Microsoft 365 Copilot answers questions using the data the signed-in user can already access in Microsoft 365: SharePoint sites, OneDrive files, Teams messages and email. It does not bypass permissions, but it makes existing permissions far more visible. If a salary spreadsheet sits in a site shared with 'Everyone except external users', anyone could always find it; now anyone can ask Copilot to summarize it. This oversharing problem, plus employees pasting sensitive data into third-party AI sites, is what Data Security Posture Management for AI (DSPM for AI) in Microsoft Purview addresses. Microsoft has been bringing DSPM for AI together with a broader Purview Data Security Posture Management experience, so the portal naming may vary.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.