Forum Discussion
Restrict Copilot from accessing OneDrive Files.
A recent question I was asked about copilot for Microsoft 365 is: "Can I restrict Copilot from accessing or 'Analysing' certain documents on OneDrive/SharePoint or does it read everything by defau...
An area to explore would be applying a sensitivity label to get it excluded from M365 Copilot.
That doesn't work as access to files is based on ACL permissions for the user. Copilot for M365 can use it regardless of sensitivity label.
Michel-Ehlert I think it depends on the use case. If I want to exclude my content from any other users use of copilot then the sensitivity label will provide that type of restriction. I may have full access, and thus Copilot can have full access when I am using copilot, but with the sensitivity label applied, other users would be able to access the data according tot he sensitivity label access polity but Copilot would not be able to use the Copy/Extract feature to include the continent in its analysis.
- The point of the original poster (OP) is not to exclude or prevent access by another user, but to have Copilot for M365 not have access to it.
- Odd. Not my area of expertise but working with a security architect we were able to apply label + testing had show Copilot unable to access. May have been more to the puzzle though. Good luck in finding something!
I guess the sensitivity label had a content restriction applied to it?
Even applying the content restriction Encryption will not prevent Copilot from using that data when a user also has EXTRACT permissions.
Also, at least someone will have EXTRACT permissions as part of Full ownership.
