Microsoft 365 Copilot Oversharing Controls

Microsoft 365 Copilot honours existing permissions - so if content is overshared, Copilot can surface it to users who technically have access but shouldn't. This skill covers reducing that blast radius before and during Copilot rollout using SharePoint Advanced Management, sensitivity labels, restricted content discovery, and DLP for Copilot.

When to use

Preparing a tenant for Microsoft 365 Copilot and continuously controlling what Copilot can reach across SharePoint, OneDrive, and Teams.

Do not use this skill to monitor sensitive data in prompts (use purview-dspm-ai) or to design a broader DLP program (use purview-dlp-policy).