For MSPs

What should an MSP check before rolling out Microsoft 365 Copilot?

Check what Copilot will be able to see before anyone starts using it. Copilot can surface anything a user can reach, so readiness comes first: a Microsoft 365 tenant review, a SharePoint and OneDrive oversharing and permissions cleanup plan, sensitivity labels, and a pilot group. Guava’s AI Rollout starts with this and runs 3–6 weeks for $25,000.

The readiness checklist

  • 1. Tenant review Licenses and admin roles, which SharePoint sites, Teams and OneDrive accounts hold what, and how sharing with people outside the company is set up.
  • 2. Oversharing cleanup Find the sites, libraries and files open to the whole company, old sharing links, and groups or sites nobody owns. Fix the riskiest before the pilot and plan the rest.
  • 3. Sensitivity labels Label what’s confidential, such as HR, finance and client contracts, and switch on the data protection your licenses include.
  • 4. Pilot group A small group with real work Copilot can help with, and a measured baseline for that work before they start, so you can show what changed.
  • 5. Then switch it on Pick 3–5 use cases, set up Copilot and its connectors for them, then train the team and track adoption.

Why readiness comes first

Copilot doesn’t change who can open what. It makes whatever a user can already open easy to find. In many tenants people can open far more than they should, from a salary spreadsheet shared with the whole company years ago to a client folder nobody locked down. Before Copilot, nobody went looking. With Copilot, one question can bring it up.

How Guava does it

  • AI Rollout $25,000, 3–6 weeks. Ready (the checklist above), then Activate (3–5 use cases with measured baselines, configuration and connectors), then Adopt (team training and adoption tracking). It also works for Copilot licenses you already pay for but barely use.
  • Ongoing Optimization & Governance $4,000 a month, cancel anytime. Access and connector reviews, including Copilot agents and admin rights, and a quarterly governance review as your tenant changes.
  • AI Assessment $4,000, 2 weeks, if you’re not sure yet that Copilot is the right platform. Credited in full toward the Rollout.

I do the work myself, inside your tenant, with the narrowest access that works. I log what I touch and return admin at handover. See the engagements

Then sell it

Once your own tenant is ready, Copilot readiness is a service your team can sell, because most MSPs’ clients already run on Microsoft 365. How an MSP starts selling AI services

Questions MSP owners ask

Does Copilot respect our existing permissions?

Yes. Copilot only shows a user what that user can already open. That’s the risk: in many tenants people can open far more than they should, and Copilot makes it easy to find.

Do we need sensitivity labels before switching Copilot on?

Copilot works without them, but labeling confidential files first is the safest way to start. The Ready phase decides which labels you need and what to label first.

How long does Copilot readiness take?

It’s the first phase of the 3–6 week AI Rollout. How long it takes depends on your tenant, and the written scope sets the end date before you sign.

We already pay for Copilot and nobody uses it. Can you help?

Yes. The Rollout covers licenses you already pay for: the same readiness work, then 3–5 use cases with measured baselines, then training.

Is readiness only for Copilot?

No. The Ready phase covers data readiness on any platform, including Claude Enterprise and ChatGPT Enterprise. On Microsoft 365 it’s Copilot Readiness.

More questions MSP owners ask

Talk it through.

Twenty minutes on what Copilot would see in your tenant today. Prefer email? romeo@workwithguava.com