for a summary of one project across their mail, meetings and documents, which is where reviewing the cited sources matters most. Both groups should practise checking outputs against the source, because Microsoft's own documentation says generative AI responses are not always factual.

How will you know whether Copilot is used after training?

Record a baseline before the session. The Microsoft Copilot usage report in the Microsoft 365 admin centre, under Reports and then Usage, shows enabled users, active users and the active users rate, along with prompts submitted to Copilot Chat, over 7, 28, 90 or 180 days. Microsoft says data for a given day usually appears within 48 hours. Compare the same period after training. Usage figures show activity and say nothing about quality, so pair them with a look at a few pieces of work produced with Copilot and a conversation with team leaders about what changed.

Copilot readiness checks and who owns them

CheckUsually owned byWhy it matters for trainingWhere to look
Copilot experience per attendeeMicrosoft 365 or licensing adminDecides which exercises each person can doLicence assignments and in-app labels
Oversharing on sites and filesSharePoint admin with data ownersSearch and summary exercises can surface overshared contentMicrosoft's secure and govern deployment blueprint
Web search and connected experiencesMicrosoft 365 adminPlanned features can be missing on the dayPrivacy controls for Microsoft 365 Apps
Allowed agentsMicrosoft 365 adminDemonstrated agents may be unavailableIntegrated apps in the Microsoft 365 admin centre
Data rules for the sessionPrivacy or risk ownerStaff need a clear rule before practisingYour AI use policy
Usage baselineMicrosoft 365 adminAllows a before and after comparisonReports, Usage, Microsoft Copilot

Practical checklist

  • List each attendee with their Copilot experience: licensed, Basic or Copilot Chat.
  • Review sharing on the sites and libraries licensed attendees will use in exercises.
  • Check web search, connected experiences and agents from an ordinary attendee account.
  • Record the Copilot usage report figures for the 28 days before the session.
  • Agree the data rule for the session and send it to attendees.
  • Prepare a Copilot Chat version of every exercise for unlicensed attendees.

Common questions

Do we need to fix all oversharing before training?

Not necessarily all of it, but the content licensed attendees will touch in exercises should be reviewed first. Microsoft's blueprint describes identifying high-risk sites and files, applying interim access restrictions if needed, then fixing access issues. A practical approach is to run cross-source exercises only on sites that have been reviewed, and keep the rest of the session on pasted or uploaded material.

Will Copilot show staff documents they should not see?

It will not give anyone access they did not already have. It can surface content a user could technically open but never knew about, such as a folder shared with everyone by mistake. That is a permissions problem that existed before Copilot. Training is often where it is first noticed, so agree in advance who staff should tell if an exercise turns up something sensitive.

Can we train on Copilot Chat now and buy licences later?

Yes. Microsoft states that using Copilot Chat does not require a Microsoft Copilot licence. Training on Copilot Chat builds the core habits and shows which roles keep asking for access to their own mail and files, which is useful evidence for a licence decision. Exercises for licensed use can be added in a later session.

Why do two colleagues get different answers to the same prompt?

Licensed Copilot grounds its answers in what each person can access and in their recent work context, so two users with different mailboxes, files and permissions give it different material to work from. The wording of answers can also vary between attempts. Showing this in the session helps staff stop treating one answer as the answer.

Does Microsoft use our feedback to train its models?

Microsoft's documentation says optional feedback may be used to improve Copilot, as with other Microsoft 365 services, but is not used to train the foundation models behind it. Administrators can manage feedback settings for the organisation. If your policy restricts feedback, tell staff before the session so nobody clicks the feedback buttons out of habit.

Sources and further reading

Continue planning

Plan a workshop around your team’s work

Describe the roles in your team, the tasks they want to practise and the tools you already use. We can discuss a suitable workshop format and scope. Keep staff records, customer documents and account credentials out of this enquiry.