Guide · Chapter 0

Guide assumptions

This chapter summarizes the scope, limits, and boundary with custom development (SI) assumed by this guide for Copilot Studio.

1. Why you should read this chapter first

When you first encounter Copilot Studio, the expectation “What can I build with this?” is immediately followed by the question “Then can we build our system with it too?” This chapter clearly separates what Copilot Studio can and cannot do, and summarizes the boundary with custom development (SI) using practical criteria.

The conclusion first:

Copilot Studio is an “enterprise agent platform for building quickly and using safely,” not an “all-purpose AI development tool that does everything for you.”

If you understand this positioning clearly from the start, much of the later confusion around licensing, features, cost, and security is greatly reduced.


2. What Copilot Studio can do

Microsoft Copilot Studio is a low-code agent builder. With graphical tools, you can implement conversational AI agents without writing code, or with only minimal configuration. It is designed so agents can be built easily without data scientists or professional developers, while also allowing pro-code extensions when needed.

📖 Reference: Copilot Studio overview – What is an agent?

2.1 Natural-language conversational agents

An agent is an AI-powered conversational bot that understands users’ natural-language questions and provides appropriate responses. It is used in scenarios such as:

  • FAQ bot: business hours, product information, and automated answers to frequently asked questions
  • Internal guide bot: HR policies, IT manuals, and benefits guidance
  • Customer support bot: order tracking, returns processing, and account inquiries
  • Business automation bot: approval requests, email sending, and data lookup

Copilot Studio handles conversations in two ways:

  1. Topics: pre-designed conversation flows following structured patterns such as “trigger phrases → questions → conditional branching → actions → responses”
  2. Generative Answers: answers automatically generated by an LLM based on Knowledge sources

When Generative Orchestration is enabled, LLM-based multi-intent recognition runs instead of traditional NLU (Natural Language Understanding). It identifies multiple intents in a single utterance and automatically chains the appropriate topics, actions, and knowledge.

📖 Reference: Explore AI capabilities in Copilot Studio

📌 Core design philosophy
Copilot Studio is no longer about authoring hundreds of topics one by one. Its core philosophy is a hybrid approach: design only the topics for core business tasks and leave the rest to AI-powered generative answers. The fact that you do not need to create a separate topic for every question is the biggest difference from traditional chatbot solutions.

2.2 Responses based on internal data (Knowledge)

When you connect Knowledge sources to an agent, it provides generative answers based on internal documents and data. It works through RAG (Retrieval-Augmented Generation), summarizing and validating retrieved content before responding with citations.

Supported Knowledge sources:

Source type Type Description Quantity limits Authentication
Public website External Returns search results from websites provided through Bing Generative mode: 25 URLs / Classic mode: 4 URLs None
Documents Internal Searches document content uploaded to Dataverse Generative mode: all / Classic mode: Dataverse file storage limits None
SharePoint Internal Connects to SharePoint URLs and returns results through GraphSearch Generative mode: 25 URLs / Classic mode: 4 URLs (per node) Entra ID authentication
Dataverse Internal Connects to a configured Dataverse environment and performs RAG-based search Generative mode: unlimited / Classic mode: 2 sources (15 tables per source) Entra ID authentication
Enterprise data (connectors) Internal Connects through connectors to organizational data indexed by Microsoft Search Generative mode: unlimited / Classic mode: 2 per agent Entra ID authentication

📖 Reference: Knowledge sources summary · Quotas and limits

When Work IQ (Tenant Graph Grounding) is enabled, Copilot Studio agents use Semantic Search when searching SharePoint. This can improve search performance. (Enabled by default.)

Also, when referencing SharePoint, the agent inherits the original data permissions as-is. Documents and sites that a user cannot access are not included in responses, so you get the same permission-management experience as the existing M365 environment without managing separate permissions for the agent.

💡 Practical tip — optimizing Knowledge sources
  • Word documents return more accurate search results when their table of contents and heading structure (navigation structure) are well organized.
  • PPT files parse more accurately when the master layouts are cleanly organized.
  • When connecting SharePoint, enter the site URL, not a document library. Direct document library connections are not supported.
  • Structured Excel file data such as XLSX can be uploaded, but because the agent cannot execute code, it is difficult to expect optimal responses for analytical questions. Therefore, if your scenario requires data lookup through row- and column-based queries, adding the file as a Knowledge source alone is unlikely to produce the desired result. (Work through connectors and flows is required.)

2.3 Automation through Power Platform integration

  • From agent tools, you can use flows to run automation workflows such as approval requests, email sending, and data recording directly from the agent through native integration with Power Automate.
  • You can integrate internal systems through standard and premium connectors such as Outlook, Teams, SharePoint, Dataverse, SAP, and Salesforce.
  • With Agent Flow, you can run Power Automate flows within the Copilot Studio context and return results to the conversation.

📖 Reference: Use actions with custom agents · Call Power Automate flows

2.4 External system integration

  • Call external REST APIs through HTTP requests, or integrate with a wide range of services through more than 1,000 standard and premium connectors.
  • Create custom connectors to exchange data with internal and external systems.
  • Connect external MCP servers directly as tools through MCP (Model Context Protocol).

📖 Reference: Custom connectors overview · Connector reference

⚠️ Practical caution — how do you call a Copilot Studio agent from outside? Copilot Studio agents cannot be called directly from outside as a general REST API, and they do not provide an inbound endpoint in A2A or MCP form. To call Copilot Studio from an external system such as AI Foundry or a custom agent framework, choose one of the following three approaches.

ApproachSuitable scenariosCharacteristicsReference
M365 Agents SDK
Copilot Studio client
User-context (delegated) calls
Teams, web apps, and M365 environments
✅ Officially recommended path with SDK-based development convenience
⚠️ Service principal/daemon scenarios are not supported → use Direct Line in that case
Learn
Direct Line API Backend services, daemons, orchestrators
Non-Microsoft frameworks
✅ Most general-purpose option, supports both HTTP and WebSocket
⚠️ Requires more development work for tokens, conversation lifecycle, and related areas
Learn
Power Platform
Connector wrapper
PoCs, low-code-first scenarios, existing Power Platform operations ✅ Fastest implementation, can be called directly from Power Automate/Power Apps
⚠️ Throttling (300 calls/60 sec/connection), not ideal for large-scale orchestration
Learn

Conversely, in the Copilot Studio → external agent direction, Connected Agents support connections to Foundry agents, M365 Agents SDK agents, and A2A agents, while MCP works in the outbound direction by importing external tools/resources.

2.5 Advanced AI-powered capabilities

Copilot Studio provides a variety of AI capabilities beyond a simple chatbot.

AI capability Description Limits/considerations Reference
Generative Orchestration Multi-intent recognition; automatic chaining of topics, knowledge, and actions Orchestration length limits Learn
Generative Answers Dynamic answer generation based on Knowledge sources, including summaries and citations Depends on data quality Learn
Generative Builder Create and update topics with natural language Requires human validation Learn
Computer Use Visually interprets screens to automate desktop tasks Requires a dedicated machine; Preview Learn
AI Prompts Gives direct instructions to AI models to generate custom responses Performance varies by model Learn
AI Approvals Automatically makes approval decisions based on predefined criteria Still evolving Learn

2.6 Multi-channel deployment

Created agents can be deployed to multiple channels at the same time:

  • Microsoft Teams — the most common internal deployment channel
  • Website — iframe embed or custom web chat
  • Microsoft 365 Copilot — exposed as an agent plugin in Copilot Chat
  • Facebook Messenger, Slack, WhatsApp — B2C customer engagement
  • Direct Line API — custom app integration

📖 Reference: Publish and deploy your agent

2.7 Multilingual support

  • Copilot Studio supports many languages, including Korean.
  • When creating an agent, you can set the primary language to create an agent that can recognize and respond in Korean.
  • Korean reference materials (Knowledge) also work well.

3. Where Copilot Studio has limits

Copilot Studio is a powerful tool, but it is not suitable for every scenario. The following limits come from official documentation, practical experience, and internal customer cases.

3.1 Complex business logic processing

  • If multi-step conditional branching, complex calculations, or large-scale data processing is required, it is difficult to implement with topic flows alone.
  • In this case, you should separate the logic into external components such as Power Automate or Azure Functions.
  • For long-running stateful behavior or complex transaction processing, custom development (Azure/SI) is recommended.

3.2 Advanced UI/UX customization

  • Adaptive Card support is limited, and if you need custom rendering beyond basic text formatting, you need development that connects the frontend through a separate Agent SDK.
  • Fine-grained developer control over API calls, actions, and response formatting is limited.

📖 Reference: Choose the right tool – Copilot Studio Pros/Cons

3.3 Data processing constraints (specific numbers)

Limit item Value Notes
Connector payload 5 MB (public cloud), 450 KB (GCC) Large data must be split
SharePoint file count 1,000 files / 50 folders per Knowledge source Up to 10 sublevels
SharePoint file size 200 MB with M365 Copilot, 7 MB without it Requires Enhanced Search
File upload Up to 500 files, 512 MB each Separate from SharePoint Knowledge
Number of topics 1,000 per agent (Dataverse environment)  
Trigger phrases 200 per topic  
Instructions 8,000 characters For Copilot agents
SharePoint lists Only up to 2,048 rows can be queried Use caution with large data

📖 Reference: Quotas and limits for Copilot Studio

Additional constraints:

  • Loop files cannot be used directly as Knowledge sources (currently Feature In Review).
  • Classic ASPX pages, modern pages containing SPFx components, and custom CSS/accordion navigation sites in SharePoint are not used for Generative Answers.
  • Questions that directly reference a filename (for example, “What does file-name.pdf say?”) cannot be answered.

3.4 Real-time bidirectional data synchronization

  • Copilot Studio basically works in a request-response pattern.
  • WebSocket-based real-time synchronization, event streaming, and similar mechanisms are not supported.

3.5 Source control and CI/CD

  • Power Platform officially supports solution-based ALM, and you can configure CI/CD pipelines through Power Platform Build Tools (Azure DevOps) and GitHub Actions for Power Platform.
  • With the Power Platform CLI (pac), you can unpack solutions into individual files, commit them to Git, and apply PR-based code review workflows.
  • Using Pipelines in Power Platform, you can configure a no-code deployment pipeline across Dev → Test → Prod environments within the Admin Center.
  • Through the Copilot Studio VS Code extension, you can edit agents locally as YAML files and integrate with Git by using pac copilot commands to push/pull.
  • However, because Copilot Studio UI does not include built-in functionality for direct Git integration or PR creation, you must compose the tools above to build a separate ALM pipeline.

3.6 On-premises-only environments

  • Because Copilot Studio is a cloud-based SaaS service, it cannot run in a fully on-premises environment.
  • However, hybrid configurations using On-Premises Data Gateway and Azure vNET are possible.

📖 Reference:
Power Platform vNet setup and configuration
Hands-on: Integrating Copilot Studio with VNet

⚠️ Top 5 misunderstandings when starting Copilot Studio
  1. "If we have M365 Copilot, Studio is fully included, right?" → ❌ External channel deployment and author permissions are separate. A Copilot Author Role or Studio User is required.
  2. "I see a premium connector warning" → The actual restriction depends on the "deployment channel." It is not a restriction of the connector itself, so do not misinterpret it.
  3. "If I upload files as a Knowledge source, is there no cost?" → If you choose to upload files directly to a Knowledge source, Dataverse storage is consumed.
  4. "The network block is not being lifted" → Copilot Studio requires access to Power Platform URLs. Conflicts with Conditional Access / MDCA / Proxy are common, so coordinate with the security team in advance.
  5. "The agent will just figure everything out like a person, right?" → You must clearly define role / tool / output constraints in the instructions. If you do not enforce the format with prompts, the failure rate increases.
💡 Credit-related cautions confirmed from practical experience
  • Tests in the Copilot Studio Test Panel do not consume credits.
  • Usage in real channels after publishing consumes credits regardless of answer accuracy. This also applies when the answer fails.
  • Message-count monitoring is available in the Power Platform Admin Center.
  • Connectors can be blocked by DLP (Data Loss Prevention), which requires checking tenant- and environment-level policies.

4. Boundary criteria: Copilot Studio ↔ custom development (SI)

4.1 Decision criteria table

Decision criterion Copilot Studio only Copilot Studio + Azure extensions Custom development (SI)
Conversation complexity Simple FAQs, guidance, information lookup, branches of three steps or fewer Medium to high complexity, conditional branching + action chaining + multi-agent Multi-step branching, long-term context retention, complex conversation flows
Data sources SharePoint, websites, Dataverse, uploaded documents + Internal DBs (via Azure Functions, Data Gateway, VNet), custom connectors, HTTP APIs, MCP servers Direct internal DB integration, legacy systems, large-scale unstructured data
Business logic Knowledge-based responses, simple topic branches Medium-complexity logic through Agent Flow, Azure Functions, and API Management Complex transactions, calculation logic, multi-system consistency
UI/UX requirements Basic chat UI, text/image responses Adaptive Cards, structured response formats Custom dashboards, visualization, kiosk/native apps
Deployment channels Teams, web, M365 Copilot (built in) + Slack, Facebook, WhatsApp, Direct Line Custom apps, kiosks, embedded, fully custom
Maintenance owner Business users/citizen developers operate independently Citizen developers + IT/development team or COE collaboration Professional development team
Build duration Days Weeks Weeks to months
Authentication/security Basic Entra ID integration Entra ID + OAuth2 connectors + VNet/Private Endpoint Custom authentication, mTLS, SAML, etc.
Source control Solution export/import + pac CLI, Build Tools, GitHub Actions Git, full Azure DevOps CI/CD
AI engine Copilot Studio built-in LLM + AI Prompts, reasoning models, Foundry Agent integration Custom models, specialized RAG pipelines
Infrastructure integration None (Knowledge sources only) Internal DB/on-premises integration through Azure Functions, Data Gateway, and VNet No constraints
Cost structure Within M365 Copilot B2E free scope Copilot Credits + Azure resource cost Direct management of Azure/infrastructure cost

4.2 Copilot Studio vs custom development (SI) vs Azure AI Foundry

The following summarizes the three options most often compared in practice.

Category Copilot Studio Custom development (SI) Azure AI Foundry
Development approach Low-code (graphics + YAML) Full-code Model/prompt-centered
Build speed ✅ Very fast (days to weeks) ❌ Slow (weeks to months) ⚠️ Medium
Maintenance ✅ Business owners can handle it ❌ Requires professional development team ⚠️ Requires ML specialists
Complex logic ⚠️ Limited (can be supplemented with Power Automate Flow) ✅ Best fit ✅ Possible
PoC ease ✅ Best fit ❌ Difficult ⚠️ Medium
Governance ✅ Built into Power Platform ❌ Must be designed directly ⚠️ Separate configuration required
Frontend ✅ Microsoft-provided by default ❌ Must be built directly ❌ Must be built directly
Channel management ✅ Built-in Teams/web/Slack, etc. ❌ Must be built directly ❌ Must be built directly

Important: Copilot Studio is an agent productization tool, Foundry is an AI engine, and SI is system implementation. The three are complementary, not competing. Depending on who will develop the agent, the purpose, and the difficulty, you can select and combine them appropriately to enable agent development and operations at optimized cost.

4.3 Practical decision-making framework

Requirements analysis
  ├─ ① Can Studio cover 70% or more?
  │    ├─ Yes → Copilot Studio baseline + supplement the rest with PA/Azure
  │    └─ No → ② Is conversational UI the core requirement?
  │         ├─ Yes → Hybrid architecture (Studio frontend + Azure backend)
  │         └─ No → Custom development (SI)
  │
  ├─ ③ Is maintenance owned by business users?
  │    ├─ Yes → Prioritize Copilot Studio (autonomous citizen-developer operations)
  │    └─ No → Custom development is more likely
  │
  └─ ④ Is there a company-wide rollout plan?
       ├─ Yes → Studio (built-in governance and channel management)
       └─ No → Choose based on purpose

4.4 Feedback from real enterprise customers

The following summarizes feedback that repeatedly appears when enterprise customers in Korea evaluate adopting Copilot Studio.

👍 Positive feedback (common):

  • Perceived PoC speed: “I have never seen an agent run this quickly”
  • Business-side autonomous modification: “We can modify it directly without going through IT”
  • Combination with M365 Copilot: “Having our dedicated agent attached to the existing Copilot Chat increases perceived value”

👎 Recurring issues:

  • Difficulty understanding the licensing/permission structure
  • Misunderstandings about premium connector warning messages
  • Conflicts with network/security teams (CA policies, proxy settings)

❓ Frequently asked questions:

  • “Can it call external systems too?” → Systems can be called by using connectors.
  • “Will costs explode?” → M365 Copilot users get B2E free usage (conditions apply; explained in detail in Ch1)
  • “Will it run automatically if a person does not approve it?” → Constraints must be clearly set in the instructions
💡 Practical tip — principle for adoption decisions When judging "how much can be done with Copilot Studio," decide based not on whether a feature exists, but on maintainability and extensibility.
If Studio can cover more than 70% of the requirements, choose Studio as the baseline and use a **hybrid architecture** to supplement the remaining 30% with Power Automate or Azure Functions.
📌 Copilot Studio from a governance perspective Copilot Studio includes Power Platform's governance framework by default:
  • Environment separation: Dev / Test / Prod environment management
  • DLP (Data Loss Prevention): control connector usage and block external data exfiltration
  • Role-based access: Entra ID + Dataverse security roles
  • Audit logs: integration with Microsoft Purview + Sentinel
  • ALM (Application Lifecycle Management): solution-level packaging and migration between environments
— Learn: Copilot Studio governance principles