Episode Details

(00:00:00) Copilot's Blindness and the Solution
(00:00:35) The Limitations of Out-of-the-Box Copilot
(00:01:35) Grounding Copilot with Knowledge and Tools
(00:03:12) Building a Custom Agent in Copilot Studio
(00:04:10) Configuring Tools and Orchestration Rules
(00:06:50) Implementing Governance and Safety Measures
(00:08:11) Toolkit for VS Code: Surgical Precision
(00:09:01) Implementing the Plugin and Function
(00:14:20) Pairing Studio with Toolkit for Best Results
(00:18:10) Licensing and Security Considerations

Microsoft 365 Copilot doesn’t know your business — it only knows the tiny slice of your work graph it can see: Outlook threads, Teams chats, and SharePoint files. Everything that actually runs the company — Salesforce, ServiceNow, line-of-business APIs, ERP, ticketing, pipelines, incidents — is invisible by default. In this episode of m365.fm, Mirko Peters shows how to fix Copilot’s “data blindness” by building a governed enterprise agent that can see and act on your real systems without breaking security, compliance, or audit.

WHY “HELPFUL” COPILOT BEHAVIOR TURNS INTO RISK

Copilot is not malicious; it is constrained. When it cannot see core systems, it fills gaps with partial context, stale documents, or user-provided guesses. That’s where hallucinations, bad summaries, and missing insights come from. Mirko breaks down why “out-of-the-box” Copilot is blind by design, what that means for decision support in sales, support, and operations, and why you should treat visibility as an architecture problem — not a prompt engineering trick.

THE ENTERPRISE AGENT PATTERN: GIVING COPILOT REAL SIGHT

This episode introduces a practical pattern: a custom enterprise agent that sits between Copilot and your systems of record. Instead of letting Copilot guess, you give it governed tools it can call: Salesforce queries, ServiceNow ticket lookups, internal API calls, and curated knowledge sources. You control exactly what it can see, how it can act, and what it must cite in every answer. The result is an agent that sees, reasons, and acts — but inside your rules.

PATH 1 — COPILOT STUDIO: FAST, DECLARATIVE, GOVERNED

With Copilot Studio, you design a declarative agent that:

• Grounds itself on selected knowledge sources (SharePoint libraries, internal docs, URLs).
• Connects to Salesforce, ServiceNow, and internal APIs via approved connectors and tools.
• Follows strict instructions to cite sources, refuse to guess, and ask clarifying questions.
• Logs and audits every tool call while obeying DLP and identity boundaries.

Mirko walks through how to define the agent’s mission, configure knowledge priority, wire tools, and set orchestration rules so that “renewal questions go to Salesforce,” “incident queries go to ServiceNow,” and “limits and pricing come from a single governed API.”

PATH 2 — TEAMS TOOLKIT FOR VS CODE: PRO-DEV PRECISION

When you need stricter control, Teams Toolkit gives you pro-dev power:

• OpenAPI-based Copilot plugins with explicit request/response schemas.
• Backend handlers that call Salesforce, ServiceNow, and internal endpoints with validation.
• Normalized JSON outputs designed for reliable AI consumption.
• Policy-aware middle