Control Copilot Cowork access with pilot groups and credit limits
Diesen Beitrag auf Deutsch lesen
Enable Copilot Cowork through usage-based billing, then limit access to a security-group pilot with monthly credit caps and alerts.
TL;DR
Copilot Cowork requires usage-based billing in the Microsoft 365 admin center, even for licensed Microsoft 365 Copilot users. Create a security-group pilot, configure a spending policy with monthly and per-user Copilot Credit limits plus alerts, restrict access to that group, and review Consumption data before wider rollout.
Original by Anders Jensen, on andersjensenorg. Read the original
This is our own summary, not a republication or full translation.
Governance takeaway
- Admins/CoE: Create a security group for the pilot and select Specific groups rather than All users, so Cowork access is limited from the start.
- Security/Compliance: Set monthly policy and per-user credit limits with an alert before activation; limits are enforced and users lose access after reaching their cap.
- Leadership/Business: Review Cost management Consumption data after the pilot and adjust limits before broader rollout to avoid consumption-based billing surprises.
Frequently asked questions
Which admin roles are needed for Cowork billing and spending policies?
A Global Administrator or Billing Administrator chooses the billing method, while an AI Administrator can create spending policies and set limits.
How do I limit Cowork to a pilot group instead of the whole organization?
The default scope is organization-wide. Choose Customize setup configuration, open User and group access and select Specific groups.
What happens when someone reaches the credit limit?
Access is lost until the first day of the next month. In the article's example with 20,000 monthly credits, an alert at 15,000 sends an email immediately and weekly until the first.