What's Changing
Microsoft is redesigning the Microsoft 365 Copilot app into a unified, chat-first interface — simplifying navigation, consolidating the Work and Web grounding toggles, and introducing new ways for users to organise and continue conversations. The change is tracked under Message Center ID MC1325422.
The canonical URL for the app moves to https://m365.cloud.microsoft/chat. The legacy copilot.microsoft.com address is preserved as a redirect. On desktop, the update arrives via Microsoft 365 Apps Click-to-Run build 17628.20000+ (Version 2405 or later). Mobile gets it through normal iOS and Android store updates.
copilot.microsoft.com resource may not automatically apply to m365.cloud.microsoft. Audit your CA policies before GA hits your tenant.Who's Affected & When
The rollout phases are:
- Frontier (Targeted Release): Late May 2026 — available now for Targeted Release tenants.
- GA behind opt-in toggle: June 2026 — admins can enable early for all users.
- General Availability (auto-enabled): Late June 2026.
- Standard rollout complete: Expected late July 2026.
The change affects all commercial M365 tenants. Users with a full Microsoft_365_Copilot licence see the complete chat experience with Graph grounding (organisational data). Users on E3/E5 or Business tiers without the Copilot add-on get web-grounded chat with commercial data protection only — no access to emails, Teams chats, or files.
What This Means for Your Environment
The biggest immediate risks for production tenants:
- CA policy gap: If you have a CA policy scoped to the Copilot Enterprise App registration and it uses
copilot.microsoft.comas the cloud app target, it may not evaluate correctly against the newm365.cloud.microsofthost. Users could either gain unintended access or hitAADSTS53003errors on compliant-device gates. - Network allow-lists: Proxy or firewall rules that don't yet include
*.cloud.microsoftwill silently break the app. The redirect fromcopilot.microsoft.compreserves the URL but the actual app content loads from the new domain. - Intune MAM policies: App Protection Policies with managed-browser restrictions need
m365.cloud.microsoftadded to allowed URLs alongside the existingcopilot.microsoft.comentry. - Web grounding & compliance: The unified Work/Web toggle is more prominent in the new UI. If your compliance team has data-residency requirements, disable web grounding now before users discover the toggle themselves: Admin Center > Settings > Copilot > Web search for Copilot.
AADSTS53003 for non-compliant enrolled devices. Run your CA policies in Report-Only mode first against the new URL before GA.Action Items
| Action | Priority | Where |
|---|---|---|
Audit CA policies — add m365.cloud.microsoft as a covered resource | High — Do Now | Entra ID > Conditional Access |
Update firewall / proxy allow-lists to include *.cloud.microsoft | High — Do Now | Network team / O365 endpoints list |
Add m365.cloud.microsoft to MAM App Protection Policy allowed URLs | High — Do Now | Intune > App Protection Policies |
| Validate Copilot licence assignments — confirm who has the full add-on | Medium | Microsoft Graph PowerShell (see below) |
| Review web grounding setting with compliance / DPO team | Medium | M365 Admin Center > Settings > Copilot |
Deploy EnforceEnterpriseSignIn Edge policy for tenants with dual-identity users | Medium | Intune > Settings Catalog > Edge |
| Pin updated Copilot app in Teams App Setup Policy if currently pinned | Low — Before GA | Teams Admin Center > App Setup Policies |
| Communicate UX change to end users; the chat layout is noticeably different | Low — Before GA | Internal comms |
Quick PowerShell Checks
Identify which users in your tenant hold the full Copilot licence before the rollout hits:
# Connect to Graph Connect-MgGraph -Scopes "User.Read.All", "LicenseAssignment.Read.All" # SKU GUID for Microsoft_365_Copilot add-on $copilotSku = "639dec6b-bb19-468b-871c-c5c441c4b0cb" # List licensed users Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq $copilotSku)" ` -ConsistencyLevel eventual -CountVariable count | Select-Object DisplayName, UserPrincipalName
Verify tenant-level Copilot settings via Graph:
Connect-MgGraph -Scopes "TenantSettings.Read.All" Get-MgAdminMicrosoft365CopilotSetting
Microsoft_365_Copilot add-on holders automatically get the full redesigned experience. No re-assignment or new SKU purchase is needed.Original announcement: MC1325422 in the Microsoft 365 Message Center.
