Skip to main content
Microsoft Copilot StudioProduct page

Microsoft Copilot Studio Signals

What leaders and teams rolling out Microsoft Copilot Studio report, with every finding tied to its evidence.

Read the findings

What the evidence says

Whose sources count

Practitioner sentiment, all users

−53 Strong negative from 38 sources that take a side

How this figure is made

Strong negative overall signal, net 53 points negative

From 36 authors in 36 discussions. Run a pilot on one live workflow to measure failed runs and the time spent fixing them.

Analyzed
66 total sources
Top praise
Microsoft 365 & Teams Reach (4 of 7 sources) See praise evidence
Top concern
Reliability & Bugs (10 of 12 sources) See concern evidence

Jan 2025 to Oct 2026.

52 sources from practitioners, by month and sentiment.

Of the 38 accounts that state a view, 23 are negative, 10 mixed, and 5 positive. Reliability and bugs draw the most reports, 10 of 12 raising a problem. Connectors and MCP draw 6 critical accounts to 2 positive, and all 5 sources on model choice praise being able to pick GPT or Claude models.

Positive, mixed and negative sources

The score counts them as 4 positive, 9 mixed and 23 negative votes, one per author. See How the numbers work.

See the evidence

Below: 4 praise themes, 7 concerns, 2 close to agreement and 1 disagreement.

Findings

Counted for All users, from 52 sources. Change group

What practitioners praise

Every capability practitioners describe positively, ranked by how many sources say so. Open one to read who said it.

  1. Microsoft 365 & Teams Reach4 of 7 sources on it praise itAgents grounded in SharePoint and Microsoft Graph and published to Teams and the Microsoft 365 app.

    Counted for All users.

    Positive, 4

    1. Mixed

      Firm_Pin4840, Reddit user

      Copilot Studio - topic-scoped knowledge vs. tenant graph grounding (cost question)Reddit post, r/copilotstudio

      Tenant graph grounding gives good answers but costs 10 credits a message, so the poster plans to split the PDFs into topic folders with their own answer nodes and asks how topic changes are billed.

      Published Oct 18, 2026self-described: Builds internal agents over large SharePoint PDFs

    2. Positive

      Quothling, enterprise IT at a European energy company

      Comment on: Wine 11 rewrites how Linux runs Windows games at kernel with massive speed gainsHacker News comment

      Built an HR flow in a couple of hours that reads job applications, answers irrelevant ones, creates a Teams site with the right people, and invites the applicant to a first meeting. It works better than the commenter expected, and Entra ID made the access setup easy.

      Published Mar 25, 2026self-described: Energy sector company's IT department building HR automation

    3. Positive

      p_ing, Hacker News commenter

      Comment on: Microsoft 365 Copilot's commercial failureHacker News comment

      The commenter's organization uses both versions: the lite one reaches SharePoint and Teams data quickly, and the full one reaches any system with a Power Platform connector, REST API, MCP server or Copilot connector, such as SAP, SQL or Databricks.

      Published Oct 5, 2025self-described: Organization making heavy use of Copilot Studio lite and full

    4. Positive

      ajcp, Hacker News commenter

      Comment on: Orbit by MozillaHacker News comment

      Calls Copilot Studio, the former Power Virtual Agents, unique among enterprise AI offerings and expects it to become Microsoft's main way for companies to run AI internally.

      Published Jan 3, 2025self-described: Enterprise AI tools compared from work

    Mixed or negative, 3

    1. No opinion stated

      Diligent_Banana9903, Reddit user

      Why can't we pin our Copilot Studio agent in Microsoft 365?Reddit post, r/copilotstudio

      An agent published to SharePoint, Teams and the Microsoft 365 app for an Entra group does not appear in the admin center's pinned agents list, although users can reach it by link.

      Published Oct 27, 2026self-described: Organization with AI and Global Administrators publishing an agent to an Entra group

    2. Negative

      PAARTHPATEL, Reddit user

      Copilot Studio agent behaves differently in Teams and test paneReddit post, r/copilotstudio

      The agent sometimes stops responding in Teams until a debug command clears its state, and a question node that appears in the test pane never appears in Teams.

      Published Oct 22, 2026self-described: Team running a topic-based agent with SharePoint knowledge in Teams

    3. Mixed

      redsaeok, Reddit user

      Stand Agent Subagents in TeamsReddit post, r/copilotstudio

      The GitHub Copilot harness worked well, but the team's manager balked at its cost, so the poster spent a week rebuilding on the standard harness. The rebuild works in the studio but behaves badly in Teams, where it locks onto one sub-agent.

      Published Oct 20, 2026self-described: Team whose manager reviews agent running costs

    Open them in the record
  2. Ease of Building3 of 7 sources on it praise itWhether people without programming backgrounds can build and change agents in the studio.

    Counted for All users.

    Positive, 3

    1. Positive

      W.R. Vishnu, independent Microsoft 365 consultant

      Copilot Studio New Agent Experience: Easy Skill-First 2026Personal blog post, wrvishnu.com

      The rebuild with four skill files, three flows and connector tools took a fraction of the topic authoring the classic version needed. Routing to a stale tool and vague skill descriptions still cost hours.

      Published Jul 22, 2026self-described: Rebuilding the author's HR Leave Assistant agent in the new agent experience

    2. Mixed

      David Ramel, editor and writer at Converge 360

      Hands On: Getting Started with Microsoft Copilot Studio AgentsHands-on review, Virtualization Review

      Creating the agent felt fast and approachable, but retrieval surfaced only one worksheet tab, and the data had to be restructured before the answers worked.

      Published Mar 26, 2026self-described: A personal agent over a SharePoint-hosted Excel tracker of the author's own articles

    3. Positive

      Quothling, enterprise IT at a European energy company

      Comment on: Wine 11 rewrites how Linux runs Windows games at kernel with massive speed gainsHacker News comment

      Built an HR flow in a couple of hours that reads job applications, answers irrelevant ones, creates a Teams site with the right people, and invites the applicant to a first meeting. It works better than the commenter expected, and Entra ID made the access setup easy.

      Published Mar 25, 2026self-described: Energy sector company's IT department building HR automation

    Mixed or negative, 4

    1. Negative

      amkamdar, non-developer business owner

      Why can't we use they A.I itself to create and design the workflow for the Agent?Reddit post, r/copilotstudio

      Moved to Copilot Studio for security reasons, but as a non-developer finds designing the agent very difficult, where another chatbot built the same job from plain directions.

      Published Oct 23, 2026self-described: Small business turning PDF sales orders from a mailbox into ERP entries

    2. Negative

      NoMoreNicksLeft, Hacker News commenter

      Comment on: Jira Is Turing-CompleteHacker News comment

      Setting up logic in Copilot Studio is painful and worse without a high-memory machine. Driving it from Claude also failed: the pac CLI was broken and the web pages responded to clicks about 10 seconds late.

      Published May 25, 2026self-described: Building agent logic in Copilot Studio at work

    3. Negative

      Atiscant, Hacker News commenter

      Comment on: Jira Is Turing-CompleteHacker News comment

      Calls it ironic that Microsoft's tool for building AI is so hard to drive with AI, and calls Copilot Studio a hot mess in the commenter's own use.

      Published May 25, 2026self-described: Building agents in Copilot Studio

    4. Negative

      pbronez, Hacker News commenter

      Comment on: Microsoft lowers AI software growth targetsHacker News comment

      Lists the roadblocks: poor determinism that forces tools into Power Automate, no secure way to share agents, a laggy studio with no clear source control, and a Calendar MCP that still cannot book a meeting. The commenter says it did not deliver and is looking at other platforms.

      Published Dec 3, 2025self-described: Deploying Copilot Studio and Power Platform for an enterprise on Microsoft's US Government Community Cloud

    Open them in the record
  3. Agent Flows & Automation2 of 6 sources on it praise itFlows that agents call, agents inside flows, and automation of business processes with them.

    Counted for All users.

    Positive, 2

    1. Positive

      Quothling, enterprise IT at a European energy company

      Comment on: Wine 11 rewrites how Linux runs Windows games at kernel with massive speed gainsHacker News comment

      Built an HR flow in a couple of hours that reads job applications, answers irrelevant ones, creates a Teams site with the right people, and invites the applicant to a first meeting. It works better than the commenter expected, and Entra ID made the access setup easy.

      Published Mar 25, 2026self-described: Energy sector company's IT department building HR automation

    2. Positive

      W.R. Vishnu, independent Microsoft 365 consultant

      Copilot Studio New Agent Experience: Easy Skill-First 2026Personal blog post, wrvishnu.com

      The rebuild with four skill files, three flows and connector tools took a fraction of the topic authoring the classic version needed. Routing to a stale tool and vague skill descriptions still cost hours.

      Published Jul 22, 2026self-described: Rebuilding the author's HR Leave Assistant agent in the new agent experience

    Mixed or negative, 4

    1. Mixed

      Marlon König, Power Platform practitioner and conference speaker

      Sorry, something unexpected happened: Calling a Copilot Studio (New Experience) agent from Power AutomatePersonal blog post, marlon-koenig.com

      An agent that worked poorly in classic Copilot Studio worked a lot better in the new experience. Calling it from Power Automate returned an error while the flow still reported success, and the workaround took days.

      Published Jul 30, 2026self-described: A business agent from a customer project

    2. Negative

      moi2388, Hacker News commenter

      Comment on: Microsoft Introduces 'Copilot Mode' in EdgeHacker News comment

      Says building a custom agent in Copilot Studio amounts to building Power Automate flows that an LLM calls.

      Published Jul 30, 2025self-described: Building custom agents in Copilot and Copilot Studio

    3. Negative

      Freggel1995, Reddit user

      Copilot Studio Inline Agent stops processing uploaded files and generates incomplete Word documentsReddit post, r/copilotstudio

      The inline agent appears to receive file data in encoded form, and in asynchronous mode it stops after about 3 minutes, leaving the Word document empty or half filled.

      Published Oct 9, 2026self-described: Flow that passes uploaded files to an inline agent to fill a Word template

    4. Negative

      pbronez, Hacker News commenter

      Comment on: Microsoft lowers AI software growth targetsHacker News comment

      Lists the roadblocks: poor determinism that forces tools into Power Automate, no secure way to share agents, a laggy studio with no clear source control, and a Calendar MCP that still cannot book a meeting. The commenter says it did not deliver and is looking at other platforms.

      Published Dec 3, 2025self-described: Deploying Copilot Studio and Power Platform for an enterprise on Microsoft's US Government Community Cloud

    Open them in the record
  4. Connectors & MCP1 of 7 sources on it praise itReaching business systems through Power Platform connectors, MCP servers, Copilot connectors, and REST APIs, and whether those connections hold up.

    Counted for All users.

    Positive, 1

    1. Positive

      p_ing, Hacker News commenter

      Comment on: Microsoft 365 Copilot's commercial failureHacker News comment

      The commenter's organization uses both versions: the lite one reaches SharePoint and Teams data quickly, and the full one reaches any system with a Power Platform connector, REST API, MCP server or Copilot connector, such as SAP, SQL or Databricks.

      Published Oct 5, 2025self-described: Organization making heavy use of Copilot Studio lite and full

    Mixed or negative, 6

    1. Negative

      Flangipan, Reddit user

      Copilot agent searching ServiceNow knowledgeReddit post, r/copilotstudio

      The agent can reach only excerpts of ServiceNow articles, although the same connector works in Microsoft 365 Copilot search.

      Published Oct 2, 2026self-described: Teams agent over a ServiceNow knowledge base

    2. Negative

      MarcoLema1, GitHub user

      Hosted Tableau MCP (mcp.tableau.com) unusable from Microsoft Copilot Studio - no registration_endpoint and no client secretGitHub issue, tableau/tableau-mcp

      Copilot Studio's MCP sign-in wizard supports only dynamic client registration, which Tableau's hosted server does not offer, so sign-in fails with a bare 404 error.

      Published Aug 14, 2026self-described: Connecting a Copilot Studio agent to Tableau's hosted MCP server

    3. Mixed

      Alex Shlega, Power Platform blogger

      Copilot studio agent keeps asking you to connect to an MCP server even though you are, apparently, connected? Check this settingPersonal blog post, It Ain't Boring

      The agent kept asking the author to open the connection manager while the MCP connection showed as connected. Switching the tool to maker-provided credentials fixed it.

      Published Nov 8, 2025self-described: The author's own agent calling an MCP server

    4. Mixed

      Eugene Levitin (evgeni4i4), founder of Docka

      Copilot Studio, MCP URL path: GPT-5.5 Chat can't look up the board (search cut and 8 required fields, GraphQL variables required); tested fixGitHub issue, mondaycom/mcp

      The same monday.com job passed 6 of 6 runs through the certified connector. Through the MCP URL it passed 3 of 3 runs with Claude Sonnet 4.6 and 0 of 3 with GPT-5.5 Chat, which the author traced to Copilot Studio keeping only the first 70 tools.

      Published Oct 5, 2026self-described: Testing whether agents finish a monday.com job through Copilot Studio

    5. Negative

      ramoz, adviser to enterprise clients

      Comment on: Microsoft lowers AI software growth targetsHacker News comment

      Says Microsoft's platforms move too slowly and limit how reliably teams can integrate business systems, and advises clients to build their own agents with their own guardrails and tools.

      Published Dec 3, 2025self-described: Meets enterprise clients who evaluate Copilot Studio

    6. Negative

      pbronez, Hacker News commenter

      Comment on: Microsoft lowers AI software growth targetsHacker News comment

      Lists the roadblocks: poor determinism that forces tools into Power Automate, no secure way to share agents, a laggy studio with no clear source control, and a Calendar MCP that still cannot book a meeting. The commenter says it did not deliver and is looking at other platforms.

      Published Dec 3, 2025self-described: Deploying Copilot Studio and Power Platform for an enterprise on Microsoft's US Government Community Cloud

    Open them in the record

What concerns them

Every concern practitioners raise, most raised first.

  1. Reliability & Bugs10 of 12 sources on it raise it as a concernAgents that stop responding, misroute, fail to publish, or break in nodes, prompts, and flows.

    Counted for All users.

    Raised as a concern, 10

    1. Negative

      No-Supermarket8134, Reddit user

      Generative orchestrator interfering with generative answer nodeReddit post, r/copilotstudio

      A generative answers node inside a topic sometimes hands the turn to the main orchestrator instead, and orchestration must stay on for the conversation to continue.

      Published Oct 14, 2026self-described: Standard harness agent with topic-level generative answers

    2. Negative

      Freggel1995, Reddit user

      Copilot Studio Inline Agent stops processing uploaded files and generates incomplete Word documentsReddit post, r/copilotstudio

      The inline agent appears to receive file data in encoded form, and in asynchronous mode it stops after about 3 minutes, leaving the Word document empty or half filled.

      Published Oct 9, 2026self-described: Flow that passes uploaded files to an inline agent to fill a Word template

    3. Negative

      Rockeygamer, Reddit user

      Are prompts downs?Reddit post, r/copilotstudio

      Since October 1, any prompt with code interpreter on fails to test or save with an internal server error, even a one-line prompt, though prompts saved earlier still run from flows.

      Published Oct 2, 2026self-described: Prompts with code interpreter used from flows, in Europe

    4. Negative

      Impossible-Chain5416, Reddit user

      Fixing missing Output Parameters in Adaptive CardsReddit post, r/PowerPlatform

      An adaptive card in Formula format produced no output parameters. The workaround was to define inputs in JSON, map variables, then switch back, because switching formats wipes the schema.

      Published Apr 29, 2026self-described: Building topics with adaptive cards

    5. Negative

      pbronez, Hacker News commenter

      Comment on: Microsoft lowers AI software growth targetsHacker News comment

      Lists the roadblocks: poor determinism that forces tools into Power Automate, no secure way to share agents, a laggy studio with no clear source control, and a Calendar MCP that still cannot book a meeting. The commenter says it did not deliver and is looking at other platforms.

      Published Dec 3, 2025self-described: Deploying Copilot Studio and Power Platform for an enterprise on Microsoft's US Government Community Cloud

    6. Negative

      PAARTHPATEL, Reddit user

      Copilot Studio agent behaves differently in Teams and test paneReddit post, r/copilotstudio

      The agent sometimes stops responding in Teams until a debug command clears its state, and a question node that appears in the test pane never appears in Teams.

      Published Oct 22, 2026self-described: Team running a topic-based agent with SharePoint knowledge in Teams

    7. Mixed

      redsaeok, Reddit user

      Stand Agent Subagents in TeamsReddit post, r/copilotstudio

      The GitHub Copilot harness worked well, but the team's manager balked at its cost, so the poster spent a week rebuilding on the standard harness. The rebuild works in the studio but behaves badly in Teams, where it locks onto one sub-agent.

      Published Oct 20, 2026self-described: Team whose manager reviews agent running costs

    8. Negative

      SuperDaddio, Reddit user

      Issue with deploying GitHub Harness agents.Reddit post, r/copilotstudio

      Classic agents deploy to Teams and Microsoft 365, but agents built on the GitHub Copilot harness show blank details and cannot be added, even with a billing plan attached.

      Published Sep 30, 2026self-described: Organization moving managed solutions from development to user acceptance testing

    9. Mixed

      Marlon König, Power Platform practitioner and conference speaker

      Sorry, something unexpected happened: Calling a Copilot Studio (New Experience) agent from Power AutomatePersonal blog post, marlon-koenig.com

      An agent that worked poorly in classic Copilot Studio worked a lot better in the new experience. Calling it from Power Automate returned an error while the flow still reported success, and the workaround took days.

      Published Jul 30, 2026self-described: A business agent from a customer project

    10. Negative

      NoMoreNicksLeft, Hacker News commenter

      Comment on: Jira Is Turing-CompleteHacker News comment

      Setting up logic in Copilot Studio is painful and worse without a high-memory machine. Driving it from Claude also failed: the pac CLI was broken and the web pages responded to clicks about 10 seconds late.

      Published May 25, 2026self-described: Building agent logic in Copilot Studio at work

    Discussed without concern, 2

    1. Mixed

      Ill_Combination_3520, Reddit user

      Facing DLP errors and publishing issues in Copilot Studio. Any idea how to fix these?Reddit post, r/copilotstudio

      A flow tool hit unclear data policy errors, and a published agent worked for the author but not for colleagues. Both were fixed by reading the policy errors in classic mode and moving the Microsoft 365 and Teams connectors into the Business group.

      Published Oct 8, 2026self-described: Building agents on both the standard and GitHub Copilot harnesses

    2. Mixed

      Alex Shlega, Power Platform blogger

      Copilot studio agent keeps asking you to connect to an MCP server even though you are, apparently, connected? Check this settingPersonal blog post, It Ain't Boring

      The agent kept asking the author to open the connection manager while the MCP connection showed as connected. Switching the tool to maker-provided credentials fixed it.

      Published Nov 8, 2025self-described: The author's own agent calling an MCP server

    Open them in the record
  2. Credits & Capacity CostAll 7 sources on it raise it as a concernCopilot Credit consumption, harness pricing, Dataverse capacity, and spend that is hard to predict or charge back.

    Counted for All users.

    1. Mixed

      redsaeok, Reddit user

      Stand Agent Subagents in TeamsReddit post, r/copilotstudio

      The GitHub Copilot harness worked well, but the team's manager balked at its cost, so the poster spent a week rebuilding on the standard harness. The rebuild works in the studio but behaves badly in Teams, where it locks onto one sub-agent.

      Published Oct 20, 2026self-described: Team whose manager reviews agent running costs

    2. Mixed

      Firm_Pin4840, Reddit user

      Copilot Studio - topic-scoped knowledge vs. tenant graph grounding (cost question)Reddit post, r/copilotstudio

      Tenant graph grounding gives good answers but costs 10 credits a message, so the poster plans to split the PDFs into topic folders with their own answer nodes and asks how topic changes are billed.

      Published Oct 18, 2026self-described: Builds internal agents over large SharePoint PDFs

    3. Negative

      EnvironmentalAir36, Reddit user

      Copilot Studio environments keep going over Dataverse file capacity. How do you manage it?Reddit post, r/copilotstudio

      File storage sits at about 2.5 GB against a 2 GB limit and keeps growing, even in environments where nobody built tables. The poster suspects agent knowledge files.

      Published Oct 17, 2026self-described: Admin of the organization's Copilot Studio environments

    4. Mixed

      Marlon König, Power Platform practitioner and conference speaker

      Three harnesses, one product name: what actually changed in Copilot Studio pricingPersonal blog post, marlon-koenig.com

      On the GitHub Copilot harness, authoring, testing, evaluations and runtime all use Copilot Credits, and a Microsoft 365 Copilot license gives no relief. The author calls the harness better but says the meter makes people test less.

      Published Aug 13, 2026self-described: Advising customers on Copilot Studio licensing

    5. Negative

      davidcottondev, Reddit user

      Copilot Studio vs PowerPlatformReddit post, r/PowerPlatform

      Says Microsoft rebuilt Power Apps, Power Automate and Virtual Agents inside Copilot Studio and added a runtime charge, with no clear plan for Power Platform, which never charged for opening an app.

      Published Oct 23, 2026self-described: Power Platform maker comparing Copilot Studio with Power Apps and Power Automate

    6. Negative

      alex_harl, IT practitioner

      Post by @alex_harl on XX post

      Admin controls are thin: the GitHub Copilot harness could only be stopped by turning off all publishing, and users with no path to credits still consume them despite cost policies. The surface keeps changing and agent traces expose personal data to admins.

      Published Oct 20, 2026self-described: Organization rolling out Copilot Studio agent creation to about 10% of licensed users

    7. Negative

      kayhai, admin at an enterprise on Microsoft 365 E5

      Administering end-user Microsoft AI toolsReddit post, r/sysadmin

      Asks how to govern Copilot Studio and AI Builder, how to give credits only to specific users, and where the data training and residency terms are. Says the messy product line makes admins hesitate, and that OpenAI's token accounting is clearer.

      Published May 20, 2026self-described: Enterprise on Microsoft 365 E5 governing Copilot Studio and AI Builder use

    GILD's fact checks, which don't count as sources

    Checked Oct 28, 2026.A Copilot Credit pack holds 25,000 credits for US$200 per month, and pay-as-you-go bills US$0.01 per credit. A generative answer costs 2 credits and tenant graph grounding 10, with no charge for Microsoft 365 Copilot licensed users. Billing rates and management

    Open them in the record
  3. Product Sprawl & ChurnAll 5 sources on it raise it as a concernOverlapping Copilot products, harnesses and names, and a surface that keeps changing.

    Counted for All users.

    1. Negative

      davidcottondev, Reddit user

      Copilot Studio vs PowerPlatformReddit post, r/PowerPlatform

      Says Microsoft rebuilt Power Apps, Power Automate and Virtual Agents inside Copilot Studio and added a runtime charge, with no clear plan for Power Platform, which never charged for opening an app.

      Published Oct 23, 2026self-described: Power Platform maker comparing Copilot Studio with Power Apps and Power Automate

    2. Negative

      mugenjin23, local government staff, Australia

      Comment on: Microsoft abandons personal AI chatbot race with Copilot rebootHacker News comment

      Says local government organizations already struggle to tell apart Microsoft 365 Copilot, Copilot Chat, Copilot Studio, Agent Builder, Cowork and the rest, and each rebrand adds another change to manage.

      Published Sep 26, 2026self-described: State and local government organizations in Australia

    3. Negative

      alex_harl, IT practitioner

      Post by @alex_harl on XX post

      Admin controls are thin: the GitHub Copilot harness could only be stopped by turning off all publishing, and users with no path to credits still consume them despite cost policies. The surface keeps changing and agent traces expose personal data to admins.

      Published Oct 20, 2026self-described: Organization rolling out Copilot Studio agent creation to about 10% of licensed users

    4. Mixed

      Marlon König, Power Platform practitioner and conference speaker

      Three harnesses, one product name: what actually changed in Copilot Studio pricingPersonal blog post, marlon-koenig.com

      On the GitHub Copilot harness, authoring, testing, evaluations and runtime all use Copilot Credits, and a Microsoft 365 Copilot license gives no relief. The author calls the harness better but says the meter makes people test less.

      Published Aug 13, 2026self-described: Advising customers on Copilot Studio licensing

    5. Negative

      kayhai, admin at an enterprise on Microsoft 365 E5

      Administering end-user Microsoft AI toolsReddit post, r/sysadmin

      Asks how to govern Copilot Studio and AI Builder, how to give credits only to specific users, and where the data training and residency terms are. Says the messy product line makes admins hesitate, and that OpenAI's token accounting is clearer.

      Published May 20, 2026self-described: Enterprise on Microsoft 365 E5 governing Copilot Studio and AI Builder use

    Open them in the record
  4. Security Flaws5 of 6 sources on it raise it as a concernPrompt injection, phishing through agent pages, and data leaving through an agent's own actions.

    Counted for All users.

    Raised as a concern, 5

    1. No opinion stated

      Drel Research, AI security review company

      Reviewing Microsoft Copilot Studio agents: three 2026 CVEs and the DLP gap they shareSecurity research post, Drel

      Reviews three Copilot Studio CVEs from 2026 and argues that data policies miss an approved action, such as an Outlook send, used for an unapproved purpose. A patched prompt injection still moved data out through such an action.

      Published Aug 10, 2026self-described: Review of published Copilot Studio vulnerabilities

    2. No opinion stated

      Bar Kaduri, Capsule Security

      ShareLeak: Taking the Wheel of Microsoft's Copilot Studio (CVE-2026-21520)Security research post, Capsule Security

      Instructions planted in a form's comments field made the agent read customer data from SharePoint Lists and email it outside the organization, even when Microsoft's safety checks flagged the request. Microsoft fixed it in January 2026 as CVE-2026-21520, rated CVSS 7.5.

      Published Apr 15, 2026self-described: Security researchers attacking an agent triggered by a public SharePoint form

    3. No opinion stated

      Guy Zetland and Keren Katz, Tenable AI Research

      Microsoft Copilot Studio Security Risk: How Simple Prompt Injection Leaked Credit Cards and Booked a $0 TripSecurity research post, Tenable

      A few prompts made the test agent list its actions, return card data for several bookings, and change a US$1,000 trip price to US$0 through its update action.

      Published Dec 11, 2025self-described: Security researchers testing a travel booking agent built on a SharePoint list of test data

    4. No opinion stated

      Katie Knowles, Datadog Security Labs

      CoPhish: Using Microsoft Copilot Studio as a wrapper for OAuth phishingSecurity research post, Datadog Security Labs

      An agent's built-in Login button, shared from a Microsoft-hosted page, can lead users into an OAuth consent attack, and a topic can then send the user's token to an outside URL. Microsoft's consent policy changes in 2025 narrow the risk without closing it for admin roles.

      Published Oct 20, 2025self-described: Security researcher testing a malicious agent from an attacker's own tenant

    5. No opinion stated

      Tamir Ishay Sharbat, Zenity Labs

      A Copilot Studio Story 2: When AIjacking Leads to Full Data ExfiltrationSecurity research post, Zenity Labs

      One emailed prompt injection made the replica agent send its whole knowledge file and dozens of Salesforce records to the attacker. Microsoft fixed the reported path in April 2025, and Zenity says prompt injection remains possible.

      Published Jul 7, 2025self-described: Security researchers attacking a replica of a McKinsey customer service agent built in Copilot Studio

    Discussed without concern, 1

    1. Negative

      DevelopmentVast819, Reddit user

      Is anyone using environment routing and zoned governance?Reddit post, r/copilotstudio

      Environment routing gives makers the System Administrator role in their Zone 1 environment, so they can raise their own roles and share with anyone, which the poster calls a large security problem.

      Published Oct 7, 2026self-described: Admin team that set up environment routing and zoned governance

    Open them in the record
  5. Limits & Missing Features5 of 6 sources on it raise it as a concernInstruction and conversation limits, missing memory and logging, tool caps, and other things agents cannot do.

    Counted for All users.

    Raised as a concern, 5

    1. No opinion stated

      Spare_Accountant8794, Reddit user

      Persistent Memory Across Conversations in Microsoft Copilot StudioReddit post, r/copilotstudio

      The agent works, but it keeps no context between conversations, so users re-enter information, and the poster asks whether Dataverse or SharePoint should hold each user's state.

      Published Oct 24, 2026self-described: Agent guiding users through a multi-step process

    2. No opinion stated

      ImportantPudding1570, Reddit user

      Clarification on Copilot Conversation Length Limits and Copilot Studio AgentsReddit post, r/copilotstudio

      Hit a message that the conversation had reached its limit and found no documentation of the limit, nor whether it applies to licensed users or to an agent calling a CRM through MCP.

      Published Sep 28, 2026self-described: Building a declarative agent for a client on Microsoft 365 Copilot Chat

    3. No opinion stated

      nehpets, Hacker News commenter

      Comment on: Ask HN: Is anyone running AI agents in production reliably - what's your stack?Hacker News comment

      Asks how anyone gets visibility into what Copilot Studio agents are doing, or whether they are mostly a black box.

      Published Jun 12, 2026self-described: Runs agents in production for their own SaaS product

    4. Mixed

      illwrks, Hacker News commenter

      Comment on: Caveman Mode Save Token?Hacker News comment

      Agents hit an 8,000-character instructions limit quickly. Having Copilot compress the instructions to about 5,000 characters kept the agent as consistent as before.

      Published Apr 4, 2026self-described: Trying out Copilot Studio agents

    5. No opinion stated

      Diligent_Banana9903, Reddit user

      Why can't we pin our Copilot Studio agent in Microsoft 365?Reddit post, r/copilotstudio

      An agent published to SharePoint, Teams and the Microsoft 365 app for an Entra group does not appear in the admin center's pinned agents list, although users can reach it by link.

      Published Oct 27, 2026self-described: Organization with AI and Global Administrators publishing an agent to an Entra group

    Discussed without concern, 1

    1. No opinion stated

      Fabulous_Squash_7049, Reddit user

      Best practice for RBAC design in Copilot Studio + MCP server for Active Directory operations?Reddit post, r/sysadmin

      The agent calls a custom MCP server for Active Directory tasks, with tools grouped into seven modules to stay under Copilot's tool limit. The poster asks whether to control access with Entra app roles or security groups.

      Published Sep 9, 2026self-described: Production design for an agent that runs Active Directory operations

    GILD's fact checks, which don't count as sources

    Checked Oct 28, 2026.Generative AI quotas start at 50 requests a minute per Dataverse environment at the lowest capacity tier, each model response times out after five minutes, and an agent with generative orchestration can use at most 25 SharePoint sites. Quotas and limits

    Open them in the record
  6. Admin Controls & Governance5 of 8 sources on it raise it as a concernWho may build and share agents, data policies, environment roles, approval gates, and controls admins lack.

    Counted for All users.

    Raised as a concern, 5

    1. Negative

      alex_harl, IT practitioner

      Post by @alex_harl on XX post

      Admin controls are thin: the GitHub Copilot harness could only be stopped by turning off all publishing, and users with no path to credits still consume them despite cost policies. The surface keeps changing and agent traces expose personal data to admins.

      Published Oct 20, 2026self-described: Organization rolling out Copilot Studio agent creation to about 10% of licensed users

    2. Negative

      DevelopmentVast819, Reddit user

      Is anyone using environment routing and zoned governance?Reddit post, r/copilotstudio

      Environment routing gives makers the System Administrator role in their Zone 1 environment, so they can raise their own roles and share with anyone, which the poster calls a large security problem.

      Published Oct 7, 2026self-described: Admin team that set up environment routing and zoned governance

    3. Negative

      wolvoleo, Hacker News commenter

      Comment on: Apple caught off guard by AI demand for Mac Mini and Mac StudioHacker News comment

      The commenter's company requires a three-page proposal to get a three-week Copilot Studio trial project, then sign-off on token cost and a security review that takes months, and most projects stop before deployment. The commenter calls it the worst AI builder, kept only because the company bans the others.

      Published Sep 1, 2026self-described: Large company where every AI project needs sponsorship, cost sign-off and security review

    4. Negative

      kayhai, admin at an enterprise on Microsoft 365 E5

      Administering end-user Microsoft AI toolsReddit post, r/sysadmin

      Asks how to govern Copilot Studio and AI Builder, how to give credits only to specific users, and where the data training and residency terms are. Says the messy product line makes admins hesitate, and that OpenAI's token accounting is clearer.

      Published May 20, 2026self-described: Enterprise on Microsoft 365 E5 governing Copilot Studio and AI Builder use

    5. Negative

      pbronez, Hacker News commenter

      Comment on: Microsoft lowers AI software growth targetsHacker News comment

      Lists the roadblocks: poor determinism that forces tools into Power Automate, no secure way to share agents, a laggy studio with no clear source control, and a Calendar MCP that still cannot book a meeting. The commenter says it did not deliver and is looking at other platforms.

      Published Dec 3, 2025self-described: Deploying Copilot Studio and Power Platform for an enterprise on Microsoft's US Government Community Cloud

    Discussed without concern, 3

    1. No opinion stated

      wendell_labs, Hacker News commenter

      Comment on: Ask HN: Is anyone running AI agents in production reliably - what's your stack?Hacker News comment

      At work the commenter has gone no further than Copilot Studio and Copilot Cowork agents, because IT security policy limits the other options.

      Published Jun 12, 2026self-described: Workplace where IT security policy limits the AI tools allowed

    2. Mixed

      Ill_Combination_3520, Reddit user

      Facing DLP errors and publishing issues in Copilot Studio. Any idea how to fix these?Reddit post, r/copilotstudio

      A flow tool hit unclear data policy errors, and a published agent worked for the author but not for colleagues. Both were fixed by reading the policy errors in classic mode and moving the Microsoft 365 and Teams connectors into the Business group.

      Published Oct 8, 2026self-described: Building agents on both the standard and GitHub Copilot harnesses

    3. No opinion stated

      minisvlad, Power Platform admin

      PowerPlatform Admin and Copilot StudioReddit post, r/PowerPlatform

      Configures data policies first and asks whether agents need separate development and production environments and pipelines, as Power Apps do.

      Published Mar 21, 2025self-described: Company starting to evaluate Copilot Studio for a Teams bot over SharePoint libraries

    GILD's fact checks, which don't count as sources

    Checked Oct 28, 2026.Microsoft Purview audit logs record Copilot Studio activities, with administrative activities logged by default on all tenants. Audit Copilot Studio activities in Microsoft Purview

    Checked Oct 28, 2026.Admins can't turn off Copilot Studio activity collection, but a Purview retention policy of 0 days for Copilot experiences stops the retention of user and agent message text. Audit Copilot Studio activities in Microsoft Purview

    Checked Oct 28, 2026.Microsoft's Copilot privacy FAQ for Dynamics 365 and Power Platform states that Microsoft does not train on tenant data or prompts unless the tenant admin opts in to data sharing. FAQ for Copilot data security and privacy for Dynamics 365 and Power Platform

    Open them in the record
  7. Answer Quality4 of 6 sources on it raise it as a concernWhether agents give correct, complete answers from their knowledge sources.

    Counted for All users.

    Raised as a concern, 4

    1. Mixed

      David Ramel, editor and writer at Converge 360

      Hands On: Getting Started with Microsoft Copilot Studio AgentsHands-on review, Virtualization Review

      Creating the agent felt fast and approachable, but retrieval surfaced only one worksheet tab, and the data had to be restructured before the answers worked.

      Published Mar 26, 2026self-described: A personal agent over a SharePoint-hosted Excel tracker of the author's own articles

    2. Negative

      ashokganjireddy, GitHub user

      Copilot Studio Agent - Poor Results with CSV Knowledge Source (Summarization & Categorization)GitHub issue, microsoft/copilot-camp

      With a roughly 40 MB CSV of Jira issues as knowledge, and again after splitting it into PDFs, summarization and categorization answers stayed unsatisfactory. Microsoft 365 Copilot's Analyst and Researcher answered the same questions much better.

      Published Sep 19, 2025self-described: Agent built over a Jira extract as its knowledge source

    3. Negative

      CharlesW, Hacker News commenter

      Comment on: Microsoft is struggling to sell Copilot to corporations - employees want ChatGPTHacker News comment

      Spent part of several months trying to make a simple project work in Copilot Studio as well as it did as an OpenAI GPT and never managed it. Microsoft staff could barely confirm which model it used.

      Published Jun 26, 2025self-described: A work project built on prompts and knowledge files

    4. Negative

      Flangipan, Reddit user

      Copilot agent searching ServiceNow knowledgeReddit post, r/copilotstudio

      The agent can reach only excerpts of ServiceNow articles, although the same connector works in Microsoft 365 Copilot search.

      Published Oct 2, 2026self-described: Teams agent over a ServiceNow knowledge base

    Discussed without concern, 2

    1. Mixed

      KaiserPro, Hacker News commenter

      Comment on: Anthropic invests $50B in US AI infrastructureHacker News comment

      The commenter's project loaded tens of thousands of documents into SharePoint and expects Copilot Studio to retrieve from them and give meaningful answers with a four-line prompt, an expectation the commenter doubts.

      Published Nov 12, 2025self-described: Work project grounding an agent on SharePoint documents

    2. Mixed

      Firm_Pin4840, Reddit user

      Copilot Studio - topic-scoped knowledge vs. tenant graph grounding (cost question)Reddit post, r/copilotstudio

      Tenant graph grounding gives good answers but costs 10 credits a message, so the poster plans to split the PDFs into topic folders with their own answer nodes and asks how topic changes are billed.

      Published Oct 18, 2026self-described: Builds internal agents over large SharePoint PDFs

    Open them in the record

Where the evidence agrees

Statements this group's sources agree on, then the ones close to agreement.

Close to agreement: each needs 11 supporting sources

  1. Below threshold

    Organizations set data policies, roles, approvals, and limits on who may build before agents reach users.

    6 supporting sources
  2. Below threshold

    Agents that work in the studio's test pane fail, misbehave, or cannot be shared once published to Teams or Microsoft 365.

    6 supporting sources

Where it disagrees

Questions the sources split on, with the count on each side.

  • Evidence remains mixed

    Should an organization build its agents in Copilot Studio or somewhere else?

    • Build in Copilot Studio, 4 sources

      Some build in Copilot Studio because it reaches Microsoft 365 data, connectors, and Teams inside a tenant they already govern.

    • Build elsewhere, 4 sources

      Others found it less reliable or capable than an OpenAI GPT or their own code, and build their own agents or look at other platforms.

The evidence

Whose experience this is

The three groups, then every practitioner by the context they work in, and how emphasis changes with scale.

Three groups drawn from the same sources. Choose a group to select whose experience counts. Within that group, each author counts once in the practitioner sentiment, with their latest view. Signals open on All users. Leaders and teams have 15 accounts; GILD prints their sentiment from 20.

  • Leaders and teams rolling it out

    24 sources. These accounts focus on governance, credit costs, and agents that behave differently once published, from teams, admins, and organization-wide rollouts.

  • Individual users

    28 sources. These accounts focus on how hard agents are to build, answer quality, and day-to-day failures, from people building their own agents.

  • All users

    52 sources. This gives the broadest read, but combines one person's agent with organization-wide rollouts, which can reach different conclusions.

52 sources from practitioners, by the context they work in. Filled rows count for this group.

  1. Individual userOne person using it for their own work28 sources, counted here

    Emphasizes Ease of building, answer quality, and bugs in topics, prompts and flows

  2. Small team2 to 10 people sharing itNo sources from this setting yet
  3. DepartmentA department, or a named company's team19 sources, counted here

    Emphasizes Agents that break after publishing to Teams, credit costs, and security research

  4. IT & leadershipIT and business leaders deciding the rollout1 sources, counted here

    Emphasizes Model choice and connector behavior measured on a real job

  5. Organization-wideCompany-wide rollout4 sources, counted here

    Emphasizes Gated rollouts, admin controls, and credits used outside cost policies

What changes with scale. Individual builders report bugs and how hard agents are to build. Team and admin accounts raise governance and agents that break once published, and organization-wide accounts gate who may build at all and watch where credits go.

Where the sources come from

Where this group's sources were published.

Counted for All users, from 52 sources. Change group

66 sources for this group, 14 of them documentation

  • Communities & Admin Forums41, 62% of 66 sources
  • Product Documentation14, 21% of 66 sources
  • Business Blogs & Security Research11, 17% of 66 sources

Older evidence is retained when it still applies. Sources that depend on a default model, harness, or flaw Microsoft has since changed stay in the history, marked Needs a recheck.

See sources by origin

The record

Who each source is, how it knows, whether it still applies and what it counts toward.

About this read

What changed, and how we count

What changed

  • Builds the evidence base from public sources only: each source links to the page it comes from and names its author and publication date.
  • Shows a finding in a view only when at least 5 sources from 3 different authors discuss it, and a disagreement only with at least 2 sources on each side.
  • Keeps only English-language sources dated January 1, 2025 or later, which leaves out Power Virtual Agents accounts and one Spanish-language Reddit post.
  • Leaves out Microsoft customer stories on Microsoft Learn, Microsoft Q&A, and Power Platform Community threads, which sit on Microsoft's own sites.
  • Checks every documentation page against Microsoft's current pricing page and Microsoft Learn.

Method

A running review of what people using Microsoft Copilot Studio at work report, from individual users to company-wide rollouts. Each finding links to its sources, and each conflict shows both sides.

Counts cover only the sources GILD reviewed.

Who counts

Leaders and teams rolling it out
Small team, Department, IT & leadership, Organization-wide
Individual users
Individual user
All users
Everyone in the leaders and teams and individual users groups

Choose a group to select whose experience counts. Within that group, each author counts once in the practitioner sentiment, with their latest view. GILD files each source in a group from how the account describes its author. A role or employer marked self-described is what the source states about themselves. Documentation checks facts for every group and never counts toward sentiment.

How the numbers work

  • Overall signal. Positive votes minus negative ones, per 100 votes from the sources that take a side. Each author counts once, with their latest view, whoever they are and wherever they posted. The older weighted reading, where accounts GILD matched to a named person count three times when GILD lists the author among IT and business leaders and twice otherwise, is shown beside it as a second view. Where an author wrote more than one source, the line beside the split gives the votes, one per author, so the score follows from it. When one author's sources from the same day disagree, that author counts as mixed, and a half point rounds away from zero. Sources with no opinion are listed and not counted. Strong positive is +50 or higher, positive +20 to +49, mixed −19 to +19, negative −20 to −49, strong negative −50 or lower.
  • Weighted reading, second view. Counted the older way, where an account GILD matched to a named person counts two or three times, all users read −45 negative (method sentiment/S1). GILD printed that number as "GILD score" until October 29, 2026; most of those matches rest on a name or a self-described role.
  • Method change, Oct 30, 2026. GILD changed how practitioner sentiment counts, to one vote per author. Weighted, it read −45 Negative; with one vote per author it reads −53 Strong negative. No evidence changed.
  • Unscored. A group gets a score only with 20 sources from 15 authors. Below that, one source moves the score about 5 points, so the read says "Unscored until 20 sources from 15 authors" and shows its counts.
  • Independence. A source whose author works for the vendor, for one of its partners or programs, or for a competitor, and a page the vendor published or ran, is listed with that tie and counts toward nothing. One author counts on at most two records per product. The line under the score says how many authors and how many separate discussions the counted sources come from: comments in one thread are one discussion.
  • Praise and concerns. How many of the sources that discuss a theme praise it or raise it.
  • Consensus. A statement joins when 20% of the group's sources support it and fewer contradict it. Contradicting sources are counted separately. Below that line a statement shows as building. At 40% or more it reads Strong agreement; below, Recurring point.
  • Disagreements. The count on each side. GILD names no winner and gives no share of all users.
  • Minimum evidence. A finding needs 5 sources from 3 authors; a disagreement also needs 2 on each side. Smaller counts stay in the table below, marked under the minimum.

Labels on a source

A source's date and whether it still applies are separate: a recent post can describe an old version, and an old one can still hold.

Documented
Stated in official documentation.
Reported
A practitioner's account of their own use.
Measured
Backed by the source's own measurements, such as a comparative test or tracked team metrics.
GILD analysis
GILD's check of a claim against official documentation.
Current
Describes the product as it is now.
Still applicable
Older, and the behavior or lesson still holds.
Needs a recheck
May depend on a plan, version or setting that changed since it was written. It keeps counting until GILD rechecks it, since the rest of the account usually holds, and its card says so.
Out of date
No longer accurate. Kept in the record; counts toward nothing current.

Flagged for a recheck, of the sources that take a side: leaders and teams 0 of 15, individual users 2 of 23, all users 2 of 38.

Limits

  • These figures come from 66 reviewed sources, including 52 practitioner accounts and 14 documentation pages; they do not represent all Copilot Studio customers. Reddit supplies 20 posts and Hacker News 16 comments. Most Reddit posts come from r/copilotstudio feeds captured in late October 2026, which tilts the evidence toward recent problem reports. Five security research posts, five practitioner blogs, a trade press review, 3 GitHub issues and 2 X posts make up the rest. One X post comes from a seller of rollout kits and counts toward no figure.
  • Copilot Studio was Power Virtual Agents before 2023, and its agents now run on a standard harness or a GitHub Copilot harness that bill differently. Agents moved from messages to Copilot Credits on September 1, 2025, and the default model has changed more than once. Each source shows the harness, model, and features it states; sources about a default model or a flaw Microsoft has since changed are marked Needs a recheck.

Every count, and the sources behind it

17 findings for 3 groups

Each row opens its sources for the group you are reading.

FindingLeaders and teams rolling it outIndividual usersAll usersSources
Current readCurrent sentiment2 positive, 3 mixed, 10 negative3 positive, 7 mixed, 13 negative5 positive, 10 mixed, 23 negativeSources
PraiseConnectors & MCP1 of 4 positive (under the minimum)0 of 3 positive (under the minimum)1 of 7 positiveSources
PraiseMicrosoft 365 & Teams Reach2 of 5 positive2 of 2 positive (under the minimum)4 of 7 positiveSources
PraiseEase of Building1 of 2 positive (under the minimum)2 of 5 positive3 of 7 positiveSources
PraiseAgent Flows & Automation1 of 2 positive (under the minimum)1 of 4 positive (under the minimum)2 of 6 positiveSources
PraiseModel Choice1 of 1 positive (under the minimum)3 of 3 positive (under the minimum)4 of 4 positive (under the minimum)Sources
ConcernCredits & Capacity Cost4 of 4 raise it (under the minimum)3 of 3 raise it (under the minimum)7 of 7 raise itSources
ConcernReliability & Bugs4 of 4 raise it (under the minimum)6 of 8 raise it10 of 12 raise itSources
ConcernAdmin Controls & Governance5 of 6 raise it0 of 2 raise it (under the minimum)5 of 8 raise itSources
ConcernSecurity Flaws5 of 6 raise it0 of 0 raise it (under the minimum)5 of 6 raise itSources
ConcernAnswer Quality0 of 1 raise it (under the minimum)4 of 5 raise it4 of 6 raise itSources
ConcernLimits & Missing Features2 of 3 raise it (under the minimum)3 of 3 raise it (under the minimum)5 of 6 raise itSources
ConcernProduct Sprawl & Churn3 of 3 raise it (under the minimum)2 of 2 raise it (under the minimum)5 of 5 raise itSources
ConsensusRollouts start with governance6 supporting0 supporting (under the minimum)6 supporting (below threshold)Sources
ConsensusThe test pane is not production5 supporting1 supporting (under the minimum)6 supporting (below threshold)Sources
DisagreementShould an organization build its agents in Copilot Studio or somewhere else?Build in Copilot Studio 2, Build elsewhere 3Build in Copilot Studio 2, Build elsewhere 1 (under the minimum)Build in Copilot Studio 4, Build elsewhere 4Sources
Current readEvidence mix38 sources42 sources66 sourcesSources

Fact checks

GILD's checks of claims against official documentation, kept apart from the source counts.