You want to control which plugins Copilot loads by default for all users in your tenant. Without proper configuration, users can enable or disable plugins individually, leading to inconsistent experiences and potential data access issues. The Microsoft 365 admin center provides a centralized interface to set default plugins for Copilot across your organization. This article explains how to configure these default plugins step by step using the admin center.
Key Takeaways: Configuring Copilot Default Plugins via Admin Center
- Microsoft 365 admin center > Settings > Copilot > Plugins: Central location to manage default plugins for all users.
- Enable or disable plugins globally: Toggle plugins like Microsoft Graph connectors, Bing Search, and third-party connectors on or off by default.
- User override setting: Decide whether users can change the default plugin state individually in their Copilot settings.
Overview of Copilot Default Plugins
Copilot default plugins are extensions that provide access to data sources and services beyond Microsoft Graph. Common default plugins include Bing Search, Microsoft Graph connectors for SharePoint and OneDrive, and third-party connectors like ServiceNow or Salesforce. When you configure a plugin as default, it is automatically enabled for every user in the tenant unless you allow individual overrides.
Before you begin, ensure you have the Global Administrator role or the Copilot Administrator role assigned in your tenant. Without these roles, the Plugins section in the admin center will not be visible. You also need a valid Copilot for Microsoft 365 license assigned to your admin account.
What Happens When You Set a Default Plugin
When you enable a plugin as default, it appears in the Copilot pane for all users. Users see the plugin as already turned on. If you disable the user override option, users cannot turn the plugin off. If you allow user override, users can disable the plugin in their personal Copilot settings. The default plugin configuration applies to Copilot in Microsoft Teams, Word, PowerPoint, Excel, Outlook, and the Copilot web interface.
Steps to Configure Default Plugins in the Admin Center
Follow these steps to set default plugins for Copilot across your organization. The steps assume you are signed in to the Microsoft 365 admin center with the required permissions.
- Sign in to the Microsoft 365 admin center
Open a browser and go to https://admin.microsoft.com. Sign in with an account that has the Global Administrator or Copilot Administrator role. - Navigate to Copilot settings
In the left navigation menu, expand Settings and select Copilot. If you do not see Copilot in the Settings list, your account may lack the required role or your tenant may not have Copilot enabled. - Open the Plugins tab
On the Copilot settings page, select the Plugins tab. This tab lists all available default plugins for Copilot in your tenant. The list includes Microsoft-owned plugins and any third-party connectors that have been added. - Enable or disable a default plugin
Find the plugin you want to configure. Click the toggle switch next to the plugin name to set it to On (enabled by default) or Off (disabled by default). Changes apply to all users within a few minutes. - Configure user override for a plugin
For each plugin, you can allow or block users from changing its state. Click the three dots (More actions) next to the plugin and select Edit. In the panel that opens, check or uncheck Allow users to change this plugin setting. Unchecking this option locks the plugin to the default state you set. - Save your changes
After adjusting the toggle and the override setting, click Save at the bottom of the edit panel. The admin center applies the configuration to your tenant. Users see the new default plugin state within one hour.
Common Issues and Limitations
Plugin toggle is grayed out or not clickable
If a plugin toggle appears grayed out, the plugin may be managed by a policy in Microsoft Intune or a group policy object. Check your device management policies for any Copilot-related settings that override the admin center configuration. Resolve the conflict in the policy management console first, then return to the admin center.
Users report the plugin is missing from Copilot
A plugin enabled as default may not appear if the user does not have the required license or if the plugin requires a separate subscription. For example, a ServiceNow connector requires a valid ServiceNow license for each user. Verify that the user has the necessary licenses assigned in the Microsoft 365 admin center under Users > Active Users.
Changes take longer than one hour to apply
In rare cases, plugin configuration changes can take up to 24 hours to propagate to all users. This delay occurs when the admin center experiences high load or when the tenant has a large number of users. Wait 24 hours before opening a support ticket. You can force a refresh by signing out of the admin center and signing back in.
Copilot Plugin Defaults vs User-Controlled Plugins: Key Differences
| Item | Admin Configured Default | User Controlled |
|---|---|---|
| Who sets the state | Global Admin or Copilot Admin in admin center | Individual user in Copilot pane |
| Scope of change | All users in the tenant | Only that user |
| Override allowed | Controlled by admin via the Allow users to change setting toggle | N/A — user always controls their own state |
| Time to apply | Up to 1 hour (rarely 24 hours) | Instant |
| Visibility in Copilot | Plugin appears automatically if enabled | User must enable it manually |
You can now manage Copilot default plugins centrally using the Microsoft 365 admin center. Start by enabling the Bing Search plugin for all users to improve web-based responses. Then configure the user override setting to prevent users from disabling critical plugins like Microsoft Graph connectors. For third-party connectors, test the plugin with a small pilot group before rolling it out as a default to the entire organization.