A compliance officer is concerned that Microsoft 365 Copilot could surface content from a highly sensitive SharePoint site to employees who were inadvertently granted access. They want to ensure that only members of a specific security group can access that site's content, regardless of any other permissions that may have been mistakenly assigned. Which SharePoint Advanced Management capability should you configure?