Copilot Responses - How to not let users view the source documents

Hiding the citation link and preventing access to the original document are separate requirements. Removing a source link from the conversation does not revoke the user’s existing permission to open that document, and the answer itself can still disclose its contents.

For a Copilot Studio generative answers node, Microsoft documents saving the generated response to a variable, clearing Send a message, and rendering a customized Message or Adaptive Card. Citations are not automatically rendered for customized answers, so this lets you control their presentation. Test in the actual publishing channel because citation behavior differs between channels.

If the requirement is to protect the underlying files, review the knowledge source and authentication configuration instead. SharePoint-based answers should respect the authenticated user’s permissions; hiding links is not an access-control boundary. Use an approved, separately maintained knowledge set containing only information those agent users are allowed to receive.