Will Copilot show employees files they shouldn't see?
Short answer
Copilot only shows people what they already have permission to open. The problem is that most Microsoft 365 tenants overshare: sites open to everyone, "anyone with the link" sharing, and folders that were never locked down. Copilot makes that oversharing easy to find, so fix permissions before you switch it on.
Draft · pending expert review
Before Copilot, an overshared HR folder was a risk mostly in theory, because nobody knew where to look. Copilot changes that. Ask it about salaries or a pending layoff, and it will search everything the person has access to.
Where oversharing usually hides
- SharePoint sites and Teams set to "Everyone except external users"
- "Anyone with the link" sharing that was never turned off
- Folders whose permissions were broken off years ago and forgotten
- Former employees' OneDrive files shared with the whole company
How to get ready
- Review who can see each SharePoint site and Team, starting with HR, finance, and leadership
- Tighten default sharing links to "people in your organization" or narrower
- Label confidential content so people and Copilot both handle it properly
- Pilot Copilot with a small group and look at what it surfaces
Watch how
All video tutorialsHOW TO Enable ONEDRIVE on startup2023 How to Create a Rule in Outlook to Delete Emails2016 · recorded on an older version; menus may look different How to Select All Emails in Outlook2016 · recorded on an older version; menus may look different