Copilot Cowork and Dynamics 365: What It Means for Business Central

Copilot Cowork is Microsoft 365 Copilot's agent workspace, and Microsoft now offers Dynamics 365 plugins for it. This update sets out what is available, which Dynamics 365 products each plugin covers, and what it means if you run Business Central.

Key PointThe Cowork ERP plugin is for Dynamics 365 finance and operations apps. Business Central connects to agents through its own MCP server.

What Microsoft released

On 16 June 2026 Microsoft announced that its Dynamics 365 Sales and Customer Service plugins for Copilot Cowork are generally available. Microsoft says anything that writes back goes through an approve, edit or dismiss step, and that users can only reach data they can already access in the application.

Microsoft's list of available Cowork plugins also includes a Dynamics 365 ERP plugin, for financial data, supply chain information and operations workflows.

Which ERP the plugin covers

The ERP plugin is for Dynamics 365 finance and operations apps, not Business Central. Microsoft's set-up guide connects it to a finance and operations environment, and requires enrolment in the Frontier preview programme and Copilot licensing.

So if you run Business Central, this plugin is not your route into Cowork.

Pro TipStart any agent on read-only access. Add write access one API page at a time, once you trust what it does.

The Business Central route: MCP

Business Central has its own way to connect AI agents. The Business Central MCP server lets clients such as Copilot Studio and Visual Studio Code work with Business Central data.

• By default it gives read-only access to the API pages and queries the signed-in user may use.
• Administrators decide which API pages agents can access, and whether they can create, modify or delete records.
• Every operation runs with the user's own identity and permissions, so audit trails show who did what.

Microsoft also explains how to create agents in Copilot Studio that connect to Business Central.

Before you let an agent write to your data

An agent can only be as safe as the permissions behind it. Before you give one write access:

• review who can post journals and edit master data;
• start with read-only access and add write access one API page at a time;
• check posting rules and approvals before any agent can create or post documents.

If an agent will handle personal data, the ICO's guidance on AI and data protection sets out what to consider.

Watch OutAn agent works with the permissions of the person using it. Tighten permissions before you connect one, not after.

Next steps

Business Central has its own built-in Copilot features and agents too. Our Copilot for finance guide and our summary of 2026 release wave 1 cover them.

For a read-only scan of your setup, start with our free Business Central review, or read more about our Business Central services.