Forum Discussion

mbrg0's avatar
mbrg0
Copper Contributor
Jul 22, 2023
Solved

M365 Copilot governance

Hi all, super excited for that buy button! I have enterprise clients asking about governance, is there a way to audit the semantic index or user queries to M365 copilot as an admin? Couldn't find r...
  • Marius Sandbu's avatar
    Marius Sandbu
    Jul 25, 2023
    nothing yet im afraid, I have asked the same question maaaany times already. Since the semantic search feature is still rolling out I am on a regular basis checking the graph API for new info that is available
GabeHo's avatar
GabeHo
Icon for Microsoft rankMicrosoft
Jul 27, 2023

Hey mbrg0, nothing announced on auditing the index itself yet. Admins will be able to monitor usage through the usage reports in the admin center, check this out for more details Microsoft 365 admin center Microsoft 365 Copilot usage - Microsoft 365 admin | Microsoft Learn.

The permissions model within your Microsoft 365 tenant can help ensure that data won't unintentionally leak between users, groups, and tenants. Microsoft 365 Copilot presents only data that each individual can access using the same underlying controls for data access used in other Microsoft 365 services. Semantic Index honors the user identity-based access boundary so that the grounding process only accesses content that the current user is authorized to access. For more information, see Microsoft’s privacy policy and service documentation. 

 

Data protected using Microsoft Purview Information Protection (MPIP or AIP) labeling will continue to be protected according to those policies. While Copilot generated content currently doesn't inherit MPIP labels from the source, Copilot cites the original source, which will retain the label. 

 

 




Michael B's avatar
Michael B
Copper Contributor
Jul 30, 2023

Thank you GabeHo! I appreciate the detailed response.

 

Would there be a way for admins to audit what users actually did though copilot? What questions they've asked, which documents were accessed, etc'

 

Re: Purview, could you help me understand the following scenario? If Copilot reads a sensitive word doc on behalf of a user and then writes that response into a new word doc, would the generated word doc have a sensitive data label?

 

Thanks again! Super excited to start using Copilot!

Resources