Skip to content
Lambert Consulting

Our first department

This is what needs to work every morning.

Your servers, your workstations, your phone systems, and your identities. The foundation that no one notices as long as it holds, but that everyone notices the day it fails.

View the department
Multi-siteNational and international projects
3Branches in French-speaking Switzerland
View our client projectsCase Studies and References
Let us know how you're doingGetting a quote is free

How We Work

A piece of advice, not a sales pitch.

Our approach is consultative: we tell you what we think, even when it’s not in our best interest. That’s what makes projects succeed.

About Us
1995First project, using Microsoft SMS
Family-orientedOn a human scale and sustainable
Contact UsFirst 30-minute consultation, with no obligation

Microsoft Copilot, Copilot Studio, Copilot Cowork: Which Product Is Right for Which Problem?

Publication Date
18 minReading time
Artificial IntelligenceBlog Feature

A company looking to equip its teams with Microsoft AI assistants is faced with several products whose names begin with “Copilot,” including Copilot Cowork, which performs tasks rather than answering questions. Microsoft states that its Copilot offerings differ in three ways: the data on which they base their responses, their level of integration with applications, and their licensing. The data used and the licensing terms determine the budget, who needs to approve the purchase, and the preparatory work required before getting started.

What data each product uses, and how it is billed

Copilot Chat is web-based only. Microsoft 365 Copilot (Premium) incorporates work-related data—emails, files, meetings, calendars, teams, and reporting relationships—that the user already has access to.

The license determines the payment method. A per-user, per-month license results in a fixed amount known in advance, regardless of usage. Pay-as-you-go billing, measured in Copilot Credits, results in a charge that depends on the number of requests, their complexity, and the number of people using the service.

The usage data and the license do not align, and that is what makes arbitration difficult: the same agent may be free of charge for an employee who has been laid off but billed on a pay-as-you-go basis for a colleague who has not been laid off.

ProductAccessible DataBilling
Copilot Chat (Basic)the web; company content only if the user provides it along with their requestincluded in eligible Microsoft 365 licenses
Microsoft 365 Copilot (Basic)the same onesincluded in eligible Microsoft 365 licenses
Microsoft 365 Copilot (Premium)the web and work data, automatically syncedadditional license, per user
Agents created in Copilot Studiowhat the agent's designer gives themCopilot Credits, Pay-as-You-Go
Microsoft Copilot Coworkthe user's Microsoft 365 environmentCopilot Credits, pay-as-you-go, under the Copilot Microsoft 365 license

Copilot Chat: Included with your subscription; web-based answers

Copilot Chat (Basic) is the basic, standalone experience included with eligible Microsoft 365 . Microsoft states that using Copilot Chat does not require a Copilot license Microsoft 365 : no purchase of a Copilot license is required to use it.

Its limitation is outlined in the documentation: unlike Microsoft Copilot, Copilot Chat is not integrated with the organization’s content—files, emails, or conversations—and relies solely on data from the web. A user can still have it process company content in three ways listed by Microsoft: by providing it with the request via copy-and-paste or upload; by using Copilot Chat in Teams or Outlook with content already open; or by using a pay-as-you-go agent. In none of these three cases does the assistant access Microsoft Graph, which provides context for a user’s emails, files, meetings, calendars, teams, and reporting relationships within the request.

Governance therefore depends on the account used to sign in. The three Copilot tiers are protected by Enterprise Data Protection—the contractual protection that Microsoft already applies to Exchange messages and files SharePointwhen the user signs in with their work or school account. Microsoft explicitly instructs users to sign in this way and provides a list of entry points where a personal account also works: the Microsoft Copilot app, copilot.microsoft.com, bing.com/chat, and a few others. Microsoft’s requirement is therefore that users sign in with their work or school account.

Microsoft 365 Copilot: The License That Unlocks Company Content

Microsoft distinguishes between three levels, and their names can be confusing in a budget discussion.

These three tiers also represent the third key difference: the level of integration with applications. Copilot Chat (Basic) is the standalone base experience: users do not have the additional license and do not have access to Copilot in Word, Excel, PowerPoint, and OneNote. Microsoft 365 Copilot (Basic) refers to users who also do not have the additional license but retain standard access to Copilot in these four applications; Microsoft notes that this access depends on service capacity and may vary throughout the day. Microsoft 365 Copilot (Premium) is the additional license, providing priority access to the full experience within the same applications.

Only the third option grounds the responses in the organization's data. Microsoft states that the information is then automatically retrieved, without the need for manual uploads. It is the only one of the three that meets the requirement for "a Copilot that knows our documents."

This automatic integration has a direct impact on the preparatory work. The assistant’s access remains limited by the permissions of the person asking the questions; as a result, its responses may include documents that have been shared more widely than intended. The project therefore focuses on sharing permissions: the effort required to reorganize access rights before purchasing licenses gives an idea of the scale of the task.

Agents and Copilot Studio: Two Licenses, and a Pay-As-You-Go Billing Plan

The difference between Copilot and Copilot Studio begins here: Copilot is an assistant purchased on a per-license basis, while Copilot Studio is a tool used to build agents. Microsoft defines these agents as targeted versions of Microsoft Copilot that act as assistants and can automate business processes. The distinction lies in this second part: an assistant responds to whoever asks it a question, while an agent manages a process—and thus has an owner, defined data, and a review date.

The financial dividing line runs along the same line. Chat agents based on instructions and public websites are included with Copilot Chat. For users who do not have a Copilot- Microsoft 365 -license, access to custom agents and other agents is billed on a pay-as-you-go basis.

Copilot Studio is the visual tool—or “low-code,” as Microsoft calls it—used to create these agents and connect them to other data sources. Three factors make it a project decision rather than a license purchase.

It requires two separate licenses: one per user for those who build the agents, and one for the organization, obtained by the tenant administrator. Users of the published agents, on the other hand, do not need any specific license.

The cost depends on the agent’s design. Copilot Credits are the standard currency in Copilot Studio, and they can be obtained in three ways: a pay-as-you-go meter tied to a subscription Azure, a pre-purchase plan, or a prepaid subscription. Rates vary depending on what the agent does: a standard response costs 1 credit, a generative response costs 2, an agent action costs 5, and anchoring to the tenant’s Microsoft Graph costs 10. Microsoft gives the example of a complex request handled by an agent anchored to this Graph: 12 credits for a single response. Two agents providing the same service therefore do not cost the same, and the difference is determined at the design stage.

The free access announced for Microsoft 365 Copilot holders is subject to certain conditions. With this license, standard responses, generative responses, and integration with the tenant’s Microsoft Graph are not counted against the quota when the agent is used in Copilot Chat, Microsoft Teams, or SharePoint. Three conditions apply to this inclusion: the use must be intended for employees, the user must hold a Copilot Microsoft 365 license, and the agent must operate under the user’s authenticated identity. Microsoft adds that this inclusion applies within the limits of reasonable use—for which it reserves the right to adjust the thresholds—and that the use of Computer-Using Agents—the model that controls an application through its graphical user interface, just as a person would—is not included.

The example published by Microsoft illustrates the consequence: an agent serving an average of 50 licensed users and 100 unlicensed users is billed based on the 100 unlicensed users. An agent open to the entire company therefore incurs a cost proportional to the portion of the workforce that does not have the additional license.

Two additional factors affect your budget. Make sure you understand them before signing up. Purchased capacity is monitored monthly, and unused credits do not roll over to the next month. And when a tenant reaches 125% of its prepaid capacity, Microsoft disables custom agents: ongoing conversations are allowed to run their course, new ones are rejected, and users receive the message “There is a billing issue” or “This agent is currently unavailable. It has reached its usage limit.” ” The notification is sent via email to the tenant’s designated administrator, who is not necessarily the person who requested the agent.

Safeguards are in place within the Power Platform administration. They allow you to set a monthly limit for each agent before a block is triggered, and to cap spending on the pay-as-you-go meter. It also allows you to restrict knowledge sources, actions and connectors, HTTP requests, and publishing to channels; an administrator can even prohibit, at the tenant level, agents from publishing content using generative AI features. AI agent governance details how to frame these decisions.

Copilot Cowork: The software agent performs tasks, and usage is billed

Microsoft Copilot Cowork performs tasks on the user’s behalf within the Microsoft 365  environment: sending emails, scheduling meetings, creating Word, Excel, PowerPoint, and PDF documents, posting to Teams, managing a calendar, and searching company resources. Microsoft puts it this way: instead of describing what you could do, Cowork does the work. It can also execute a request on a schedule or trigger a task based on an event—such as the arrival of an email or a message Teams.

Access requires a license, and usage is billed in Copilot Credits. For a business or school account, Microsoft lists the following prerequisites: an active Copilot license assigned to the account— Microsoft 365 —and pay-as-you-go billing enabled. Usage is then billed on a pay-as-you-go basis in Copilot Credits, which are managed in the administration portal at Microsoft 365. As Microsoft states: in some cases, the license serves as a gateway to services billed on a pay-as-you-go basis. A company that has budgeted a fixed amount per user per month will therefore find a second, variable line item associated with the same product.

Nothing is consumed until an administrator has enabled it. Microsoft states that setting up pay-as-you-go billing enables AI experiences—such as Cowork—that depend on it. The Microsoft 365 administration console includes two distinct settings: the discovery setting, which determines whether users see these experiences, and the cost management setting, which controls access and spending. The roles do not overlap either. The Global administrator and Billing administrator roles select and modify the billing mode; the AI administrator and License administrator roles create spending policies and manage limits and alerts, but cannot change the billing mode.

Spending limits are set before the service launches. A spending strategy includes a monthly limit for the group it covers, an optional monthly limit per user—which Microsoft recommends setting to prevent a single person from using up the entire available budget—and email alerts sent to the people you designate once the threshold you set is reached. When a user reaches their limit, they lose access to agents and services until credits are reset on the first of the month, and may request an extension, which the administrator can approve or deny. From the user’s perspective, Cowork displays, upon request, the approximate cost—in credits—of the task being performed.

Both organizations use the same prepaid capacity. Microsoft notes that capacity allocated or used in the Power Platform organization reduces the prepaid capacity available for Cowork. A company that builds agents in Copilot Studio and opens Cowork counts both uses against the same capacity, from two different organizations.

Business-related issues cannot be resolved with a license alone. Cowork requests the user’s approval before performing a sensitive action, with a risk level indicator for medium- and high-risk actions; the option to stop being prompted for similar actions in the future applies only to the current session. It’s up to your organization to decide who approves what. An email sent by Cowork is sent from the account of the employee who approved the action, whether or not they wrote the text. And an automation triggers at the scheduled time, or when the event it’s monitoring occurs: Microsoft states that Cowork takes no action without your approval, and that event-triggered tasks operate by default in a “prepare then approve” workflow. When an action involves sending an email, posting a message, or modifying a shared system, it prepares the action and requests approval at that moment—when no one is necessarily in front of the screen. Designating the person responsible for the action and the budget from which it is charged is an organizational task that Microsoft provides tools for, without doing it for you.

Availability, as of August 29, 2026, according to Microsoft's product page. The version for business and educational accounts is generally available; the version for personal accounts is in preview.

GitHub Copilot and Security Copilot: Different Buyers, Different Budgets

Microsoft states that Security Copilot, GitHub Copilot, and Copilot Studio are licensed separately and do not require a Microsoft 365 Copilot (Premium) license. The first two are part of a separate purchase process.

GitHub Copilot is a code assistant licensed by the organization. Its plans for organizations and businesses are billed per assigned seat per month, and the Business version includes centralized management and control of Copilot policies. The purchaser is the development manager, and the scope of responsibility overlaps with that of Microsoft 365 Copilot only with regard to the provider.

Security Copilot is designed for security professionals to support incident response, threat hunting, intelligence, and security posture management. Check its licensing requirements before purchasing. Microsoft states that it is included with a Microsoft 365 E5 or E7 license, but eligibility alone does not grant access—it must have been deployed in your tenant. Organizations that do not have an E5 or E7 license must provision Security Compute Units. Microsoft requires at least one; capacity is provisioned on an hourly basis and billed as soon as it is created, even if it is not attached to any environment. An organization that already has an E5 or E7 license may therefore have access that has never been enabled in its tenant.

Signs that the product you've chosen isn't right for you

Four scenarios, each of which is attributable to a documented mechanism rather than a flaw in the tool.

"Copilot doesn't recognize our documents." The user is on Copilot Chat or Microsoft 365 Copilot (Basic), which do not have access to Microsoft Graph. No settings can change this: it is the additional license that grants this access.

“Copilot shows an employee documents they shouldn’t be able to see.” The assistant is limited by the permissions of the person asking the question. The task at hand involves sharing permissions.

The Copilot Credits bill increases even without new users. The cost is based on the agent’s design and traffic. An agent anchored to the tenant’s Microsoft Graph consumes ten credits per anchor and five per agent action; the same service provided in a different way consumes fewer credits.

The agents suddenly stop responding. The 125% limit on prepaid capacity is the most likely cause, especially since unused credits do not carry over from one month to the next.

Our Opinion

Three beliefs.

The first useful decision is to take action. Copilot Chat is available as part of your subscription without any prior purchase. Counting how many people are actually using it—and for what purposes—takes a few hours and tells you whether the time is right to move forward. An organization where a tool included in the subscription is rarely used has an adoption problem before it has a licensing problem, and purchasing an additional license won’t solve it.

“Included with Microsoft 365 Copilot” is not a general statement. The inclusion of Copilot Studio agents applies to use by employees under the authenticated identity of a licensed user, within the limits of reasonable use. Two scenarios stand out: an agent available to the entire company when only a portion of employees hold licenses, and an agent intended for external contacts. The example published by Microsoft—50 licensed users, 100 unlicensed users, billing based on the 100—exactly describes the first scenario.

Do not open Copilot Studio until you have a written use case and a designated owner. The factor that determines the answer is the nature of the problem. If your problem is stated as “our employees spend time writing, summarizing, and searching,” a license addresses that, and the focus then shifts to access rights and adoption. If your problem is stated as “this process isn’t working well,” it’s an application project, involving scoping, design, testing, and deployment. Confusing the two is like starting to charge on a pay-as-you-go basis while you’re still figuring out what the agent is supposed to do. The same comparison between purchasing and a project applies to the actual cost of a Power Apps application.

What Needs to Be Decided

  1. Designate the owner of the consumption budget, who is separate from the license owner. The overage notification is sent to the designated tenant administrator; make sure that person knows who to forward it to.
  2. Enable safeguards before agents. The Microsoft 365 administration interface allows you to set a budget limit with staged notifications, and the Power Platform administration interface allows you to set consumption caps on a per-agent basis.
  3. Decide who can create an agent and what must be specified for it to exist: a written statement, the data involved, a person in charge, and a review date. This list fits on one page and requires no license.
  4. Address the issue of the login account. Enterprise Data Protection applies when the user logs in with their work or school account; logins made in any other way do not meet this requirement.
  5. Check what your current licenses already include—particularly for Security Copilot with E5 or E7—before opening a new budget line item.
  6. Decide who approves the actions of an agent acting on your behalf, and which budget they are charged to. Microsoft sets up the approval process and spending limits; however, no license specifies the name of the person responsible for an email sent under an employee’s signature.

The first four points are handled internally, and it’s best that they be: these are organizational decisions, not configuration decisions. Lambert Consulting can guide the trade-off between licensing and project needs, and establish the usage framework before the first agents are deployed.

Frequently Asked Questions

What is the difference between Copilot and Copilot Studio?

Microsoft 365 Copilot is an assistant sold on a per-user license basis, which bases its responses on the work data to which the user already has access. Copilot Studio is a visual, “low-code” tool (as Microsoft defines it) used to build agents and connect them to data sources; it requires one license for the organization and one license for each developer, and agent execution is billed on a pay-as-you-go basis using Copilot Credits.

Is Copilot Chat included in our subscription?

Copilot Chat (Basic) is the standalone basic experience included with eligible Microsoft 365 licenses, and Microsoft states that using it does not require a Copilot Microsoft 365 license. Its responses are based solely on data from the web; to have it process corporate content, the user must include that content with their request, work in Teams or Outlook with open content, or use a pay-as-you-go agent.

Microsoft 365 Copilot: Are custom agents free?

Subject to conditions. Classic responses, generative responses, and anchoring to the tenant’s Microsoft Graph are not counted when the agent is used in Copilot Chat, Microsoft Teams , or SharePoint, provided that the use is intended for employees, the user holds the license, and the agent operates under the user’s authenticated identity. This inclusion applies subject to reasonable use, and the use of Computer-Using Agents is excluded.

Do I need an additional license for Copilot Cowork?

For a business or educational account, Microsoft lists the following prerequisites: an active Microsoft 365 Copilot license assigned to the account and pay-as-you-go billing enabled. Usage is then billed on a pay-as-you-go basis using Copilot Credits, which are managed in the administration portal at Microsoft 365. Microsoft states that enabling pay-as-you-go billing activates AI experiences, such as Cowork, that depend on it: until an administrator has configured this billing and a spending policy, no credits are consumed.

What happens if we exceed our Copilot Credits limit?

The limit is triggered at 125% of the prepaid capacity: custom agents are disabled, ongoing conversations end normally, and subsequent conversations are rejected. A notification is sent via email to the designated tenant administrator and appears in the Power Platform admin center.

Microsoft Sources

After reading

What an article Can't Know

An article describes what applies to everyone. What varies from one organization to another is the inventory: which applications, which accounts, and which pieces of equipment are actually involved in your organization. The inventory determines the scope of the effort, and it cannot be summarized on a single page.

You'll be speaking directly with the engineers who will be doing the work, not with a middleman. We'll respond within 24 business hours.

If the topic has changed

Check what is still true

Announced dates are sometimes postponed, products are renamed, and conditions change. The blog tracks these topics over time: when a rule changes, a new post announces it.

Search for a topic in the blog