Transcript for:
Handling Oversharing in SharePoint for Copilot Deployment

oversharing of the data in the SharePoint is one of the most popular blockers that's stopping organizations from enabling copilot for their users in this video I want to help you to prepare yourself and your organization how to handle oversharing across Microsoft 365 especially in the SharePoint what you can do how you can handle that and what kind of workarounds you can use to resolve that issue that challenge quickly to do not block deployment of the co-pilot in your organization I will show you what kind of reports you can use to recognize the spaces where oversharing could took place and what kind of configuration changes you can apply for your SharePoint sites to secure the specific locations from copilot from your users but also from Microsoft 365 search if you would like to have more videos like that I highly recommend you to leave subscription thumbs up or ask the question in the comment section remember I would reference to some powershare scripts or the tools that I will link in the description of this video so let's stop a moment and think why we talking about oversharing at all so first of all in the description of the video you will find another video that I already prepared about if copilot can leave B your data and this is specifically about oversharing oversharing is the situation where we have the data stored in SharePoint teams or one drive which is heavily shared with the business users without Our intention maybe we add the wrong Security Group maybe we create publicly available Microsoft teams or we shared and shared and shared and this site is heavily shared with everyone which means that these people will have access to that data maybe they have no idea about it at all maybe they will never click to that folder and found these files that are stored there but realistically copilot could really expose that kind of data with the security setup that is not our intention here and again you will hear about leaking CEO salaries or element like that but I can imagine a lot of scenarios that could be risky for organization CDs reports documents contracts offers that are stored somewhere for years and nobody checked that the permissions are not properly set so today I will help you to use some reports across Microsoft 365 that will help you to recognize that kind of structure so first of all we'll talk about SharePoint sites SharePoint sites that store data and have two wide access for whole organization for whole department or for the very wide group of people and how to resolve that challenge you will need to change the permissions the access rights to that specific SharePoint sites and you can imagine discussion with the business to get to make that happen could took months so you need to find the solution to do not block deployment of co-pilot for year before all the over shared sites will be properly set up I will show you some worker arounds that could help you to create the list of the sites that will be only available to be searched by copilot or possibility to exclude specific sites from the perspective of scope of search and co-pilot Frankly Speaking the second solution is my favorite one so we're recognizing the sites that possibly are over shared we excluding them from copilot and from Microsoft 365 search and we giving us time to resolve that challenge in the background and in the meantime we can roll out co-pilot to our users so let's switch to Microsoft 365 admin Center and let's check how we can resolve the challenge connected with oversharing SharePoint data governance reports one of the solutions that Microsoft recommends to analyze over sharing across Microsoft 365 is to use data access governance reports added to the SharePoint admin Center you can open them going through Microsoft 365 admin Center and opening SharePoint admin portal which will allows you to get access to the new feature in the area of the reports you will get the access to the DAT access governance where you can select two elements sensitive labels applies to FES this is also something quite useful in the area of the deployment of the co-pilot but today we will focus on the sharing links in this area you will be able to execute and analyze reports across your SharePoint online structure and to verify if there are any links that Grant access to the wide audience like anyone people in the organization or specific people we will run all these reports to prepare that data you need to remember that it could took some time to generate these reports especially if your SharePoint environment is quite large and there is a one big disclaimer in here existence of the anyone links or people in the organization links does not means that all users in the organization have access to this data they can have access there if they will click on the links that were shared with them then they will be added to the Access Link list and copilot will allow to get access to that data but if they never click on the link access is not granted to them automatically to this SharePoint site so on the one hand it is important and valuable to verify that you we know that oversharing could be quite risky even if you do not deploy Microsoft co-pilot but still remember this will not be the reports that will address everything across your Microsoft 365 these reports will highlight some elements but not everything and one more important element to get access to the data access governance reports you need to own SharePoint premium licenses which cost additional $3 per user who using SharePoint for whole organization or Microsoft 365 E5 subscription so let's give few moments to our Sho environment to gather the data and we will get back here to check the results and after some time our reports will be ready and if we will open it we will get access to the top 100 reports of course you will see that in this video I always recommend to export that data you will get the Excel file that you can analyze and review if any of the SharePoint sites on your environment were over shared using sharing by Links analyze organization wide teams created in Microsoft team teams another element that you should verify when you checking your Microsoft 365 environment are teams so let's go to Microsoft teams admin portal and let's check our teams that are organization wide From perspective of the teams admin Center go to manage teams section and look for the teams that are included inside your Microsoft 365 From perspective of the privacy you will find two types of the teams that are created private and public and public teams are available globally so every person in the organization have access to them and remember uh behind every Microsoft team there is a SharePoint site so if we will have the data there every person in the organization will have access to that more over you can list team members and see the teams with big numbers of the members of course of course it doesn't have to be risk maybe this is by Design but if you have the team that have few thousand members it's also could be the case where the data could be overshares people probably not by intention so these are the elements that you should investigate of course if you have 10 teams here there will be no problem if this will be huge number then I highly recommend you to export that data to Exel file and analyze it there analyze SharePoint sites in the context of oversharing another report Worth to review on your site is the SharePoint admin Center and the list of active sites in this report you will get the access to the old SharePoint site created in your environment you will get the information that are connected with Microsoft teams what is the volume of the storage used by the sites and what this could be also quite important what is the number of the files in there because again if we will have the site that have multiple users but zero documents there's no risk in there probably we should change this permission settings but today data is not over shared with these users and as in previous example you can export that data to Excel file and analyze that data directly in the Excel maybe mix that reports with the other reports like export from the powers shell From perspective of the members of the groups and you probably see that the reports I shared with you not delivering everything in it we have some nominated sites that are publicly available for everyone behind Microsoft teams we have the overshare spaces with the reports connected with data access governance we have the Microsoft 365 groups but we need to match that data that's why I was recommending you to export that that data to excel to give you the possibility to prepare the reports and classify the sites moreover I would highly recommend you to do some powershare scripting and get the numbers of the users of the specific Microsoft 365 groups this will allow you to recognize the sites that have a lot of members and this is not that heavy to get the group count members through Powers so you can see some additional data mapping will be needed but we are almost there to nominate our sites that are possibly risky from the perspective of oversharing exclude one SharePoint site from Microsoft copilot scope and finally when you will nominate some sites that could be over shared what you can do right now you can exclude these sites from the scope of co-pilot and also scope of the Microsoft 365 search which is also a great way to find that data what you should do you should go to the site setting on the specific site open site information and then go to view all site settings in this panel what you can do you can go to the search and offline avability you can see this is still classic experience from the SharePoint online perspective and here you have the capability indexing side content you can exclude this side from the index of Microsoft 365 full teex search but also From perspective of copilot which will give you the capability to found work around till permissions will be fixed for this specific site or you will figure out with business owners the solution for it change that setting to no click okay and you excluding this specific site to be access or indexed through copilot or Microsoft 365 search block all SharePoint sites from copilot and create wide list for the allowed sites if you need something that will be delivered faster the solution that could work for you is to enabling restricted search for SharePoint and you can do that using pow shell so first of all we need to connect to our SharePoint online and on the tenant level we should check the status of the restricted search mode on our specific tenant you can see in my tenant it is not enabled and this is the work around because how does it work we we disabling all the sites but we delivering the list of up to 100 websites that will be allowed to be searched through co-pilot in the area of searching of the data the only thing you need to do is to enable this mode you can do that using this parameter set SPO tenant restricted search mode enabled this will enable this setup in your Microsoft 365 environment so the only thing you need to do right now is to add SPO 10 and restrict search all lowly so to add your SharePoint site with the address that you selected in here to allowed list this site will be enabled to be searched through copilot through Microsoft 365 search and it gives you the capability to manage that element directly in the copy this site is listed as allowed Source rest of the sites will be not available in the co-pilot or search engine plus remember the list is up to 100 sites all the comments you will find in the description of this video and also what is quite important when you will enable this feature that kind of message will be appearing on the top of the screen when somebody will open co-pilot for Microsoft 365 chat some sites are limited and will not be access ible through compile but again if somebody will directly reach out to the file that is included in the specific SharePoint site it will be possible but compilot by itself it will not search through specific sites if users will directly not ask for it yeah I know this heavy topic but I think this is very good Baseline to analyze your SharePoint sites from perspective of the risky scenarios nominates the sites that are possibly over shared and then exclude them from the perspective of copilot to be sure that they will not appear in the results recommended by Ai and generative AI across our Microsoft 365 environment we buying the time to give us the possibility to meet with the business owners and check if this kind of settings are correct or not and to be fair oversharing is the risk not only if you deploy in copilot remember Microsoft 365 search will also be able to found this data so the workarounds I presented today excluding the SharePoint sites not only from copilot but also from Microsoft 365 search I hope informations in this video help you to understand better how to handle oversharing the area of the co-pilot prepare your farm prep prepare your data structure before you will start to work with AI and use copilot responsive way thank you very much for watching and see you in the next video