Rolling Out Microsoft Copilot Safely: A Guide for GTA Businesses
Microsoft 365 Copilot does not create new access. It finds everything a user can already open, much faster than they ever could. So the security work before a rollout is mostly about fixing oversharing, using a handful of named Microsoft controls, then piloting with clear exit criteria.
Reviewed by the ITRS security team · Last updated
The one fact that drives everything
Copilot answers using content in Microsoft Graph that the signed-in user already has permission to access: mail, chats, files, meetings. It respects existing permissions. The problem is that existing permissions in most tenants are far looser than anyone realizes.
A salary spreadsheet shared with 'Everyone except external users' in 2021 was invisible because nobody went looking. With Copilot, a junior employee asking 'what do people here earn?' may get an answer drawn from it.
Before you buy licences: find the overshared content
Run the oversharing reports
SharePoint Advanced Management includes data access governance reports that list sites shared with 'Everyone', with large numbers of users, or through 'anyone' links. Some SharePoint Advanced Management features are included with Microsoft 365 Copilot licences; check the licensing note on that page for your plan.
Fix the worst sites first
HR, finance, legal, executive and client-confidential sites. Remove 'Everyone' and 'Everyone except external users' grants, expire old sharing links, and assign a site owner who will answer for access.
Check Teams and groups
Public Teams are readable by the whole organization. Make sensitive ones private and review membership, including former staff, who often linger in groups for years.
Review external sharing
Our SharePoint and OneDrive external sharing guide has the tenant-level settings.
Controls to use during the rollout
| Control | What it does | Where to read |
|---|---|---|
Restricted SharePoint Search | Limits organization-wide search and Copilot to an allowed list of up to 100 sites while you clean up. Microsoft describes it as a temporary measure. | |
Sensitivity labels | Classify and protect files and email; labels with encryption limit who can open content, which also limits what Copilot can use for them. | |
Data Security Posture Management for AI (Purview) | Shows how AI is being used, flags sensitive data in prompts and responses, and suggests policies. | |
Audit | Copilot interactions are captured in Microsoft Purview audit, so you can investigate misuse later. | |
Retention policies | Decide how long Copilot interactions are kept, alongside mail and Teams retention. |
Policy before people
Staff need to know what Copilot is for, what it must not be used for, and that its answers need checking. Write a short AI acceptable use policy before the pilot, and decide what happens with consumer AI tools that people are already using. Our shadow AI guide shows how to find them.
If you hold personal information, think through whether summarizing or generating content about individuals changes anything in your privacy notices or retention. That is a question for your privacy lead or counsel, not the IT team alone.
Pilot checklist with exit criteria
Pick 5 to 15 users from different departments, including one sceptic. Run it for four to six weeks. Do not expand until each item below is true.
- No pilot user has received content in a Copilot answer that they should not have been able to see (ask them to report anything surprising, and check).
- The top 20 most-shared sites have a named owner and reviewed permissions.
- Sensitivity labels are published and used on at least the HR, finance and legal libraries.
- Audit capture of Copilot activity has been confirmed with a test search.
- The acceptable use policy has been read and acknowledged by pilot users.
- Each pilot user can name one task where Copilot saved real time. If nobody can, the licence cost is hard to justify.
Common mistakes we see
Turning on Restricted SharePoint Search and treating the job as done. Licensing everyone on day one because of a bundle deal. Leaving former employees in Microsoft 365 groups, as we found in our tenant clean-up for a fire and security company. Skipping MFA hardening: Copilot makes a compromised account more useful to an attacker, so finish the Microsoft 365 security basics first.
Getting help
Our Copilot readiness work covers the oversharing review, labels and pilot design. Questions about scope can go through the contact page.
Related reading.
- ServiceMicrosoft Copilot readiness and secure AI deploymentsMicrosoft 365 Copilot can find anything a user has permission to open. In most tenants, that is far more than anyone intends.
- GuideGetting started with sensitivity labelsSensitivity labels tell people, apps and Copilot how sensitive a document or email is, and can enforce encryption and access rules that travel with the file.
- GuideAI acceptable use policy: what to includeStaff are already using generative AI tools. A short, clear acceptable use policy tells them which tools are approved, what information must never go in, who is…
- GuideLocking down SharePoint and OneDrive external sharingOut of the box, Microsoft 365 lets staff share files with almost anyone. That is convenient until a confidential folder link turns up in the wrong inbox.
Not sure what your obligations require of your systems?
Speak with our privacy practice. We are staffed 24/7. Active incident? Call (289) 582-9930, 24/7.