Microsoft flipped the switch on Copilot Cowork on June 16, 2026, making the agentic AI experience generally available to organizations across the globe. The rollout integrates seamlessly into Microsoft 365 Copilot, bringing a new layer of delegated-work capabilities directly into the flow of everyday productivity. Alongside the launch, Microsoft released a set of generally available plugins for Dynamics 365, finally delivering on the promise of an AI that can act, not just advise.

This release marks a pivotal shift from conversational AI to autonomous execution. Early enterprise adopters who tested the preview throughout 2025 reported productivity gains of 23% in sales operations and a 40% reduction in manual data entry errors. But with great autonomy comes great responsibility. IT administrators now face immediate questions around governance, cost management, and security—issues the company addressed head-on in its launch-day technical guidance.

What Is Copilot Cowork?

Copilot Cowork is the evolution of Microsoft's Copilot from a reactive assistant to a proactive digital worker. It lives inside the Microsoft 365 Copilot pane but operates with user-defined permissions to complete tasks across applications without constant prompting. Think of it as a junior analyst or a virtual coordinator. You might ask it to reconcile invoices in Dynamics 365 every Monday, draft follow-up emails from CRM data, or populate a quarterly forecast spreadsheet from live financial logs.

Under the hood, Cowork leverages the same large action model Microsoft introduced in late 2024 but now benefits from tighter integration with the Microsoft Graph and Entra ID. This allows it to understand not just content but also user context, meeting schedules, and role-based access controls. The system maintains a memory of ongoing tasks, so if a workflow stalls because of a missing approval, Cowork can pick up where it left off once the block is cleared.

The launch included over 50 pre-built connectors to Microsoft 365 apps and services. The Dynamics 365 plugins, however, steal the spotlight. Available immediately are plugins for Sales, Customer Service, Field Service, Finance, and Supply Chain Management. Each plugin injects domain-specific logic into Cowork's reasoning, letting it navigate complex business processes without custom training. For example, the Sales plugin can qualify leads by pulling intent signals from Outlook and LinkedIn Sales Navigator, then automatically populate a Dynamics opportunity record and schedule a follow-up call in Teams.

Governance: Who Watches the AI Worker?

Giving an AI system the ability to move data between apps and send emails on behalf of users demands rigorous governance. Microsoft's answer comes in the form of extended Microsoft Purview controls and new Cowork-specific policies in the Microsoft 365 admin center. Administrators can now define action boundaries at a granular level: which users can delegate tasks to Cowork, which connectors they may use, and what types of actions require human approval. A dedicated Approval Center, integrated into Teams, acts as a choke point where managers can review and authorize high-risk actions before Cowork executes them.

Role-based access in Cowork inherits from the user's existing permissions. If a sales representative doesn't have access to financial records, Cowork cannot access them either. However, the system introduces a new concept of "delegation profiles." A manager might give her Cowork instance extra privileges—say, the ability to approve expense reports under $500—while the employee's own account lacks that power. These profiles are auditable and governed by separation-of-duties rules.

Compliance officers will appreciate the comprehensive audit trails. Every action taken by Cowork is logged in the Purview compliance portal with rich metadata: which plugin was invoked, what data was read or modified, what prompt triggered it, and which user approved any elevated action. This data can be fed into SIEM systems for real-time alerting on anomalies, such as an unusual spike in outbound emails or access to sensitive HR records.

Cost: What Does Delegated AI Actually Cost?

Cost transparency has been a perennial pain point with AI add-ons. Microsoft clarifies that Copilot Cowork is included in the existing Microsoft 365 Copilot license, which remains at $30 per user per month. There is no additional per-user surcharge for Cowork capabilities. However, the Dynamics 365 plugins follow a different model. They require the user to hold the appropriate Dynamics 365 license—for instance, a Sales Enterprise subscription to use the Sales plugin—and the plugin's AI consumption is metered through the new "Microsoft 365 Copilot Capacity Packs."

This metered approach might raise eyebrows. Cowork uses Copilot Studio meters for autonomous actions, with an initial monthly grant of 1,000 "work units" per tenant. A work unit roughly equates to one complex task, like generating a contract from a template or reconciling 50 invoices. Additional capacity packs can be purchased in blocks of 5,000 units for $200 per month. Early adopters report that a typical knowledge worker uses about 300 work units per month, but heavy integration scenarios in finance or supply chain can easily triple that.

To prevent bill shock, admins can set hard limits in the admin center, beyond which Cowork stops performing new tasks. They can also route high-consumption workflows to a shared queue for manual processing. Microsoft promises a dashboard in the Azure portal where organizations can track consumption by user, department, or plugin, with forecasted costs based on usage patterns.

Security and Data Residency

Cowork's leap into action raises legitimate security concerns. Can a malicious prompt cause it to leak data? Microsoft's security model rests on three pillars: prompt sanitization, action validation, and data isolation. All prompts pass through Azure AI Content Safety filters, which now include an action-intent classifier trained to spot destructive requests like "delete all records" or "forward every email." If Cowork attempts an action that falls outside the user's policy boundaries, the system blocks it and logs the attempt.

Data processed by Cowork stays within the customer's existing Microsoft 365 data residency boundaries. For European organizations, that means data at rest remains in EU data centers. However, some plugin processing may involve regional failover during outages, which can be restricted via a new data boundary policy. Additionally, the Dynamics 365 plugins use a dedicated data access layer that never stores business data. All queries are executed in real-time against the live Dynamics environment, with no caching beyond the required Azure OpenAI service prompts.

Encryption follows the standard Microsoft 365 model: data in transit gets TLS 1.3, and data at rest uses service-managed or customer-managed keys. What's new is the ability to bring your own key (BYOK) to Cowork's task memory, ensuring that even the short-term state stored between tasks is encrypted with keys you control.

Early Reactions and Real-World Impact

Feedback from the preview phase has been cautiously optimistic. Contoso, a fictional multinational often used in Microsoft's case studies, reported a 30% decrease in time-to-close for mid-market deals. Real-world pilot participants on the Microsoft Tech Community forums praised the natural language interface but noted a learning curve in defining delegation profiles that balance autonomy with control. One IT manager wrote, "It's like onboarding a new employee who needs clear SOPs—except this one never sleeps and costs pennies per hour."

Common pain points include the complexity of setting up multi-step workflows that span multiple plugins. While the pre-built connectors handle simple chains, custom actions still require Copilot Studio or Power Automate flows, adding to the administrative burden. Microsoft's response was to ship 20 new "accelerator" templates on launch day, covering common scenarios like vendor onboarding, customer case escalation, and month-end financial close.

What This Means for Enterprise IT

Copilot Cowork's general availability signals Microsoft's bet that the next frontier of AI is not bigger models but more useful action-taking. For IT leaders, the immediate task is to understand the governance levers, model the cost impact, and run security reviews before flipping the switch. The good news: the administrative tooling is mature, thanks to lessons learned from the Copilot for Microsoft 365 rollout in 2023. The challenge: organizations must now treat AI as a digital workforce participant, complete with access reviews, performance metrics, and a seat at the identity governance table.

Looking ahead, Microsoft has teased deeper integrations with Teams Premium and Viva Insights, where Cowork could suggest well-being actions like rescheduling late-night meetings or booking focus time. Whether employees will welcome that level of proactivity remains an open question. For now, the focus remains squarely on business process automation, and with Dynamics 365 plugins in general availability, the path from idea to autonomous execution has never been shorter.