Information & Data Foundation
Copilot can see everything your staff can see
An AI assistant does not add access. It makes the access you already granted much easier to use.
By Paul Engerman and Tracy Engerman ·
A common surprise in the first week of an AI rollout is what people find. A new hire asks a plain question and the answer quotes a salary spreadsheet nobody meant to share.
Why it happens
Permissions in Microsoft 365 build up over years. A folder shared with everyone for a single project stays shared with everyone. Search used to bury those files. An assistant surfaces them.
What sub-score 1.4 measures
Security and access control asks whether permissions match job roles, whether sensitive libraries are labeled, and whether anyone reviews sharing on a schedule.
The fix
A permissions and access review takes two to four weeks. It does not slow anyone down. It closes the doors that should never have been open.