Copilot Studio builds an agent from a plain-language description, then lets you add knowledge sources and tools through a guided canvas, no code. This guide builds an IT helpdesk agent: it answers from your KB articles and files a password-reset request through a Power Automate flow, but never resets a password directly, IT confirms and performs that by hand. Budget 30-40 minutes on a Copilot Studio license or trial.
| Fact | Value |
|---|---|
| Tool | Microsoft Copilot Studio |
| Difficulty | Beginner |
| Time required | 30-40 min |
| Compatibility | Microsoft Copilot Studio (standalone license or trial), a Power Automate flow or connector for the ticketing step, browser only |
| Last updated | November 2026 |
What you'll build
You'll build an IT helpdesk agent for employee self-service. It answers common questions from your IT knowledge base, and when someone needs a password reset, it collects their employee ID and the account in question, then files a request through a Power Automate flow that creates a ticket in your ticketing system. It never resets the password itself; the IT team confirms the employee's identity and performs the reset by hand, the same way they would for a request that came in by email.
Copilot Studio's guided experience starts from a description in your own words: tell it what the agent should do, and it provisions the agent with a drafted name, description, and instructions, plus suggested knowledge sources and tools based on what you described. From there you refine everything on the agent's Overview page, add a real knowledge source, and add a tool, a Power Automate flow or a connector action, for anything that needs to reach outside the conversation. A built-in test chat panel lets you try it before publishing to a demo website, Microsoft Teams, or wherever else your organization makes agents available.
Choose Copilot Studio when your organization is already on Microsoft 365 and you want the agent to live where employees already work, with IT-managed connectors and flows instead of a separate stack. If you need the same kind of agent outside the Microsoft ecosystem, the n8n guide builds an equivalent tool-calling flow on its own canvas.
Prerequisites
- A Microsoft Copilot Studio license or trial, signed in at copilotstudio.microsoft.com
- IT knowledge base articles as files or a SharePoint site to use as a knowledge source
- A Power Automate flow (or the ability to create one) that files a ticket in your ticketing system
- No coding experience required beyond picking a flow or connector for the tool step
Step-by-step guide
Describe the agent and let Copilot Studio provision it
Sign in at copilotstudio.microsoft.com and, on the Home page, describe what you want in your own words. Copilot Studio provisions an agent and its Overview page from that description, drafting a name, description, and instructions, and suggesting knowledge sources, tools, and triggers. Treat every suggestion as a starting point, not a finished agent; you'll edit the instructions directly next.
1Home page description:2"Help employees answer common IT questions from our knowledge base, and let them request a password reset, which creates a ticket for IT to handle. It should never reset a password itself."Expected result: A new agent's Overview page appears with a drafted name, description, instructions, and suggested knowledge sources and tools.
Rewrite the instructions with the rule that matters
On the Overview page, edit the drafted instructions to state the one non-negotiable rule explicitly: the agent can file a request, it cannot perform the reset. Drafted instructions from the provisioning step are usually close but rarely precise enough to rely on for something this sensitive.
1Instructions:2"You are an IT helpdesk agent. Answer questions using the connected knowledge base. For a password reset, collect the employee's ID and the account name, then use the file_reset_request tool to create a ticket. You never reset a password yourself; IT confirms identity and performs the reset after reviewing the ticket."Expected result: The agent's instructions on the Overview page reflect the rewritten rule, replacing the drafted version.
Add the IT knowledge base as a knowledge source
In the Knowledge section, select Add and point it at your IT documentation, either a SharePoint site or uploaded files. This lets the agent answer routine questions (how to connect to VPN, how to request new software) from your real documentation instead of guessing at a plausible-sounding general answer.
1Knowledge -> Add2Source: SharePoint site (IT Knowledge Base) or uploaded PDFsExpected result: A test question like "how do I connect to the VPN" returns an answer citing the connected knowledge source.
Add the password-reset request as a tool
In the Tools section, add a tool backed by a Power Automate flow, either one you've already built or a new one that creates a ticket in your ticketing system with the employee ID, account name, and request type. Name it clearly, since that name and its description are what the agent reads to decide when to use it.
1Tools -> Add a tool -> Flow2Flow: file_reset_request (creates a ticket with employee_id, account_name, request_type)3Description for the agent: "Files a password reset request ticket for IT to action. Does not reset anything itself."Expected result: file_reset_request appears in the agent's Tools list, and asking to reset a password in the test chat triggers a visible tool call.
Test the full conversation before publishing
Use the test chat panel to run through both paths: a knowledge-base question and a password-reset request. Confirm the agent asks for the employee ID and account name before calling the tool, and that its final response tells the employee IT will follow up, never that the password has already been reset.
1Test chat:2"I forgot my password for the finance portal, employee ID E4021"3-> Expect: tool call to file_reset_request, followed by a message confirming the ticket was filed, not that the password was reset.Expected result: A completed test conversation shows the tool call in the trace and a final response that matches the no-direct-reset rule.
Publish and choose where employees can reach it
Once testing looks right, select Publish at the top of the page, then confirm in the dialog that follows. From the three-dot menu, go to the demo website for a quick internal pilot, or follow your organization's path to add it as a channel in Microsoft Teams so employees can reach it from where they already work.
1Top bar -> Publish -> Publish (confirm)2Then: ... menu -> Go to demo website3(or add as a channel in Microsoft Teams for company-wide access)Expected result: A green confirmation banner appears after publishing, and the demo website link opens a live version of the tested agent.
Complete working example
1# Documentation of the agent configuration built across the steps above.2# Copilot Studio stores this as agent settings, knowledge sources, and a3# Tools list on the Overview page; this file mirrors that configuration so4# you can review or recreate it without re-reading every step.5name: IT Helpdesk Agent6description: Answers IT questions from the knowledge base and files password-reset requests. Never resets a password directly.7instructions: |8 You are an IT helpdesk agent. Answer questions using the connected9 knowledge base. For a password reset, collect the employee's ID and the10 account name, then use the file_reset_request tool to create a ticket.11 You never reset a password yourself; IT confirms identity and performs12 the reset after reviewing the ticket.13knowledge:14 - type: sharepoint_site15 name: IT Knowledge Base16tools:17 - type: power_automate_flow18 name: file_reset_request19 description: Files a password reset request ticket for IT to action. Does not reset anything itself.20 inputs:21 - employee_id22 - account_name23 - request_type24channels:25 - demo_website26 - microsoft_teams27Common mistakes
Why it's a problem: Accepting the auto-generated instructions as final without adding the explicit no-direct-reset rule
How to avoid: The drafted instructions from the provisioning step describe the general shape of the agent, not your specific safety rule. Always rewrite them for anything touching a sensitive action.
Why it's a problem: Naming the tool something vague like 'HelpRequest' instead of describing exactly what it does and doesn't do
How to avoid: The tool's name and description are what the agent reads to decide when and how to use it. 'Files a password reset request ticket, does not reset anything' leaves far less room for misuse than a vague label.
Why it's a problem: Publishing straight from the test chat panel without checking the knowledge source actually got cited
How to avoid: A confident-sounding answer isn't the same as a grounded one. Confirm in testing that routine questions cite the connected knowledge base, not just general training knowledge.
Why it's a problem: Letting the Power Automate flow itself perform the reset instead of only filing a ticket
How to avoid: Keep the destructive capability out of the flow the agent can call entirely. If the flow can reset a password, nothing about the agent's instructions can reliably stop it from eventually doing so.
Why it's a problem: Publishing to Microsoft Teams company-wide before testing the demo website version with a small group first
How to avoid: Pilot on the demo website or with a small Teams group before a company-wide rollout, so a bad instruction or a missing knowledge source doesn't reach everyone at once.
Best practices
- Write the rule that matters most (here, never reset directly) as an explicit instruction, not an assumption left out of the prompt.
- Keep any destructive capability out of the flow or connector the agent calls; let the tool only file a request a person then acts on.
- Name tools and write their descriptions as if explaining them to a new IT hire: what they do, and just as clearly, what they don't.
- Ground routine answers in a real knowledge source instead of letting the agent rely on general knowledge for company-specific procedures.
- Test both the knowledge-base path and the tool-calling path explicitly before publishing; a working FAQ response doesn't guarantee a working tool call.
- Pilot on the demo website or a small Teams audience before publishing company-wide.
Still stuck?
Copy one of these prompts to get a personalized, step-by-step explanation.
I have a Copilot Studio agent with a knowledge base for IT docs and a file_reset_request tool backed by a Power Automate flow that only creates a ticket, never resets anything (configuration below). Design a second tool for requesting new software access with the same file-a-ticket, never-execute pattern. [paste complete_code]
On the Copilot Studio Overview page, open the agent's instructions and ask Copilot: 'Add a rule that if an employee asks about a VPN issue, the agent should check the knowledge base before suggesting they file an IT ticket.'
Frequently asked questions
Do I need to know Power Automate to build this agent?
You need an existing flow or the ability to create a simple one that files a ticket with a few fields. Building that flow is itself a no-code, drag-and-drop task in Power Automate, separate from Copilot Studio's own canvas.
Can Copilot Studio agents call external APIs that aren't Microsoft connectors?
Yes, through a custom connector you register for that API, or by connecting an external MCP server as a tool source, which exposes outside tools the same way a built-in connector does.
What's the difference between a Topic and a Tool in Copilot Studio?
Tools are what this guide uses: capabilities like a knowledge source or a Power Automate flow that the agent's generative orchestration calls on its own when relevant. Topics are a more scripted, trigger-based way to handle specific conversation paths, useful when you need exact control over a particular flow rather than letting the model decide.
Can I test this before anyone outside my team sees it?
Yes. The built-in test chat panel on the Overview page lets you run full conversations privately, and publishing to the demo website gives you a shareable link for a small pilot group before a wider Teams rollout.
Is a trial license enough to build and test this, or do I need to publish?
A trial license lets you build and test fully in the chat panel; publishing to a live or demo website specifically requires a paid license, not the trial.
What does this cost to run?
Copilot Studio is billed in Copilot Credits, roughly $0.01 per credit pay-as-you-go, or a capacity pack around $200/mo for 25,000 credits, with each conversation and tool call consuming some number of credits depending on complexity.
Can someone build this for me instead of configuring it myself?
Yes. RapidDev builds production agents on Copilot Studio, n8n, and the Claude Agent SDK, including the knowledge grounding and approval boundaries most tutorials skip. A free 30-minute consultation is the fastest way to scope your version.
Talk to an Expert
Our team has built 1,000+ apps. Get personalized help with your project.
Book a free consultation