Question

Your organization deploys Microsoft 365 Copilot. A compliance officer is concerned that Copilot might surface content from documents that carry a sensitivity label configured with encryption that grants only 'View' rights to a specific security group. A user who is NOT a member of that group asks Copilot a question whose answer would require summarizing one of these encrypted documents. What behavior should you expect and why?

Accepted Answer

Copilot will not use the document in its response because it honors the sensitivity label's encryption and the user lacks the usage rights to access the content.

Answer

Copilot will summarize the document because Copilot bypasses sensitivity label encryption using its service-level permissions.

Answer

Copilot will summarize the document but automatically apply the same sensitivity label to the generated response.

Answer

Copilot will return the document only if the user has an E5 Compliance license, regardless of the label's usage rights.