The licensing, identity, data protection and access prerequisites for Copilot enablement, with the provider and current status of each. GDC procures Copilot and prerequisite licences; Zertain advises on prerequisites. Select any row for details.
Licensing
DependencyProvided byStatusNotes
Microsoft 365 E5GDCConfirmedIn place. Includes the advanced Purview capabilities used in this engagement (auto-labelling at scale, endpoint DLP and Insider Risk Management) and Entra ID P2. The full control set is available for configuration.
Microsoft 365 Copilot licencesGDC to procurePending GoFive test licences are assigned for validation. Pilot licences (25 users) are held pending the Go decision. GDC procures Copilot and any prerequisite licensing.
Identity
DependencyProvided byStatusNotes
Entra ID P2 (CA · PIM · Access Reviews)Included in E5In placeConditional Access, Privileged Identity Management and Access Reviews are active and govern who can use Copilot and with what privileges.
Data protection
DependencyProvided byStatusNotes
Microsoft Purview (advanced)Included in E5In placeConfigured and validated in this engagement. A from-scratch Purview implementation is available as a separate option ($7,500 one-time) but is not required, as E5 already provides it.
Endpoint DLP onboarding (Defender)Included in E5In placeDevices are onboarded so that DLP policies extend to endpoints as well as cloud workloads.
Access
DependencyProvided byStatusNotes
Delegated administrative accessGDCConfirmedGranted in week 1 and sufficient to assess, configure and remediate within scope. This is the most significant schedule dependency.
Platform
DependencyProvided byStatusNotes
Microsoft Graph indexing & semantic indexProvided by the Copilot licenceIn placeThe semantic index is built automatically once Copilot licences are assigned. It is validated through pass/fail checks on the Copilot Validation screen: sites excluded from search remain excluded, restricted sites are honoured and sample content is reachable as expected.
SharePoint Advanced Management (SAM)Copilot licence – to confirmTo confirmProvides the data access governance reports used on the Oversharing screen and Restricted Content Discovery as an interim pilot control. SAM is included with Microsoft 365 Copilot licences; GDC's entitlement should be confirmed before relying on it.
Governance
DependencyProvided byStatusNotes
Generative AI acceptable-use policyGDC to ratifyIn draftThe addendum was drafted during discovery. It requires GDC ratification before broad rollout but does not block the scoped pilot.