Microsoft Copilot only shows users content they already have permission to access. The challenge is that many organizations have accumulated years of permission sprawl across SharePoint, creating unintended access to sensitive information. In this practical session, you'll learn how to assess SharePoint permissions before deploying Copilot at scale. We'll explore how users inherit access over time, how Copilot leverages existing permissions when generating responses, and how to identify potential oversharing risks across your environment. You'll see how to use SharePoint Advanced Management and PowerShell-based auditing techniques to uncover broad access, direct permissions, inactive sites, and other common exposure points. By the end of the session, you'll have a repeatable framework for understanding who has access to what, why they have that access, and how to prioritize remediation before expanding AI across your organization. Key Takeaways:

• Understand the relationship between SharePoint permissions and Copilot responses
• Identify common sources of oversharing and permission sprawl
• Audit access using SharePoint Advanced Management and PowerShell
• Discover broad access, direct permissions, and inactive sites
• Build a practical remediation plan before Copilot deployment