You’re ready for Copilot when the people getting it can only open what they should, your sensitive sites are protected, and someone owns the decisions. Copilot doesn’t create new access. It just makes the access you already have a whole lot easier to use.

Copilot reads whatever the person asking is already allowed to open. So if a folder’s permissions have been open to the whole company for years and nobody noticed, Copilot can answer from it.

Say there’s a payroll spreadsheet sitting in a folder everyone can technically get to. Before, you’d have to go digging to find it. Now someone at the front desk can just ask a plain question and get an answer from it.

Why permissions come first

Microsoft says Copilot only surfaces data a person has at least view permission to (here’s their privacy documentation). That’s a good thing, but it only protects you if those permissions are right. We’d assume they aren’t until you’ve checked, especially in a Microsoft 365 setup that’s grown over the years. That’s not anybody’s fault. Sharing just piles up.

The checklist

1. Oversharing

  • Review sites and folders shared with everyone in the company.
  • Find “anyone with the link” and company-wide sharing links, especially on contracts, finance, and HR files.
  • Check that each Team and SharePoint site’s membership still matches who needs it.

2. Leftover access

  • Shut off access for people who have left.
  • Review guest accounts, and remove the ones you don’t need anymore.
  • Give every active site an owner, and flag inactive sites to archive.

3. Sensitive sites

  • List where your HR, payroll, legal, finance, and board files live.
  • Decide who should be able to reach each one, and have whoever’s responsible for those files confirm it.
  • Limit what Copilot can surface from sensitive SharePoint sites while their sharing is reviewed. A setting called Restricted Content Discovery can do this. It’s part of SharePoint Advanced Management, which Microsoft includes once at least one person has a Copilot license. It’s a stopgap, not a fix: it doesn’t change who has access, it doesn’t cover OneDrive, and a document someone already has open can still be summarized. If you’re on a Microsoft 365 Business plan, confirm you’re eligible first.

4. Rules and licenses

  • Start with a small first group instead of licensing everybody at once.
  • Have a written AI policy that says what data people can use and how to check Copilot’s answers. Our free AI Policy Builder gets you a starting draft.
  • Name one person who owns Copilot decisions after launch.

5. Agents

  • List the Copilot agents you already have, and who built them. Agents are custom helpers built on Copilot, sometimes by your own staff.
  • Check which sites and connections each agent can reach.
  • Decide who approves new agents before they get shared.

Test it before you open it up

Before you roll out further, have your first group try questions Copilot shouldn’t be able to answer for them. Things like “What are the salaries on the operations team?” or “Summarize our latest board notes.” If an answer comes back with a source, congratulations, you found an access problem before everybody else did. A blank answer doesn’t prove the file is locked down, though, especially on a site where you’ve limited what Copilot can surface. The access may still be there. And the answer depends on who’s asking, so test with more than one role.

What if you can’t check every box?

You probably won’t on the first pass, and that’s fine. We wouldn’t hold up the whole rollout trying to clean every site first, because you’ll never get there. But turning it on for everybody and hoping for the best is spray and pray, and that’s not a plan. Protect your most sensitive sites, start with a small group, and work through the rest on a schedule.

Common questions

Does Copilot change anyone’s permissions?

No. It answers from what each person can already open, which is exactly why you fix the access first.

Will sensitivity labels keep files out of Copilot?

Usually not on their own. A label by itself doesn’t stop Copilot from using a file the person can open. A label that encrypts the file can, if that person is allowed to view it but not copy from it. For everything else, you need a Microsoft Purview data loss prevention rule, and Business Premium and E3 don’t include that by themselves. It takes the Purview Suite add-on or an E5-level plan. Even then, the file can still show up as a link.

Is this just a big company problem?

No. If anything, we think smaller organizations can have it worse, because one person is often handling IT along with everything else. A short list like this is a good place to start.

If you’d rather not take this on alone, our Copilot Rollout service covers the readiness work and the first group, and we recommend monthly care so we keep watch.