Getting started 6 min readUpdated September 19, 2026
Get started with WorkforcePilot
A safe first rollout from Microsoft 365 connection through the first reporting device.
For OwnersFor AdminsFor ITs
The short answer
Connect Microsoft Entra, review the security groups in scope, install the organization-specific Windows agent, verify coverage, then assign managers only to the groups they lead.
01
Use this rollout order
- 1Create the organization and connect its own Microsoft 365 tenant.
- 2Review the imported Entra security groups and show only the groups that belong in WorkforcePilot.
- 3Download the signed, organization-specific Windows installer from the authenticated Settings area.
- 4Install on a small internal canary group before a broad rollout.
- 5Verify the devices are reporting and Windows usernames match the intended Microsoft users.
- 6Assign managers to only the security groups they are responsible for.
- 7Review classifications and company monitoring policy before using scores for coaching.
02
What good setup looks like
- Coverage shows the expected people reporting rather than a large never-reported list.
- Managers see only their assigned teams and cannot open admin-only settings.
- Common healthcare and business tools are classified correctly for the organization.
- Employees have received the notice, policy, or consent required by the organization and local law.
Keep learning