How to Enable Microsoft Copilot in a GCC High Tenant

Microsoft Copilot is gradually rolling out to GCC High tenants, but the enablement process differs from commercial or GCC tenants. Many administrators find the Copilot toggle missing or grayed out in the Microsoft 365 admin center. This happens because GCC High environments have unique licensing, data residency, and service configuration requirements. This article explains the exact prerequisites and step-by-step configuration needed to enable Copilot in a GCC High tenant.

What Makes GCC High Copilot Enablement Different

GCC High tenants serve US federal agencies, defense contractors, and other entities that handle Controlled Unclassified Information. Because of these compliance requirements, Microsoft deploys Copilot in GCC High on a separate service instance with stricter data handling. The Copilot feature is not automatically enabled when you purchase licenses. You must manually configure the service settings, assign licenses, and verify that your tenant meets the minimum service plan requirements. The Copilot for Microsoft 365 add-on SKU for GCC High is different from the commercial SKU. Your tenant must show the GCC High-specific license plan in your subscription details.

Licensing Requirements

Before you enable Copilot, confirm that your tenant has one of the following base plans:

• Microsoft 365 E5 GCC High
• Microsoft 365 E3 GCC High with the Copilot for Microsoft 365 add-on
• Office 365 E5 GCC High with the Copilot for Microsoft 365 add-on
• Office 365 E3 GCC High with the Copilot for Microsoft 365 add-on

The Copilot add-on SKU for GCC High is CRM_03618229 in the licensing portal. If your tenant shows a different SKU, you may have the commercial version which will not activate in a GCC High environment.

Network and Endpoint Requirements

Copilot in GCC High requires connectivity to specific GCC High endpoints. Your firewall must allow traffic to gcchigh.microsoft.com and all subdomains as well as office365.us and all subdomains. If your organization uses a web proxy or SSL inspection, ensure that the Copilot service URLs are excluded from inspection. Microsoft publishes the full list of GCC High endpoints in the Microsoft 365 URLs and IP address ranges documentation.

Steps to Enable Copilot in a GCC High Tenant

Follow these steps in order. If you skip a step, the Copilot toggle may remain unavailable.

Step 1: Verify Your Tenant Type

1. Open the Microsoft 365 admin center
   Go to https://admin.microsoft.com and sign in with a Global Admin account.
2. Check your tenant domain
   In the left navigation, select Settings > Org settings. Look at the domain suffix. A GCC High tenant domain ends with .onmicrosoft.us or .microsoft.us. If your domain ends with .onmicrosoft.com, you are not in a GCC High tenant.
3. Confirm the service plan
   Go to Billing > Licenses. Select a user and verify that the license plan name includes GCC High or US Government. If the plan says only Microsoft 365 E5 without the government suffix, contact your licensing reseller to order the correct SKU.

Step 2: Assign Copilot Licenses to Users

1. Navigate to license assignment
   In the admin center, go to Billing > Licenses. Select the Copilot for Microsoft 365 GCC High product.
2. Assign licenses
   Click Assign licenses. In the panel, search for the users who need Copilot access. Check the box next to each user. Ensure that the Copilot for Microsoft 365 service plan is enabled under the license options. Click Assign.
3. Wait for propagation
   License assignment can take up to 30 minutes to propagate across the GCC High service. Do not proceed to the next step until the license appears in the user’s account.

Step 3: Enable the Copilot Service Setting

1. Open Org settings
   In the admin center, go to Settings > Org settings.
2. Find the Copilot setting
   Scroll down and select Copilot from the list of services. If you do not see Copilot listed, your tenant may not have the required licenses assigned yet. Wait a few hours and refresh the page.
3. Turn on Copilot
   In the Copilot settings panel, set the toggle to On. Under Data sources, select Allow Copilot to access your Microsoft Graph data. This enables grounded responses using your tenant’s data. Click Save.

Step 4: Verify User Access

1. Sign in as a test user
   Open a private browser window and sign in to https://www.office.com with a licensed user account.
2. Open a Microsoft 365 app
   Launch Word or Teams. Look for the Copilot icon in the top ribbon or in the right sidebar. In Word, the Copilot icon appears in the top toolbar. In Teams, it appears in the chat compose box.
3. Test a prompt
   Type a simple prompt such as Summarize my last three emails. Copilot should return a response using your tenant data. If you see an error about data access, check the data source setting in Step 3.

If Copilot Still Does Not Appear After Configuration

Copilot Toggle Is Grayed Out in the Admin Center

This usually means the Copilot license SKU has not been fully provisioned. Go to Billing > Your products and verify that the Copilot add-on appears as an active subscription. If it shows as pending or expired, contact your licensing reseller or Microsoft support for GCC High.

Copilot Returns Generic Responses Only

Generic responses indicate that Copilot cannot access your Microsoft Graph data. Return to Settings > Org settings > Copilot and confirm that the toggle for Allow Copilot to access your Microsoft Graph data is enabled. Also verify that the user has an Exchange Online and SharePoint Online license assigned. Copilot requires these services to read emails and documents.

Copilot Icon Is Missing in Word or Teams

The user may be running an outdated version of Microsoft 365 Apps. Ensure that the user has Microsoft 365 Apps version 2309 or later installed. In Word, go to File > Account > Update Options > Update Now. In Teams, check for updates under the three-dot menu next to your profile picture.

Copilot in GCC High vs Commercial Copilot: Key Differences

Item	GCC High Copilot	Commercial Copilot
Data residency	Data stored in US datacenters only	Data may be stored in regional datacenters worldwide
Service endpoints	gcchigh.microsoft.com and office365.us	microsoft.com and office.com
License SKU	CRM_03618229	CRM_03618228
Feature availability	Copilot in Word, Excel, PowerPoint, Teams, Outlook, and Loop	Same features plus Copilot in Microsoft Forms and Planner
Admin configuration	Manual enablement required	Often enabled by default with license assignment

You can now enable Copilot in your GCC High tenant by following the licensing, service toggle, and user assignment steps. After configuration, test access in Word or Teams to confirm that Copilot responds with tenant-specific data. For ongoing management, periodically review the Copilot service setting in the admin center to ensure data source permissions remain enabled. If you encounter persistent issues, verify that your firewall allows the GCC High endpoints listed in the Microsoft 365 URLs documentation.