Before enabling Microsoft 365 Copilot broadly, a compliance officer worries that a specific high-value SharePoint site containing financial records may have been shared with the 'Everyone except external users' group, which could allow Copilot to surface that content to too many employees. The officer needs to quickly confirm exactly which users and groups currently have access to that single site so remediation can begin. Which SharePoint Advanced Management capability should the administrator use?