Copilot Cowork reaches GA with SharePoint permission stakes
Reviewed by Helen Jones
Microsoft made Copilot Cowork generally available worldwide on 16 June 2026 for Microsoft 365 Copilot customers. Cowork runs long-running, multi-tool tasks across Microsoft 365 work data and adds partner plugins, model choice, usage-based Copilot Credits and cost controls. Microsoft says prompts, responses and generated artifacts are governed by existing Microsoft 365 controls, with data loss prevention support still marked as coming soon.
Before general availability, most small admin teams could treat long-running agents as a preview concern. They still had time to clean external sharing links, direct permissions, stale sites and unlabeled content before agents became normal user-facing tools. Cowork changes the timing. If an agent can work across Teams, SharePoint, Outlook and files, every overshared library and abandoned workspace becomes part of the agent's working context unless admins narrow access first.
Analysis
Keep Cowork disabled or tightly scoped until your top active SharePoint sites have owners, external-sharing checks and direct-permission cleanup notes. Start with one controlled group and review what the agent can reach before expanding access.
Pulse published by Collab365 Spaces, reviewed by Helen Jones on . Cite as "Copilot Cowork reaches GA with SharePoint permission stakes", Collab365 Spaces. 2 sources referenced.