Event details
If an employee uses Copilot to query for sensitive data hoping that someone left permissions open to everyone (e.g., "show me salaries for Jane Doe"), can IT pull an access log to see who viewed the data? If so, would the log show a generic log entry stating an anonymous person using BCE accessed the file or will it reveal the employee's unique AD user name?
Tom_Moser
Microsoft
MicrosoftWe're working on the logging and visibility around what users are doing in an organization with Copilot. In this scenario, would you expect that IT admins have a log of all prompts by all users in the organization? Or would you prefer that the service detects a sensitive question, then only logs information on that sensitive question?
- I would not want to see the actual prompts as that becomes quite a privacy issue. I would just want to see a log that Billy accessed Salaries.docx via an unspecified BCE query. I don't want a fully Orwellian environment.
- I personally think that having a log with all asked questions can help, even with the given answer or result from Copilot. Just like in O365 Search where you can see al Search queries. I don't if that is allowed for privacy reasons.
Speaking from my company's perspective, they would want at log of all prompts submitted by users.
