Copilot in SharePoint Is Generally Available, and Permissions Matter More Than Ever
Copilot in SharePoint began rolling out as generally available on September 30, 2026 for users with a Microsoft 365 Copilot license. Microsoft's October update post covers the rollout, and the key point for administrators is that Copilot works with any content a user can already open. That means the quality of the answers, and the risk of surfacing something sensitive, is determined by how well your sites, libraries, and sharing links are governed.
Two related changes are worth noting. In late October, AI-created FAQs move out of the FAQ web part and into Copilot in SharePoint, though existing FAQ pages keep working. Looking further out, the roadmap lists Copilot Search in SharePoint and OneDrive (summarized results with source references, filters, and a handoff to Copilot) and a new Agent chat web part that can be pointed at any Microsoft 365 Copilot agent, both targeted for January 2027.
What to do: Run a site-permissions and oversharing review before broad Copilot enablement, starting with sites that use "Everyone except external users" or anonymous links, and use SharePoint Advanced Management reports to prioritize cleanup.
Roadmap: News, Sharing, and Governance Features
The Microsoft 365 roadmap continues to fill in. Launched this month is an AI overview for SharePoint News posts in the SharePoint app for Teams, which lets users listen to an AI-generated audio summary. Rolling out now is cross-posting of SharePoint News to Engage communities and storylines, where the News comments module is replaced by the Engage conversation module, along with the next generation of file and folder sharing built around a new "hero link" that controls access however the link is shared.
In development for November 2026 are an AI input widget with content preview in Copilot, and a Governance Reviews Dashboard for Site Owners that centralizes pending inactivity, ownership, and attestation reviews. It is currently in private preview, and the Scale With Nafisa roundup also mentions a preview of review reminders for site owners in November. Together these point to Microsoft shifting lifecycle governance work from IT onto site owners.
What to do: Review your sharing-link defaults ahead of the hero link rollout, and identify who your site owners are now, since they will soon be asked to attest to site ownership and activity.
Retirements and Deadlines on the Calendar
Several retirements are now close enough to plan around. Restricted SharePoint Search, the workaround many tenants used to hide sites from Copilot, fully retires on January 31, 2027, and Microsoft recommends fixing underlying permissions instead. Standalone SharePoint Online and OneDrive for Business Plan 1 and Plan 2 can no longer be renewed from January 2027, after having stopped being sold to new customers in mid-2026.
Other changes have already landed or are underway. Legacy one-time-passcode guest links are being retired between mid-October and late November, and external recipients without guest accounts may see access-denied errors; re-sharing with the same email address restores access. SharePoint Alerts ("Alert me" emails) have stopped, so teams should move to SharePoint Rules or Power Automate. Microsoft Publisher stopped working for Microsoft 365 subscribers on October 1, and the Exchange Web Services shutdown began October 1 with a final cutoff on April 1, 2027.
What to do: Inventory sites that depend on Restricted SharePoint Search, replace any remaining alert-based processes with Rules or flows, and notify frequent external collaborators that they may need to be re-invited.
User Experience and Purview Changes
The SharePoint mobile app for iPhone and Android is being redesigned from mid-October, with a single Discover view replacing the Find, News, and Me tabs. No admin action is required, but a short heads-up to mobile users will reduce help desk questions. Anchored comments are also arriving in the PDF viewer for SharePoint and OneDrive on the web between mid-October and mid-November, on by default.
On the compliance side, Microsoft Purview is getting a few useful additions. Server-side auto-labeling will extend to legacy .doc, .xls, and .ppt files in November 2026, and existing files can be auto-labeled to match their library's default sensitivity label (GCC, GCC High, and DoD in November). In January 2027, users with the right usage rights will be able to annotate sensitivity-label-protected PDFs in the browser while keeping the label and encryption intact. This week's roundups did not list any dedicated SharePoint admin center changes.
What to do: Review your sensitivity label and auto-labeling policies now so the November expansion to legacy Office files does not surprise you.
SharePoint Framework: 1.24 GA Is Expected This Month
The September SPFx roadmap update reports that SPFx 1.24 Beta 5 shipped on September 23 with an updated preview of Copilot UX components, React 18 support, and fixes from earlier betas. A release candidate is next, bringing Node.js 24 and 26 support, and general availability is planned for October 2026, with Copilot UX components reaching GA for all customers. Licensing for GA is still to be confirmed.
Looking ahead, version 1.25 is slated for December 2026 or January 2027 with further Copilot UX work, GA of the SPFx CLI (replacing the Yeoman generator), and navigation customizers that let components override navigation nodes. The next roadmap update is expected at the end of October.
What to do: Developers should test solutions against 1.24 beta builds on a non-production tenant, plan the React 18 and Node.js upgrade path, and begin evaluating the SPFx CLI before the Yeoman generator is phased out.