The Challenge: Making Copilot Readiness Scalable

Microsoft Copilot represents one of the most significant productivity opportunities for organisations in a generation. But unlocking its value is not simply a matter of turning it on. The reality that practitioners encounter time and again is that most Microsoft 365 environments have accumulated years of configuration drift, governance gaps, and data hygiene issues that silently undermine Copilot’s effectiveness, and in some cases, create real security and compliance risk.

The core problems to solve:

Copilot readiness assessments were manual, inconsistent, and time-consuming to deliver

• Partners lacked a structured framework to identify and prioritise remediation work
• Customers had no clear visibility into what was blocking or helping to accelerate their AI journey
• There was no scalable commercial model that could turn assessments into a repeatable service

The Spark: A GitHub Repo and a Big Idea

Shortly after the initial conversation with Infinigate, Aura was provided access to a GitHub repository maintained by Microsoft engineers; a set of PowerShell and Python scripts designed to probe Microsoft Graph endpoints and surface common Copilot adoption issues. The scripts were functional, technically sound, and clearly built by people who understood the problem deeply.

But they were also raw. Running them required technical knowledge, manual configuration, and produced output that, while accurate, was not something you could put in front of a customer or a non-technical stakeholder. There was no UI, no reporting layer, no persistence, and no scalability story.

The underlying capability was excellent — the question was whether Aura could wrap it in a platform that made it genuinely effortless to deploy and consume. What if we could get from ‘plug in the customer’s tenant’ to ‘here is your AI readiness report’ in minutes, not weeks?

Aura’s team took that question seriously. They sat down with the senior leadership team as the customer — a brief but revealing meeting — to understand what was actually needed from an assessment. The conversation was quite eye-opening. What customers cared about was not a list of raw configuration values. They wanted to know: “Are we ready for Copilot?” And if not: “What do we need to fix, in what order, and why does it matter?”

That framing became the north star for everything that followed.

Building the Prototype: Zero-Touch by Design

With the concept validated, Aura’s engineering team set to work on a prototype. The design principles were clear from the outset:

• Zero touch — once configured, the tool should run assessments without manual intervention
• Secure — enterprise-grade authentication, authorisation, and data handling from day one
• Scalable — built to support multiple tenants and multiple partners, not just a one-off demo
• Actionable — output that a customer could actually use to make decisions and prioritise work

Architecture Overview

The prototype was built on Azure and structured around three clearly separated layers:

Presentation Layer: Azure App Service web application with Single Sign-On (SSO) via Microsoft Entra ID. Partners and assessors authenticate securely and are presented with a clean, guided interface for initiating and reviewing assessments.

API Layer:  A dedicated API layer handles all communication with Microsoft Graph, orchestrates script execution, and manages the flow of data between the front-end and the database. This separation ensures that no sensitive data is exposed through the UI, and that the assessment engine can be updated independently.

Data Layer: Assessment results are captured and stored in a secure, isolated database. This creates a persistent record of findings across runs, enabling trend analysis, audit trails, and longitudinal tracking of a customer’s AI readiness posture over time.

With the prototype running against test data and delivering a recognisable assessment experience, Aura had something tangible to show: a working demo that demonstrated the full flow from tenant connection to findings report.

The Microsoft AI Tour: Validation

The Microsoft AI Tour is one of the more significant events in the recent Microsoft partner calendar — a blend of networking, learning, and peer exchange that brings together the ecosystem’s most active AI practitioners. For Aura, attending was always going to be valuable. What they didn’t anticipate was just how consequential it would turn out to be.

During the event, Aura’s team found themselves in conversation with a group of engineers from Microsoft, the same team responsible for the GitHub repository that had been the starting point for the whole project. It was one of those serendipitous moments that only happen when the right people are in the same room.

Aura shared what they’d built, the concept, the architecture, the prototype, and explained where they were taking it. The Microsoft team listened, asked sharp questions, and then gave them something invaluable: their encouragement to build this as a fully-fledged, production-ready tool. That conversation turned a prototype into a product.

The AI Tour also provided broader validation that the problem Aura was solving was real and widely felt. Across workshops, roundtables, and hallway conversations, the same themes kept surfacing: partners were struggling to help customers understand their readiness, assessments were inconsistent, and there was a clear market need for something systematic and scalable.

Aura left the event with renewed conviction and a clear mandate to finish the job.

The Solution: A Fully Functional AI Assessment Platform

Today, the Aura AI Assessment Tool is a fully functional prototype ready to be tested against a real customer tenant. It represents a significant step forward in the way Copilot readiness can be assessed, delivered, and acted upon.

Core Assessment: Four Microsoft Graph Endpoints

The platform’s core testing capability probes four critical Microsoft Graph endpoints that consistently reveal the most common Copilot adoption blockers and misconfigurations:

• Licensing and entitlement validation — ensuring the correct licences are in place and properly assigned
• Identity and access configuration — checking for conditional access policies, MFA coverage, and sign-in health
• Data governance posture — assessing sensitivity labels, DLP policy coverage, and information protection maturity
• SharePoint and OneDrive hygiene — surfacing oversharing, external access risks, and content organisation issues that could expose sensitive data through Copilot responses

Deep-Dive Modules

Beyond the core checks, the platform includes three specialist deep-dive modules for organisations that need a more granular assessment of specific workloads:

Microsoft Purview: A comprehensive review of data classification, retention, and compliance posture. Identifies gaps in sensitivity labelling, auditing configuration, and insider risk policy coverage — all critical foundations for responsible Copilot deployment.

Copilot Studio: An assessment of the organisation’s readiness to build and govern custom Copilot agents. Reviews existing agent configurations, connector usage, and governance controls to ensure custom AI development is proceeding safely and within policy.

Exchange Online: A detailed review of mail flow, transport rules, anti-spam and anti-phishing configuration, and mailbox permissions. Given that email data is one of the richest sources Copilot draws upon, getting this layer right is non-negotiable.

Results Capture and Reporting

All assessment results, whether from the core Graph checks or the deep-dive modules, are captured into the platform’s secure database at the point of execution. This means results are immediately available for review, comparison, and reporting without any manual data handling. The architecture supports both point-in-time assessments and ongoing monitoring, giving partners a powerful tool for both initial engagements and long-term customer success conversations.

Where Aura Are Now and What Comes Next

Today, the Aura AI Assessment Tool is a fully functional prototype ready to be tested against a real customer tenant. It represents a significant step forward in the way Copilot readiness can be assessed, delivered, and acted upon.

The Aura AI Assessment Tool has moved from concept to fully functional prototype in a remarkably short period of time. The platform is now ready for its first real-world tenant test; a major milestone that will validate the assessment engine against live Microsoft 365 data and produce the first customer-ready output.

Immediate priorities:

• Complete the first live tenant assessment and validate findings accuracy
• Refine the reporting layer based on real-world output and stakeholder feedback
• Define the commercial model and packaging for the tool as a repeatable partner service

Longer-term roadmap:

• Expand the deep-dive module library to cover additional workloads and emerging Copilot scenarios
• Introduce benchmarking capabilities to allow customers to compare their posture against industry peers
• Build an automated remediation guidance layer that generates prioritised action plans from assessment results
• Explore integration with Microsoft’s partner tooling ecosystem for seamless workflow integration

Every organisation considering Microsoft Copilot needs to understand their readiness posture before they commit to deployment. The Aura AI Assessment Tool makes that analysis fast, consistent, and actionable — turning what was once a weeks-long manual process into something that can be initiated in minutes and delivers immediate value.

From Data to Insight: GenAI-Powered Reporting

Capturing assessment results into a database is only half the story. Raw data, however accurate, rarely speaks for itself. The real value comes from translating those findings into a narrative that any customer can understand, act upon, and share with their leadership team. That is where the platform’s GenAI reporting layer comes in.

Once the assessment engine has completed its checks and the results are committed to the database, the platform invokes a generative AI model to craft the narrative content of the customer report. The AI draws directly on the structured assessment data, findings, severity scores, configuration states, and gap analysis, and synthesises it into clear, professional, human-readable language tailored to the customer’s context.

Critically, this AI-generated content does not stand alone. It is coupled with the notes captured during the initial customer meeting.  Providing qualitative context about the organisation’s goals, concerns, existing initiatives, and strategic priorities. The result is a report that combines the rigour of automated technical assessment with the nuance of a genuine human conversation. It reads like something a senior consultant spent days writing, because it reflects both what the data says and what the customer told us matters to them.

The AI Readiness Assessment Report

The finished output is a comprehensive AI Readiness Assessment Report, a single, polished deliverable that gives the customer everything they need to understand where they stand and what to do next. Each report includes:

• An executive summary of the organisation’s overall AI readiness posture, written for leadership audiences
• Detailed findings from the core Graph assessment and any deep-dive modules run, with severity ratings and plain-English explanations
• Contextual commentary informed by the customer discovery meeting, ensuring findings are interpreted through the lens of the organisation’s own stated goals and priorities
• A prioritised set of Professional Services recommendations to address the most common and impactful gaps identified, including Document Labelling, PII risk remediation, governance uplift, and more
• A clear remediation roadmap that gives the customer a logical sequence of steps to shore up their foundations and unlock the full potential of Microsoft Copilot

Where the assessment identifies common pitfalls — such as incomplete Document Labelling or unmitigated PII risks — the report includes targeted Professional Services recommendations from Aura. These are not generic suggestions: they are scoped, practical proposals that map directly to the specific gaps found in that customer’s environment, giving the partner a natural and well-evidenced path to a follow-on engagement.

Meaningful Value on Every AI Journey

The Aura AI Assessment Tool represents something genuinely exciting for customers and prospects. Not because it is a clever piece of technology — though it is — but because it delivers real, meaningful value now when it matters most: when an organisation is trying to understand what stands between them and the transformative potential of AI.

Every organisation’s AI journey is different. Some are further along than they realise; others have more groundwork to do before Copilot will deliver the results they are expecting. What the Aura AI Assessment Tool gives you (and by extension gives our customers) is a clear, honest, data-driven picture of where they are, coupled with a practical plan for what comes next.

That is a conversation worth having, and now there is exactly the right tool to start it.

About Aura Technology

Aura Technology is a Microsoft Solutions Partner specialising in Modern Work, Security, and Cloud adoption. We work with organisations across the UK to help them get measurable value from their Microsoft investments — safely, securely, and at the pace that works for their business.

The AI Assessment Tool is one of a growing portfolio of accelerators and managed services that Aura is developing to help partners and customers navigate the AI era with confidence.