Hey folks,
We're gearing up for our enterprise deployment of Microsoft Copilot and are running into some security concerns about oversharing links. The issue is that once Copilot is live and licenses are assigned, it could potentially access sensitive data from SharePoint and OneDrive that's set to be shared with "Everyone" or through organization-wide links.
This isn't just theoretical; it's hard to spot these overshared links, and AI can find them through text indexing, which amplifies existing data governance problems.
So, I'm curious—how is your organization handling this? I'm looking for any strategies you might have:
- What do you do to audit and address overly permissive links at scale? Any scripts or tools you're using?
- How are you leveraging Microsoft Purview (like sensitivity labels and DLP) to keep Copilot from accessing sensitive information?
- For those who've already deployed, what lessons learned or common pitfalls should we watch out for?
I appreciate any practical tips or strategies you can share. Thanks in advance!
5 Answers
It really comes down to whether you're looking to prevent oversharing links or just protect the data. We've realized it's tough to stop oversharing altogether, but we focus on data protection instead. We use sensitivity labels for all our data and keep high-sensitivity files on-premise. For sensitive info that’s still in the cloud, we disable internet sharing for it. Using Purview DLP and other dedicated data tools has really helped us maintain control. And don't forget—education is key! Teach your users about sharing responsibly!
Wait, did AI literally generate this question? It feels super scripted.
Actually, the way the "Share with Everyone" link works isn't as risky as it sounds. When a document is shared with "Everyone", only the users who actually click that link will gain access to the document. It doesn't automatically make the content available through search results or accessible via Copilot. For a safer approach, consider implementing an expiration policy on shared links, like we did with a 90-day limit. Nothing to panic about!
I've been trying to figure out a way to keep track of sharing links too! Your point about the link expiration is super helpful. Thanks for sharing the resource link; I was worried about this issue but you've eased my mind a bit.
We implemented a policy where any shares with "Everyone" must expire after a certain time. This way, we minimize any risks from oversharing while keeping collaboration feasible. It's been a game changer!
If you're buying M365 Copilot licenses, those come with SharePoint Advanced Management. Microsoft even helps set it up for free! Check it out; it's honestly a great resource to have.
This sounds like a solid approach! I'll definitely look into SharePoint Advanced Management.
Nope, just a real concern from someone! But yeah, it does sound a bit formal.