Ludia is a Microsoft Solutions Partner for AI Business Solutions and a FastTrack
Portfolio Partner. Our founder and CEO played a key role in shaping Dynamics 365. So the map
ends in a license line, a hosting decision and a backlog your team can own.
Where the data lives
The system of record is decided before the mechanism, because it limits what
a row can be.
On the industry map in section 2, of
rows have no system of record today: a cost model in a
folder of spreadsheets, an outage scope list emailed round with a version number in the
file name. Those need a platform decision before they need a model, and naming them is how a
map turns into a platform roadmap.
Rows that read from a system outside Microsoft, such as a CMMS, an ERP or a
historian, reach it through a connector or an API, and that integration effort is part of
the row’s build estimate.
Where these numbers come from. Whichever illustrative map is open in section 2. Your map counts your own rows.
Build surfaces
Each mechanism runs on a different Microsoft surface, and bills differently.
Microsoft publishes the ingredients. The decision tree below is ours, written
in Microsoft’s vocabulary, and it’s why a Helios row can be costed before
it’s built.
Process · about 1 in 10
Nowhere. It stays with a person.
Safety-critical judgment, regulatory sign-off, pricing calls,
second-person verification.
Cost: nothing. It’s also what makes the rest of the portfolio
defensible. A plan with stated exclusions passes a risk review that a bigger plan
without them doesn’t.
Workflow · about 3 in 10
Agent flows, or Power Automate cloud flows
Deterministic steps, no judgment. Microsoft’s words: “Agent
flows are deterministic. They execute actions or tasks following a rule-based path. The
same input always produces the same output.”
In Helios. Billed per action, with no AI model unless you add an AI
step. Agent flows bill through Copilot Studio capacity; cloud flows need a Power Automate
license. They’re cheap, fast and easy to trust, so we sequence them first on
purpose.
Agent flows overview ↗
Agent · about 6 in 10
Declarative, or custom engine
Declarative agents use the same orchestrator and models as Microsoft 365
Copilot and inherit its compliance posture. Custom engine agents bring their own
orchestration and model choice. They need their own hosting unless they’re built
in Copilot Studio, which hosts them in Microsoft 365.
In Helios, this is a scoring input. A declarative agent can’t
start itself; it only runs when a person asks. So any row that has to fire on an event
is a custom engine agent, which changes its cost, its hosting and the compliance
conversation. We decide that on the map.
Agents for Microsoft 365 Copilot ↗
Microsoft Foundry Agent Service ↗
Microsoft’s Cloud Adoption Framework
“Route deterministic tasks to rule-based logic instead of premium language models to
maximize efficiency.”
Microsoft’s guidance makes the same argument the workflow column does. The
expensive mistake is turning everything into an agent, and a plan that starts from the
technology makes it by default.
Integrate, manage and operate AI agents ↗
Secure by construction
An agent nobody registered is a risk nobody owns.
Your risk committee will read this section first. Microsoft now has a product answer to agent
governance, and Helios hands your risk team the evidence in a format they already use.
Identity, before capability
Microsoft Entra Agent ID makes each agent a governable principal, and it’s
available to every Entra customer. Conditional access, lifecycle management and access
reviews apply to agents the way they already apply to people. An agent that can’t
be revoked doesn’t get deployed.
One registry, whole fleet
Agent 365, which Microsoft calls the control plane for AI agents, keeps one inventory
of every agent in the tenant, including ones built outside Microsoft, with telemetry and
alerts across the fleet. Extending Entra security to agents needs Agent 365, which
Microsoft 365 E7 includes.
The estate you already run
Purview for data loss prevention and data security posture, Defender for threat
detection, Intune for device posture, extended across agents rather than replaced. There
is no parallel security stack to staff.
Permissions follow the identity an agent runs as
Copilot connectors index external content with its access control lists, so Copilot
only shows items to people who already have access. An agent running as the user sees
what that user can see. An agent running on a maker’s credentials or its own
identity sees what that identity is granted. So “what does this agent read, and as
whom” is a governance decision on the map, not a build detail.
Copilot connectors ↗
Human-led, agent-operated
That phrase is Microsoft’s, from its agentic maturity model, and it’s the
pattern Helios recommends on each agent: the agent drafts, and a named person reviews
and owns the outcome. The Dynamics 365 Sales Qualification Agent ships with the line
“the agent doesn’t replace your judgment or decision-making
process”. Business Central’s Payables Agent introduces an agent
supervisor, which makes human-in-the-loop a job title.
What stays human on a Helios map →
The license
Microsoft 365 E7 bundles four things Helios treats as four different
decisions.
Microsoft 365 E7, which Microsoft calls the Frontier Suite, has been generally
available since 1 May 2026. In Microsoft’s words, it “unifies Microsoft 365
E5, Microsoft 365 Copilot and Agent 365 into a single solution powered by Work IQ.”
Prices vary by agreement, so we leave them to your Microsoft account team.
Included in E7 · formerly Microsoft 365 Copilot
Microsoft Copilot
The assistant inside the apps your people already use. Mostly comes in the
box.
In Helios. Almost never a row on the map. Turning Copilot on
isn’t a portfolio; Helios is about the thirty to sixty agents that don’t come
in the box.
Microsoft 365 E7 ↗
Included in E7 · GA 1 May 2026
Agent 365
A central registry of every agent in the tenant, Microsoft and
non-Microsoft, with access control, observability and security over the fleet. Licensed
per user, not per agent. Registry sync with Amazon Bedrock and Google Cloud is in
preview.
In Helios. The answer to the question every executive asks before funding: what happens when there are forty of them? Because the map counts agents
before anything is built, the Agent 365 conversation happens while the number is still a
forecast.
Agent 365 overview ↗
All Entra customers · agent security via Agent 365
Microsoft Entra Agent ID
Gives an agent an identity that can be authenticated, authorized, governed
and revoked like a person’s. Agent identity blueprints let one policy govern a
family of agents, and an agent’s user account lets it hold a mailbox and a calendar
where the work needs one.
In Helios. Each agent on the map carries the roles it serves and the
system it reads from, which is exactly what an identity and access review needs. Entra
Agent ID gives it an identity; Agent 365 governs the fleet. Two products, two jobs, and we
keep them separate.
What is Entra Agent ID ↗
Not a SKU · APIs GA 16 June 2026
Work IQ
The workplace intelligence layer agents reason over, built across Microsoft
365 and external systems with permission-aware governance. Four surfaces: Chat, Context,
Tools and Workspaces. Every tool call is logged.
In Helios. It’s what makes a Microsoft 365-grounded agent
viable without a bespoke retrieval pipeline. Work IQ inside Copilot Studio is still in
preview, and we say so on the row rather than in a footnote.
Work IQ overview ↗
The caveat that belongs on the page
E7 isn’t all-in
Agentic work bills on top of the seat, in Copilot Credits. Any total-cost story that
leaves consumption out won’t survive a procurement review, which is why Helios
estimates it per agent.
Two things called Frontier
The suite you buy, and the program you join
E7 is a license. The Microsoft Frontier program is early access to pre-release AI
features: no SKU, though business users need a Microsoft 365 Copilot license and some
features carry usage-based costs. If a vendor says they’ll “deploy
Frontier”, ask which one they mean.
The surface your people touch
Most of a Helios roadmap lands in tools your people already open.
Naming the surface a row lands on is part of scoring it, because it decides the
license, the governance model and whether anyone has to learn something new.
Microsoft CopilotFormerly Microsoft 365 Copilot. AI inside Outlook, Teams, Word
and Excel, grounded in your own work.
Copilot ChatSecure AI chat for everyone at work. Where a simple agent shows up
with nothing new to learn.
Copilot CoworkTakes on multi-step work across mail, meetings and documents, and
asks before each action. GA since June 2026, billed by use in Copilot Credits.
Copilot SearchSearch across Microsoft 365 and connected systems. Often the honest
answer for a row somebody assumed needed an agent.
Copilot NotebooksGrounded working sets over your own content, for rows whose
system of record is still documents.
Researcher and AnalystCited research from the web and your work, and analysis that
runs on your own data.
Copilot StudioWhere rows that need orchestration, custom tools or an event
trigger get built and governed.
Product names and icons are Microsoft’s. The icons are Microsoft’s official
files, shown unmodified to identify each product.
What it consumes
Consumption can be forecast per agent. Per tenant, it can only be guessed.
Each agent on the map carries its trigger, its inputs, its outputs and the
number of people it serves. Frequency times users gives a first estimate you can defend
line by line, instead of a tenant-level number nobody can source.
Copilot Credits
Microsoft’s “common currency for eligible Microsoft services with
usage-based billing”. Copilot Studio bills credits two ways. Agents built on Microsoft’s “GitHub
Copilot harness” are charged for tokens, tools and runtime from the first build;
standard agents are charged per event, such as an answer, an action or a grounding call. Bought as packs, pay-as-you-go, or a one-year Copilot
Credit Pre-Purchase Plan. Copilot Studio reports the credits each agent uses.
How Copilot Studio bills credits ↗
Agent usage estimator ↗
ACUs are a different thing
ACUs are bought in the one-year Microsoft Agent Prepurchase Plan.
Each pays a dollar of retail usage across Copilot Credit services, Microsoft Foundry,
Fabric and GitHub, and purchases are final. They aren’t Copilot
Credits, and they aren’t the separate credit pre-purchase plan either. A
licensing specialist will spot a document that mixes them up.
Agent Prepurchase Plan ↗
Seats work the same way. The distinct roles across
the agents tell you who plausibly needs a Copilot or E7 seat, and the workflows and processes
say who doesn’t. That denominator is what makes the number hold up in procurement.
How the estimate is built →
Dynamics 365
The cheapest agent is the one you already license.
Before we cost a single build, we check every row against Microsoft’s
first-party Dynamics 365 agents. Statuses below are Microsoft’s own as of October 2026.
Business Applications uses three tiers: preview, production-ready preview, and
GA.
Sales
Sales Qualification, Sales Opportunity, Sales Research,
Recommended Actions, plus the Sales agent in Microsoft 365 Copilot.
GA.
Customer Service
Case Management, Customer Intent, Customer
Knowledge Management, Quality Evaluation and more. GA, with some features
still in preview.
Project Operations
Time Entry, Expense and Approvals agents.
Production-ready preview.
Field Service
Scheduling Operations Agent.
Preview.
Supply Chain
Supplier Communications Agent, part of the
Procurement Agent: production-ready preview. Impact analysis:
preview.
Finance
Account Reconciliation Agent.
Production-ready preview.
Business Central
Sales Order Agent and Payables Agent.
GA, with some capabilities still rolling out.
ERP MCP server
The older static Dynamics 365 ERP MCP server
retired on 1 October 2026. The current one is GA and scopes context to the
calling user’s role.
Microsoft’s own guidance is close to the Helios thesis: “What matters most is the foundation: structured data, clear
governance, and business logic that allows agents to operate effectively.” That
foundation is what the map inventories.
Reference
Everything above, straight from Microsoft.
This stack changes every quarter. Check these pages before quoting a SKU, a
status or a date, including anything on this one. Last checked 3 October 2026.