Governance & Security
What's still active, what's been retired, and how I recommend using each tool, based on what I'm seeing with customers right now.
Governance & Security
Why Copilot Studio has no static IP list, which controls actually govern traffic in and out of your agents and flows, and how I explain the options to security and network architects.
Cost & Licensing
How Copilot Studio is actually billed, where the money goes, and the guardrails I set up with customers before the first surprise invoice.
Governance & Security
How I help security, compliance and platform teams get their data estate ready for knowledge-grounded and tool-using agents, and which controls map to which threats.
Agent Architecture
Copilot Studio is now a multi-harness platform. Here's what a harness is, how the Standard and GitHub Copilot harnesses really differ, and how I help makers and admins choose without surprises on quality or cost.
Governance & Security
Every Copilot Studio agent has three doors: how users sign in, who it's shared with, and where it's published. Here's how I help customers lock each one before anything goes live.
Agent Architecture
How to add an MCP server, pick the right authentication, and troubleshoot the "tools show up but nothing works" problem, based on what I've seen with customers.
Agent Architecture
The structure, rules, and testing habits I use when I help makers write instructions for Copilot Studio agents, including what changed after five rounds on a finance agent.
Governance & Security
Practical guidance from my customer conversations, whether you're setting up your first environments or tightening governance on a tenant that's been live for years.
Operations
What actually breaks when an account is disabled, how ownership differs from the identity a flow or agent runs as, and the offboarding runbook I recommend.
Agent Architecture
How I help customers pick the right way to build a solution, starting from the problem instead of the product.
Governance & Security
From the field archive · Learned in 2024
The same ten questions came up in almost every security review. Here they are, with the answers I'd give today, checked against current public documentation.
Agent Architecture
From the field archive · Learned in 2024
What I learned helping customers whose agents gave thin, wrong or missing answers from SharePoint, and what I'd configure today.
Agent Architecture
From the field archive · Learned in 2023
In late 2023 every bot team I worked with had the same three questions. Here's what actually changed, how I moved classic chatbots across, and where a migrated bot should land today.
Agent Architecture
From the field archive · Learned in 2023
Why an agent stops waiting for a slow flow, how I explained it to customers back then, and the patterns I recommend now that agent flows, express mode and asynchronous responses exist.
Cost & Licensing
From the field archive · Learned in 2023
A utility would only buy if it could charge chatbot usage back to departments. Here's the workaround we built in 2023, and the native controls I'd use today.
No posts match your search.