Platform Engineering: The New Operating Model for Azure

Platform Engineering: The New Operating Model for Azure

DevOps changed how software is built, but it didn't eliminate complexity—it simply redistributed it. As organizations adopted cloud platforms, Infrastructure as Code, containers, and CI/CD pipelines, developers inherited responsibilities that once belonged to operations teams. Networking, security, identity, compliance, monitoring, governance, and infrastructure provisioning became part of every developer's daily workload. The result was a new bottleneck driven by cognitive overload rather than manual ticket queues. In this episode of the M365 FM Podcast, host Mirko Peters explores why Platform Engineering has emerged as the next evolution of cloud operations and how it fundamentally changes the way enterprises build and operate Microsoft Azure environments. Instead of treating infrastructure as a service that developers request, Platform Engineering treats it as a product they consume. You'll discover how Internal Developer Platforms (IDPs), Azure Bicep, Azure Verified Modules, Golden Paths, self-service infrastructure, and automated governance dramatically improve developer productivity while strengthening security and compliance. This episode provides a practical blueprint for organizations looking to scale Azure without scaling operational complexity. WHY DEVOPS REACHED ITS LIMITS DevOps transformed software delivery by breaking down barriers between development and operations. For small teams, this worked remarkably well. But as organizations grew, developers inherited an ever-expanding list of operational responsibilities, dramatically increasing cognitive load and reducing the time available for building business value.  Topics include: * Infrastructure as Code * Networking * Identity Management * Security * Compliance * Monitoring * Incident Response * Automation * CI/CD * Developer Experience Rather than eliminating bottlenecks, DevOps often shifted them from operations teams to developers. THE COGNITIVE LOAD CRISIS One of the central themes of this episode is cognitive load. Modern developers must understand networking, Azure Policy, RBAC, identity, monitoring, infrastructure, security, and application development—all at the same time. Every deployment requires context switching across multiple systems, dramatically reducing productivity. The discussion explains why developer burnout isn't caused by difficult programming problems, but by unnecessary operational complexity that distracts teams from delivering business value. Platform Engineering reduces this burden by moving infrastructure complexity into reusable platform services.  PLATFORM ENGINEERING EXPLAINED Platform Engineering introduces an entirely different operating model. Instead of infrastructure teams responding to tickets, they build internal products that developers consume through self-service. The conversation explores: * Internal Developer Platforms (IDPs) * Self-service infrastructure * Platform teams * Infrastructure products * Developer portals * Automation * Platform APIs * Standardization * Service catalogs * Product thinking Infrastructure becomes predictable, repeatable, and immediately available without manual approvals. GOLDEN PATHS & SELF-SERVICE INFRASTRUCTURE A key concept discussed throughout the episode is the Golden Path. Rather than forcing developers to make hundreds of infrastructure decisions, Platform Engineering provides secure, opinionated deployment patterns that automatically include organizational standards. Topics include: * Golden Paths * Azure Bicep * Azure Verified Modules * Infrastructure templates * Deployment automation * Governance by design * Built-in security * Observability * Logging * Compliance Developers focus on building applications while the platform automatically enforces security, governance, and operational best practices. AZURE BICEP AS THE FOUNDATION Azure Bicep plays a central role in enabling modern Platform Engineering. Instead of maintaining large ARM Templates or manually provisioning Azure resources, organizations create reusable Bicep modules that encapsulate networking, identity, monitoring, security, and infrastructure standards. The episode explains how Azure Verified Modules, module registries, semantic versioning, and Infrastructure as Code enable organizations to scale Azure consistently across hundreds of subscriptions and development teams.  GOVERNANCE WITHOUT SLOWING DEVELOPERS DOWN Traditional governance often relies on manual approvals that slow software delivery. Platform Engineering replaces those approval gates with automated guardrails. The discussion covers: * Azure Policy * RBAC * Policy as Code * Compliance as Code * Continuous validation * Automated security * Landing Zones * Management Groups * Drift detection * Governance automation Instead of reviewing deployments after they're created, organizations enforce standards automatically before infrastructure reaches production. INTERNAL DEVELOPER PLATFORMS (IDPS) Technology alone doesn't create great developer experiences. Platform Engineering introduces Internal Developer Platforms that act as centralized portals where developers discover templates, deploy infrastructure, review documentation, and consume reusable platform services. Rather than searching across multiple repositories or submitting support tickets, developers gain access to standardized infrastructure through intuitive self-service experiences. The episode also explores why successful platform teams measure adoption and developer satisfaction—not simply the number of features they deliver.  PLATFORM ENGINEERING AS A PRODUCT One of the biggest mindset shifts discussed is treating the platform itself as a product. Platform teams become internal product organizations that continuously improve developer experience through feedback, usage metrics, adoption analysis, and iterative improvements. Success is measured by: * Developer satisfaction * Platform adoption * Time-to-first-deployment * Reduced support tickets * Faster onboarding * Reduced cognitive load * Deployment frequency * Lead time * Reliability * Business value A successful platform is one developers choose because it makes their work easier Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Power BI Copilot - Simply Explained

Power BI Copilot brings generative AI directly into Microsoft's business intelligence platform, helping users build reports, write DAX formulas, analyze data, and generate insights using natural language. Instead of memorizing complex formulas or spending hours designing dashboards, you can simply describe what you want, and Copilot provides a strong starting point. However, while Copilot is incredibly powerful, it isn't infallible. Understanding both its strengths and its limitations is essential if you want to use it effectively in production environments. AN AI ASSISTANT FOR YOUR DATA Power BI Copilot is built directly into both Power BI Desktop and the Power BI Service. Unlike a general-purpose AI chatbot, Copilot understands your semantic model, including tables, relationships, measures, and calculated columns. Rather than relying on internet knowledge, it works with your actual business data to generate formulas, reports, and answers tailored to your environment. This deep integration is what makes Copilot significantly more useful than simply asking a generic AI assistant about Power BI. THE THREE BIGGEST SUPERPOWERS Copilot excels in three key areas. First, it can generate DAX measures from plain English. Instead of remembering complex syntax, you describe the calculation you need, and Copilot produces both the formula and an explanation. Second, it can automatically create complete report pages. Simply describe the dashboard you want, and Copilot builds an initial layout with visuals, KPIs, slicers, and charts. Finally, Copilot allows business users to ask questions about their data in natural language while also generating written summaries that explain trends and insights without requiring deep analytical expertise. THE BIGGEST RISK One of the most important lessons when using Power BI Copilot is understanding that confident answers are not always correct. Copilot may occasionally misunderstand your semantic model, interpret report terminology incorrectly, or retrieve values from the wrong visual. Because its responses sound authoritative, users can easily trust incorrect numbers without verification. For this reason, every important result should be validated against the underlying report before being shared with stakeholders. WRITING BETTER PROMPTS The quality of Copilot's answers depends heavily on how questions are asked. Using the exact terminology from your semantic model dramatically improves accuracy. Referencing actual table names, measures, report labels, and visual titles reduces ambiguity and helps Copilot understand your intent more reliably. Being specific about time periods, visual types, and required outputs also leads to significantly better results than broad or vague requests. WHAT COPILOT CANNOT DO Despite its impressive capabilities, Copilot has clear limitations. It cannot accurately predict future business performance, explain why business events occurred, repair poor-quality data, or completely redesign report layouts. It also depends entirely on the quality of your semantic model—if your data is inconsistent or poorly structured, Copilot's responses will reflect those weaknesses. Like any AI assistant, it accelerates existing processes rather than replacing good data modeling practices. BUILDING A BETTER DATA MODEL The foundation of successful AI-powered reporting is a clean semantic model. Descriptive table names, meaningful column names, well-defined relationships, and Microsoft's "Prep Data for AI" capabilities all help Copilot understand business context more effectively. Organizations that invest time in organizing their data models consistently receive more accurate DAX formulas, report layouts, and natural language responses. WHY POWER BI COPILOT MATTERS Power BI Copilot dramatically lowers the learning curve for business intelligence. Citizen developers no longer need to memorize DAX syntax before becoming productive, while experienced analysts can automate repetitive report creation and formula writing. At the same time, Copilot serves as an excellent teaching tool by explaining generated formulas and helping users understand Power BI concepts as they build reports. The most successful users treat Copilot as a drafting assistant rather than a replacement for critical thinking. They validate calculations, refine AI-generated reports, and use Copilot to accelerate their workflow while relying on their own expertise to make final business decisions. Used this way, Power BI Copilot becomes one of the most valuable productivity features available in the modern Power BI platform. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Microsoft Security Copilot - Simply Explained

Security teams face a common challenge: thousands of security alerts, limited staff, and not enough time to investigate every incident. Most alerts turn out to be harmless, but hidden among them can be genuine attacks that require immediate attention. Microsoft Security Copilot was built to solve exactly this problem. Rather than replacing your existing security tools, it adds an AI-powered intelligence layer across Microsoft Defender, Entra, Intune, Purview, and other Microsoft security products. It helps analysts investigate faster, prioritize threats, summarize incidents, and recommend next steps using natural language. AN AI ASSISTANT FOR YOUR SECURITY STACK Security Copilot isn't another security dashboard. Instead, it works alongside the Microsoft security tools you already use, allowing you to ask questions like "What happened overnight?", "Which devices are out of compliance?", or "Show me risky sign-ins." Unlike general-purpose AI, Security Copilot understands your organization's environment, combining Microsoft's global threat intelligence with your own security data to provide recommendations that are directly relevant to your tenant.  SECURITY COMPUTE UNITS (SCUS) Every action inside Security Copilot is powered by Security Compute Units (SCUs). Think of SCUs as the fuel that powers the AI. Each prompt, report, investigation, or AI agent consumes a small number of compute units. Organizations with Microsoft 365 E5 licensing receive monthly SCUs based on the number of licensed users, while additional capacity can be purchased if required. Microsoft also provides detailed usage reporting, allowing administrators to monitor AI consumption and prevent unexpected costs.  AI AGENTS THAT DO THE HEAVY LIFTING The most powerful feature of Security Copilot is its growing collection of specialized AI agents. The Phishing Triage Agent automatically investigates suspicious emails, evaluates sender reputation, analyzes links, and prioritizes dangerous messages. The Conditional Access Optimization Agent reviews Entra ID policies, identifies security gaps, and recommends Zero Trust improvements. The Vulnerability Remediation Agent prioritizes devices requiring updates, while the Threat Intelligence Briefing Agent generates executive-ready reports summarizing emerging threats relevant to your organization. Additional agents assist with security alert triage, insider risk investigations, data loss prevention, and recurring security tasks through reusable prompt books.  WHAT DAILY WORK LOOKS LIKE Instead of manually switching between Defender, Entra, Intune, and multiple admin portals, Security Copilot brings everything together. A security analyst can begin the day by reviewing an AI-generated summary of overnight incidents. Reported phishing emails are already investigated, risky sign-ins identified, vulnerable devices prioritized, and recommended actions prepared. Routine investigations that previously required complex KQL queries and multiple management consoles become simple natural-language conversations, allowing analysts to focus on decisions rather than repetitive analysis.  WHO BENEFITS MOST? Security Copilot is especially valuable for organizations with small IT and security teams. Many businesses rely on a single administrator responsible for infrastructure, identity, compliance, endpoint management, and cybersecurity. Security Copilot acts as a force multiplier by handling repetitive investigations, accelerating incident response, and helping less experienced administrators perform complex security tasks with confidence. Rather than replacing security professionals, it enables them to work significantly faster while reducing alert fatigue and burnout.  GETTING STARTED Organizations using Microsoft 365 E5 can enable Security Copilot through their Microsoft environment and begin working almost immediately. After assigning the appropriate security roles and creating a workspace, administrators can start experimenting with AI prompts and gradually introduce specialized agents such as Conditional Access Optimization or Phishing Triage. Beginning with one or two agents allows teams to experience immediate productivity improvements before expanding into more advanced automation scenarios. SECURITY, PRIVACY, AND GOVERNANCE Security Copilot follows the same permission model as the Microsoft security platform itself. It can only access data users are already authorized to view, while customer information remains inside the organization's Microsoft tenant. However, organizations should review permissions, data classifications, and governance policies before enabling AI broadly to ensure sensitive information is properly protected. With strong governance in place, Security Copilot becomes a trusted AI assistant that helps security teams investigate threats faster, reduce manual effort, and improve overall cyber resilience without sacrificing control or compliance. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Copilot in Business Central - Simply Explained

Microsoft Copilot is becoming a core part of Dynamics 365 Business Central, transforming it from a traditional ERP system into an AI-powered business assistant. Instead of switching between applications or manually searching through records, Copilot works directly inside your ERP environment, helping users retrieve information, generate content, automate data entry, and increasingly complete business processes on their behalf. THE THREE LAYERS OF COPILOT Copilot in Business Central consists of three distinct layers. The first layer includes the built-in AI features that come with your existing Business Central license. These tools help users work faster through intelligent suggestions and natural language interactions. The second layer introduces Microsoft's AI Agents. Unlike traditional Copilot features, these agents don't simply answer questions—they actively perform business tasks in the background while keeping users in control through approval workflows. The third layer allows organizations to build their own custom agents, enabling AI to automate unique business processes tailored to specific operational requirements. BUILT-IN COPILOT FEATURES Business Central already includes several AI capabilities at no additional licensing cost. Users can analyze data using natural language with Analysis Assist, receive intelligent Autofill suggestions during data entry, automatically generate marketing descriptions for products, simplify bank reconciliations, extract information from electronic documents, and ask questions directly through Chat with Copilot. These features accelerate everyday work while remaining fully integrated into Business Central's existing interface and security model. THE POWER OF AI AGENTS Microsoft's AI Agents represent the biggest evolution of Copilot inside Business Central. The Sales Order Agent can process incoming customer emails, extract order information, verify inventory, and prepare draft sales orders for approval. The Payables Agent reads supplier invoices, matches them against purchase orders, and prepares them for payment processing. Future agents will automate additional finance and operational workflows, including expense management. Unlike traditional AI assistants, these agents execute business processes rather than simply providing recommendations, while always requiring human approval before critical actions are finalized. COPILOT CREDITS AND LICENSING The built-in Copilot capabilities are included with every Business Central license. AI Agents, however, operate using Microsoft's Copilot Credit model. Every AI action consumes credits depending on the complexity of the task, from simple responses to fully automated business operations such as creating sales orders or processing invoices. Organizations can monitor credit consumption, purchase additional credit packs, or use pay-as-you-go billing while maintaining complete visibility into AI usage across the environment. BUILDING CUSTOM AGENTS Business Central's Agent Designer enables organizations to create their own AI agents without traditional software development. Administrators can describe tasks in plain English, assign permissions, define business rules, and deploy agents that monitor processes, validate transactions, review data, or automate repetitive activities unique to their organization. For developers requiring deeper customization, Microsoft also provides an AI Development Toolkit with APIs and lifecycle management capabilities for enterprise-grade agent development. A PRACTICAL BUSINESS EXAMPLE Imagine a customer sends an email requesting fifty laptops and twenty monitors. Instead of manually reading the email, checking inventory, creating a sales order, and preparing a quotation, the Sales Order Agent performs each step automatically. It extracts the requested products, verifies stock availability, applies customer-specific pricing, creates a draft order, and presents everything for approval. Within minutes, what previously required significant manual effort becomes a simple review and approval process, allowing employees to focus on customer relationships instead of repetitive administration. SECURITY AND GOVERNANCE Every Copilot Agent operates within Business Central's existing security framework. Agents inherit permission boundaries, maintain their own identities, log every action they perform, and require approvals for sensitive business operations. Organizations can monitor AI activity, assign dedicated administration roles, and govern AI usage just as they would any other business process. This combination of automation, transparency, and governance makes Business Central's AI agents suitable for enterprise environments where compliance and accountability remain essential. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Copilot Cowork - Simply Explained

Microsoft Copilot changed how we interact with AI by helping us summarize emails, draft documents, and answer questions. But there's still one major problem: you're responsible for connecting everything together. After Copilot generates content, you still have to coordinate meetings, send emails, update documents, assign tasks, and keep projects moving. Copilot Cowork solves that problem. Instead of helping with one task at a time, it accepts an entire business goal and executes the work across multiple Microsoft 365 applications while you focus on higher-value activities. Rather than acting like an assistant waiting for instructions, Cowork behaves like a digital teammate managing the coordination behind the scenes. WHY REGULAR COPILOT ISN'T ENOUGH Traditional Copilot excels at individual tasks. It can summarize conversations, generate presentations, write emails, or create Excel formulas within seconds. However, real work rarely consists of a single task. Most business processes involve multiple applications, several people, and a sequence of actions that require coordination. This orchestration often consumes far more time than generating the content itself. Copilot Cowork was built specifically to eliminate this coordination overhead by planning and executing entire workflows instead of individual prompts. WHAT MAKES COWORK DIFFERENT? Copilot Cowork is an AI agent powered by Microsoft's Work IQ platform that understands your emails, meetings, documents, conversations, and organizational context. Rather than asking for one prompt after another, you simply describe the outcome you want. Cowork determines the required steps, gathers the necessary information, works across Microsoft 365 applications, and executes the task in the background. Sensitive actions such as sending emails or scheduling meetings always require your approval before completion, ensuring you remain in control. HOW COWORK WORKS Think of Cowork as a project manager rather than a chatbot. You define the objective, while Cowork researches information, prepares documents, checks calendars, schedules meetings, drafts communications, and coordinates multiple Microsoft 365 services simultaneously. Unlike traditional Copilot, which requires your constant interaction, Cowork continues working while you're attending meetings, focusing on other projects, or even away from your computer. BUILT-IN SKILLS Copilot Cowork includes a growing collection of built-in skills covering the most common business activities. These include working with Word documents, Excel spreadsheets, PowerPoint presentations, PDFs, Outlook emails, Teams meetings, calendar scheduling, enterprise search, deep organizational research, daily briefings, and interactive Microsoft 365 experiences. The impressive part is that users never need to manually choose a skill. Cowork automatically selects the right capabilities based on the goal you've described and combines multiple skills whenever necessary. A REAL-WORLD EXAMPLE One of the best demonstrations of Cowork is the built-in "Organize My Week" experience. After a single request, Cowork reviews your calendar, analyzes meetings, identifies scheduling conflicts, checks attendee availability, recommends improvements, proposes new meetings, flags incomplete appointments, and prepares your upcoming week with minimal user interaction. Rather than simply displaying information, Cowork actively recommends improvements and carries them out after receiving your approval. GETTING STARTED Organizations need Microsoft 365 Business or Enterprise, a Microsoft 365 Copilot license, and access to Copilot Cowork through Microsoft's Frontier program where applicable. Files should be stored within OneDrive or SharePoint so Cowork can access organizational knowledge effectively. Administrators may also need to enable supporting services depending on their region and Microsoft 365 configuration. WHY COWORK MATTERS Copilot Cowork represents one of Microsoft's biggest shifts since the introduction of Microsoft 365 Copilot. Instead of simply helping employees create content faster, Cowork manages the coordination that typically consumes hours every week. It allows knowledge workers to spend less time organizing work and more time making decisions, solving problems, and delivering value. As Microsoft's AI platform continues evolving toward autonomous agents, Copilot Cowork provides an early glimpse into how future digital coworkers will become an everyday part of modern business productivity. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].