Question

A financial services firm wants to deploy Microsoft 365 Copilot to 5,000 employees. The compliance team is concerned that Copilot must respect existing data access controls so that an employee querying Copilot cannot surface documents they are not already permitted to open. Which statement correctly describes how Microsoft 365 Copilot handles this requirement?

Accepted Answer

Copilot inherits and enforces the existing Microsoft 365 permission model, returning only content the querying user already has access to.

Answer

Copilot requires administrators to manually re-tag every document with new access labels before responses can be filtered.

Answer

Copilot indexes all tenant content into a shared pool that every licensed user can query without restriction.

Answer

Copilot disables organizational data grounding entirely to avoid any risk of exposing restricted files.