AB-650 decision sheets

• Which Copilot report answers this admin question
• Which surface answers this Copilot / Agent 365 admin question
• Which Copilot connector type: federated, tenant, or self-serve
• Turning off Copilot web search: self-service toggle or admin policy
• Defender preset security policies: which one, and how to change it
• Least-privilege admin role for common M365 and Copilot-governance tasks
• Least-privilege role for licensing, user-creation and group tasks
• Shared mailbox permission or group type: picking the right one
• Purview compliance coverage for an Agent 365 agent instance
• Where to check a Microsoft 365 service problem