{
"title": "Copilot Cowork GA Brings Metered AI to Microsoft 365 with Edge Browser Automation",
"content": "Microsoft today removed the wraps from Copilot Cowork, its AI task-delegation service, making it generally available for all Microsoft 365 Copilot tenants as of June 16, 2026. The launch introduces a pay-as-you-go billing model that charges enterprises only for the AI compute their workers actually consume, along with new capabilities that let Cowork agents navigate the web via Microsoft Edge and generate custom imagery inside delegated projects. IT administrators gain a sweeping set of controls to cap spending, restrict model access, and audit every action the agents take.

The move positions Microsoft aggressively against a growing field of autonomous workplace bots. Google’s Workspace Duet AI Agents and Salesforce’s Einstein Copilot already allow some degree of task delegation, but Microsoft’s offering stands out by embedding automation directly into the Edge browser—turning the world’s most-used desktop browser into a managed execution environment for AI.

Delegation meets consumption: the death of the flat-rate license

Until now, Microsoft 365 Copilot sold on a per-user, per-month model: $30 for each employee who wanted AI assistance. Copilot Cowork shatters that pricing. Under the new system, organizations buy “AI Compute Units” (ACUs) that Cowork burns through as it performs work. A simple meeting summary consumes a fraction of an ACU; a full competitive-intelligence report requiring a dozen web-scraping sessions, a PowerPoint assembly, and a custom hero image might run to 20 ACUs or more.

Microsoft published a cost estimator that lets admins input typical workloads and see projected monthly bills. During a press briefing, the company revealed that a hypothetical 500-person law firm assigning Cowork to draft 50 complex research memos and 200 routine document reviews per week would pay roughly $4,200 in ACUs—compared with $15,000 under the old per-user model if every attorney had a license. The economics get even sharper for departments that use AI sporadically.

“This is what real AI democratization looks like,” said Ritu Bhatnagar, a Forrester analyst tracking workplace AI. “A mid-sized architecture firm can now offload code-checking to Cowork during a permit-rush week and pay nothing in slower months. Budget flexibility drives adoption.”

Three brains, one interface: choosing the right model

Rather than forcing every task through the same silicon brain, Copilot Cowork presents users with a three-tier model menu when creating a delegation:

  • Efficient: Microsoft’s own Phi‑4 model handles standard chores—email triage, simple translations, meeting transcripts. The tier is lightning-fast and costs as little as $0.10 per task, making it suitable for high-volume, low-complexity work.
  • Balanced: An OpenAI GPT‑5 variant sits in the middle, delivering strong reasoning and creativity for report drafting, spreadsheet analysis, and code review. Most business tasks land here.
  • Advanced: A proprietary reasoning engine called “Prometheus‑Max” unlocks the two flagship features: browser task execution and in‑project image generation. It costs more but can tackle multi‑step research, financial modeling, and tasks that require visual output.
Users can mix tiers within a single assignment. For example, an analyst could set Cowork to “scrape these ten competitor websites using Advanced, compile the data into a Balanced-tier PowerPoint, and send an Efficient‑generated summary email to the team.” Microsoft claims that early adopters like Accenture reduced their AI spending by 47% simply by routing routine parts of a task through the cheaper models.

Edge becomes an AI executor

The most futuristic piece of the Cowork puzzle is browser task execution, available only on the Advanced tier and only through Microsoft Edge. When a user delegates a web‑based job—”check the pricing of these five suppliers and create a spreadsheet”—Cowork spawns a headless Edge instance inside a secured Microsoft cloud sandbox. It uses the owner’s stored credentials (via Edge Wallet) to log into supplier portals, navigate past cookie consent forms, scrape tables, handle pagination, and even interact with JavaScript‑heavy single‑page apps.

During a live demo, a product manager tasked Cowork with pulling warranty terms from three laptop manufacturers. The agent autonomously opened Edge profiles, searched for each product page, clicked through support tabs, ignored live‑chat pop‑ups, and extracted PDF content, all without human intervention. The entire process, which would take a human 25 minutes, completed in under two minutes.

Aisha Khan, Lead Product Manager for Edge Enterprise, explained the security architecture. “We run Cowork in a dedicated container that can’t touch the user’s personal browser profile. Network traffic routes through the tenant’s configured Microsoft Defender for Cloud policies, so if IT has blocked access to gambling sites, Cowork can’t go there. All credentials are tokenized—Cowork never sees the actual password.” Every click and keystroke generates an audit log that compliance teams can review in Microsoft Purview.

Crucially, the feature respects multi‑factor authentication. If a site requires a code from an authenticator app, Cowork alerts the user’s phone via the Microsoft Authenticator app and waits for approval. Admins can also enforce “human-in-the-loop” gates for sensitive actions like making a purchase or submitting a form.

Image generation seeps into the workflow

Also new in the Advanced tier is built‑in image generation, powered by the same DALL‑E 3 engine that runs Microsoft Designer. Users can instruct Cowork to “create a title graphic for this presentation using our brand’s blue and orange palette,” and the generated image lands directly in the PowerPoint file. The feature respects organizational brand kits defined in Designer, so logos, fonts, and color schemes stay consistent. For regulated industries, a “require approval” checkbox forces the agent to pause and show the image for a human sign‑off before inserting it.

The admin’s armory: control without suffocation

Giving autonomous agents the keys to web browsers and corporate data could keep any CISO awake at night. Microsoft’s response is a suite of granular controls woven into the Microsoft 365 admin center and Microsoft Purview:

  • Spending limits: Admins can set per‑user, per‑group, or per‑department ACU budgets on a monthly, weekly, or even daily basis. Notifications fire at 80% and 100% thresholds, and Cowork halts automatically when the cap is hit.
  • Model restrictions: Security groups can be locked to specific tiers. “We set our interns to Efficient only, while senior analysts get Advanced,” said Marcus Webb, IT Director at an early‑adopter consulting firm.
  • DLP integration: Cowork inherits all existing data‑loss‑prevention policies. If an agent tries to paste a credit‑card number into a web form, the action is blocked and an alert logged.
  • Audit logs: Every task, model selection, website visited, and output is captured in unified audit logs, searchable via Purview. Logs can be exported to SIEM systems for real‑time monitoring.
  • Content filters: Custom blocklists prevent Cowork from engaging with specified keywords or domains—useful during mergers or litigation.
  • Retention policies: All intermediate artifacts (web scrapes, draft images) can be auto‑deleted after a configurable period, aiding GDPR compliance.
“We’re not just releasing an agent; we’re releasing an agent that IT can leash as tightly as needed,” Spataro said.

The beta report card

Over 200 organizations participated in the closed beta between March and May 2026. Microsoft shared aggregated data: 78% of users saved at least five hours per week, with 42% saving more than ten. Market research (23% of all tasks), data migration (19%), and internal reporting