Almanac

Consultant-focused KB for Microsoft Dynamics 365 Contact Center: implementation notes, gotchas, and configuration decisions beyond the official docs — across voice and digital channels, routing, agent and supervisor experience, Copilot & AI, workforce engagement, analytics, administration and security.

feature-cobrowse-screen-share.mdv1 · history
CurrentApplies to Standalone onlyUpdated 3 months agoSource Microsoft Learn ↗

What it does

Agent can view the customer's browser session during chat and optionally take limited control. Agent sees exactly what the customer sees, reducing confusion and enabling real-time guidance. Requires a third-party provider (Surfly, UserReplay, etc.) integrated into the chat widget.

Key facts

  • Co-browse is agent-initiated; agent requests access and customer must accept via a prompt
  • Customer sees a clear indication that the agent is viewing their screen (persistent banner, cursor indicator)
  • Agent can view but not control customer's screen by default; limited control (clicking, scrolling) requires explicit customer consent
  • Co-browse applies only to the browser window; system clipboard, other apps, and sensitive data outside the browser are not visible
  • Session is recorded by default (varies by provider); must comply with privacy laws and inform customer of recording
  • Co-browse requires the third-party integration to be configured and license active in D365 Contact Center
  • Bandwidth requirement: 2-5 Mbps downstream for smooth co-browse experience
  • Co-browse timeout defaults to 15-30 minutes; session auto-terminates if inactive
  • Works across most modern browsers (Chrome, Edge, Safari, Firefox) but may have issues with some specialized enterprise browsers

When to use / skip

Use co-browse for visual problems: button navigation, form-filling, confusion about where something is. It cuts resolution time dramatically. Skip it for text-only issues, privacy-sensitive data entry (cards, SSNs shouldn't be agent-visible), poor connections, or if you haven't trained agents on privacy boundaries.

Configuration decisions

  • Should agents be able to take control (click, scroll) or view-only?
  • Will co-browse sessions be recorded? If yes, must have customer consent flow.
  • How long should co-browse sessions remain active? (15, 30, or 60 minutes)
  • Which support queues have co-browse enabled? All or specific high-touch queues?
  • What third-party provider will you use? Surfly, UserReplay, or custom integration?
  • Should there be a limit on co-browse usage per customer or per agent per day?

Gotchas

  • Browser performance degrades during co-browse (typical 5-15% CPU increase); set customer expectations.
  • Co-browse doesn't work with restrictive CSP (Content Security Policy) or iframe restrictions; you'll need to test per website.
  • Agent control can feel invasive if not explained clearly; training helps.
  • Recording requires explicit consent and disclosure of retention period.
  • If the customer navigates to a different domain, the session drops and the agent has to request access again.
  • Co-browse provider uptime and latency directly affect chat quality; third-party SLA is critical.
  • Agent misclicks are visible to the customer; training is essential.
  • Co-browse doesn't work on mobile browsers or app chat: only desktop web. Tell customers upfront.

Consultant notes

  • Most clients want co-browse because it looks good in demos. The third-party provider licensing cost often kills it when they see the actual numbers. Have the vendor pricing conversation before it becomes a design assumption that's hard to remove.
  • CSP and iframe restrictions on the client's website are the most common technical blocker. Test the provider's script on the actual production domain early in the project: not on a dev environment with relaxed headers.
  • Agent training is non-negotiable before go-live. Agents who take control without explaining what they're doing genuinely alarm customers. Include a co-browse scenario in UAT and make sure agents narrate what they're doing.

Source last updated: 2026-04-30 | Worth checking again after a third-party provider change or security compliance update

Was this accurate?