Applied AI
Microsoft 365 Copilot for business, permissions first
Microsoft 365 Copilot shows each user whatever they can already open. We put the permissions right first, then pilot it on real tasks, train people for their role and measure the time it recovers.
Who it is for
Organisations on Microsoft 365 that are deciding whether to buy Copilot, and those that bought licences and see little use. Professional practices especially, and any business that keeps client, financial or HR files in SharePoint, OneDrive and Teams.
What you get
Copilot, or the AI tool that suits the task better, working inside the apps your people already use, on a tenant whose sharing was reviewed first. You get an AI use policy, a trained pilot group, measures taken before and after, and a named owner in your business for each tool.
The problem
Copilot shows each user whatever that user can already open in Microsoft 365. If a finance folder is shared with everyone, Copilot can surface it to everyone.
Copilot creates no new access. It finds and summarises whatever each person could already reach, so the old "share with everyone" links, the broad group access and the forgotten Teams sites become visible in a sentence. That is oversharing, and it is fixed in the Microsoft 365 permissions before any licence is bought.
The other common outcome is low use. Licences are bought, people try the tool for a week, and the old way comes back. Usually nobody picked the tasks it was for, nobody trained people on them in their own role, and nobody measured what changed. Adoption changes how a workflow runs, so we treat it that way: a pilot group, agreed tasks, a baseline, and the same measures afterwards.
What Copilot stands on matters as well. Microsoft 365 Business Premium is the secure foundation most small businesses should be on first. Copilot with Microsoft Purview adds AI inside the apps, with data classification, sensitivity labels and data loss prevention. Microsoft Agent 365 adds an inventory and lifecycle controls once a business runs AI agents. We read those layers as a diagnostic: which one your data and your use of AI need, and which one is missing.
What Odyssey provides
- Shadow AI protection with DefensX and an AI use policy agreed with you
- A Microsoft 365 permissions and sharing review before any Copilot licence
- Microsoft 365 Copilot licences supplied, set up and managed by us
- Tools chosen against two or three real tasks in each role
- Ready-made AI agents where one fits the task, configured and supported by us
- A pilot group, with a baseline taken first and the same measures taken after
- Training for each role: what the tool is for, what never goes into it, how to check its output
- A named owner in your business for every tool, and support through our service desk
What is included
| Included | Detail |
|---|---|
| Discovery | The AI tools staff already use, from a short survey and, where you agree, DefensX browser discovery |
| Policy | An AI use policy written with you, covering approved tools, permitted data, review of output and how to ask for a new tool |
| Permissions | SharePoint, OneDrive and Teams sharing reviewed, over-shared content fixed, and sensitivity labels applied where the business needs them |
| Licences | Microsoft 365 Copilot licences sourced, assigned and reviewed as people join and leave |
| Pilot | A pilot group with agreed tasks, a baseline before it starts and the same measures afterwards |
| Training | Sessions for each role on the chosen tasks, on what never goes into the tool and on checking its output |
| Handover | Who owns each tool in your business, how to request a new one, and what we report |
Not included, or sold separately
- Custom code and integrations
- Anything beyond product configuration is scoped as Custom AI and Integrations
- Data clean-up and migration
- Work beyond the permissions review is scoped as its own project
- Personal devices
- AI use on unmanaged personal phones and computers is outside the controls
- Legal and data protection advice
- We work from a security standpoint, and your data protection adviser confirms the policy
- Decisions made on AI output
- Your staff stay responsible for what they do with a draft
How it is delivered
-
Discover
Which AI tools are in use already and what data goes into them, and the two or three tasks in each role that Copilot will be judged against.
-
Put the permissions right
Sharing across SharePoint, OneDrive and Teams reviewed, over-shared content fixed and sensitivity labels applied where they are needed, before a licence is bought.
-
Pilot
A small group uses Copilot on the agreed tasks. The baseline comes first, so the time recovered and the quality of the output can be compared afterwards.
-
Train
Sessions for each role on the chosen tasks: what the tool is for, what must never go into it, and how to check its output before it is used.
-
Go live and hand over
Licences for the roles where the pilot justified them, a named owner for each tool, and support through the service desk you already call.
How you would buy it
Every hour we work falls under one of four engagement models. These are the ones that fit this service; How we work compares all four.
-
01
Consumed
Ad hoc work, no commitment
Small additions afterwards, such as training another team or reviewing a new tool request, are charged for the time they take.
-
02
Fixed price
A defined piece of work or project
The rollout, from discovery and the permissions review to the pilot, training and handover, is surveyed and priced before we start.
-
03
Retainer
The way most of our clients work with us
Clients already on a retainer can draw minor work, such as permission changes and new tool requests, from their retained hours.
Why trust Odyssey with this
-
ISO
ISO 27001 and ISO 9001 certified by NQA
-
In-house
All work done by Odyssey employees, never subcontracted
- We supply, set up and manage Microsoft 365 Copilot
- Our own staff work under the same shadow AI controls
Questions people ask
Is Microsoft 365 Copilot safe for business data?
Copilot shows each user whatever that user can already open in Microsoft 365. It is as safe as your permissions: if a finance folder is shared with everyone, Copilot can surface it to everyone. Review sharing and fix over-shared content before buying licences.
What do I need before buying Copilot?
A qualifying Microsoft 365 plan, permissions you have reviewed, sensitivity labels where the business needs them, and two or three real tasks to judge it against. Microsoft 365 Business Premium is the secure foundation most small businesses should be on first.
What is Copilot oversharing?
Oversharing is when Copilot surfaces files a user could technically open but was never meant to see, usually because of old "share with everyone" links or broad group access. It is fixed in Microsoft 365 permissions, not in Copilot.
Do you supply Microsoft 365 Copilot?
Yes. Odyssey supplies, sets up and manages Microsoft 365 Copilot, and reviews the tenant's permissions before any licence is bought.
Why do my staff not use Copilot?
Usually because nobody picked the tasks it is for, nobody trained people on them, and nobody measured the result. Adoption needs a pilot group, role-based training and a before-and-after measure.
Do you train staff to use Copilot?
Yes, as part of the rollout. Each role learns the tasks chosen for it, what must never go into the tool, and how to check what it produces before using it.
Can we try Copilot before buying it for everyone?
Yes. A pilot group uses it on agreed tasks first, with a baseline taken before and the same measures afterwards, so the decision on wider licences rests on your own results.
Challenges this helps with
Related services
Ask about AI adoption and Copilot
Send us your question and we will come back to you. We call back within the hour in office hours.
Rather talk? Call 01642 661888. Already a customer with a fault? Call the service desk on 01642 661800.
Please fill in every field marked *, then send again.
That email address does not look right. Please check it and send again.
We have had several messages from you in a short time. Please call us on 01642 661888 instead.
Online messages are paused for the moment. Please call us on 01642 661888.
Your message is too long for this form. Please shorten it, or call us.
Something went wrong on our side and your message was not sent. Please call us on 01642 661888.
We could not confirm that a person sent this message. Please try again, or call us on 01642 661888.
Talk to a human about AI adoption and Copilot
Call and we answer within three rings. Or tell us what you need and we will call you back at any time.