Does Microsoft Copilot Expose Sensitive SharePoint Data?
Not by breaking permissions. Copilot reaches only what the user can access, so it exposes existing oversharing faster. Check who can reach each library.
Research topic
oversharing
Research on oversharing: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.
How Do AI Agents End Up With Full Access to Sensitive Company Records?
By inheritance: an agent takes over a signed-in session, reads overshared data and runs under a broad service identity. Check which path each agent took.
How Do You Stop an AI Agent From Seeing Employee Personal Information?
Mask employee fields on the rendered screen before the model reads it, not by repairing every inherited permission first. Check a manager login's view.
What Confidential Data Can Glean Agents Access?
Whatever the running user can open across every connected app, because Glean mirrors source permissions rather than narrowing them. Check file sharing.