M365AILasith IyanAI Consultant to the Estate
Microsoft 365  ·  Copilot  ·  AI Governance

Copilot Rarely Fails at the Model —
It Fails at the Tenant

Licences get bought before oversharing is measured, and the pilot stalls. M365AI delivers readiness, governance, and delivery for Microsoft 365 organisations under one accountable engagement.

Take the Copilot Readiness Assessment See the Microsoft 365 work

Free · About four minutes · No email required to see your score

A glowing AI core at the centre of a Microsoft 365 tenant: governed, shield-protected content near the core, tangled overshared links at the edges.
40
Capabilities assessed
8
Readiness pillars
3 min
To your tier and 90-day plan
$0
To find out where you stand
Why Programmes Stall

Copilot Inherits the Entire Tenant

It respects the permissions already granted, including those nobody remembers granting. Each readiness problem below is a tenant problem rather than an AI problem, and each is addressable before a single seat is assigned.

Unmeasured Oversharing

"Everyone except external users" was a convenience in 2019. In a Copilot tenant it is a retrieval path. The first oversharing report typically resets a programme's expected timeline.

Licences Allocated Before Personas

Tenant-wide allocation is the most expensive way to discover that only a third of the workforce had a use case. Persona-led allocation with a reclamation rule converts the same budget into evidence.

Agents Without Owners

Copilot Studio placed agent building in the hands of the business, which was the intent. Without intake, identity, and an audit trail, it also becomes the fastest-growing ungoverned surface in the estate.

The pattern is consistent. The organisations that realise value from Copilot are not those that bought earliest. They are those whose identity, data, and content estate were already in order, and who could evidence that to a risk committee on request.

Scope of Practice

Executive AI Ownership, Without the Executive Hire

Executive ownership of the AI agenda without adding an executive to the payroll: a single accountable individual who holds the roadmap, models the licence economics, approves the governance, and remains accountable when agents reach production.

Copilot Readiness

  • Tenant, identity, and device readiness assessed against the intended licence cohort
  • Oversharing measurement across SharePoint and OneDrive, with remediation sequenced by risk
  • Persona-led seat allocation and a licence reclamation rule that withstands renewal scrutiny

Microsoft 365 Modernisation

  • Migration and consolidation, so the content Copilot requires is present in the Graph
  • Purview: sensitivity labels, DLP across Copilot-readable workloads, retention and ROT clean-up
  • Entra, Intune, and Conditional Access baselines that withstand audit

Agents & Extensibility

  • Copilot Studio agents governed by intake, review, and publish gates rather than built informally
  • Graph and Copilot connectors prioritised by use-case value rather than ease of connection
  • An agent register: owner, purpose, identity, data reach, review date

AI Governance

  • An AI policy defining the accountable executive, approved tools, and prohibited uses
  • Controls mapped to NIST AI RMF, ISO/IEC 42001, or the EU AI Act where it applies
  • Auditability: Purview audit over Copilot interactions, eDiscovery, prompt retention

Health Check & Dashboards

  • A measured position across identity, licensing, Exchange, SharePoint, Teams, and groups
  • Reclaimable licences, ownerless teams, anonymous links, and inactive mailboxes, quantified
  • Standing dashboards with a named owner and a review cadence, so the findings stay current

Automation & Lifecycle

  • Joiner, mover, and leaver executed as one auditable sequence rather than by hand
  • Approval routing for licence requests, team creation, and guest access
  • Scheduled hygiene and incident runbooks, reversible and recorded
The Microsoft 365 engagements The governance model
The Assessment

The Copilot Readiness Assessment

Forty capabilities across eight weighted pillars. Record what is genuinely true in your tenant and receive your tier, the gate holding the next one closed, the five highest-cost gaps, and a ninety-day plan sequenced from the blocking pillar.

I

Your Tier

Six stages, from pre-foundation to an AI operating model. The tier is capped by the weakest foundation — the constraint most maturity models understate, and the reason programmes stall a tier below expectation.

II

Your Blocker

One named gate, with the current score against the score required, and why it takes precedence over the next item on the roadmap.

III

Your Ninety-Day Plan

Three phases drawn from the blocking pillar, plus licence exposure modelled at your headcount, including the full-allocation figure for comparison.

Take the assessment

Nothing is transmitted. Answers stay in your browser, and no email is required to see the result.

Leadership

Lasith Iyan Kasthuriarachchi

A Microsoft 365 and cloud architect based in Dallas, Texas, currently with Capgemini, working on the modernisation of enterprise digital estates. A Copilot for Microsoft 365 Technical Champion, with certification history across Microsoft 365 enterprise administration, modern desktop, Azure administration, and AWS solution architecture.

The most relevant experience is operational: having run the estate that Copilot lands on. Tenant hygiene, licence modelling, migration backlogs, and unowned access reviews — the work that determines whether an AI programme has a foundation or an audience.

Copilot for M365 Technical Champion M365 Enterprise Administrator Expert Azure Administrator Associate AWS Solutions Architect – Associate
Full background

How the Engagement Runs

  • Weeks 1–2 · Diagnose. Tenant readiness, oversharing measurement, licence position, and a substantiated tier.
  • Weeks 3–4 · Decide. Persona model, quantified use-case shortlist, and a selected governance spine.
  • Month 2 onward · Deliver. Remediation, controlled rollout, champions, and the first governed agents.
  • Standing · Own. Monthly value reporting to the sponsor, quarterly agent review, and a renewal case supported by evidence.

Consulting here means embedded and accountable rather than advisory. The roadmap is delivered, not filed.

Find Your Tier, Then Close the Gate

No email to start and no call required to see your score. The assessment establishes your position; the report sets out the remediation, in order.

Weighted across eight pillars Printable, board-ready output Ninety-day plan included
Take the assessment Start a conversation