How to prepare my business data for microsoft copilot australia
Summary
This guide helps you troubleshoot and resolve: How to prepare my business data for microsoft copilot australia. Follow the steps below to fix the issue.
Common Causes
Microsoft Copilot for Microsoft 365 helps Australian small businesses summarise meeting action items, draft client proposals, analyse spreadsheets, and sort project correspondence. However, Copilot can only access data that your users already have permission to see. If your SharePoint sites, OneDrive folders, and Teams files are not properly secured, enabling Copilot may inadvertently surface sensitive information such as executive payroll, private director files, or confidential client records.
Quick Fix Steps
- Review current SharePoint and OneDrive sharing permissions across your organisation.
- Restructure folders so sensitive data is isolated from general team content.
- Run a Microsoft Purview data audit to identify over-exposed files.
- Apply sensitivity labels to confidential documents before enabling Copilot.
- Train staff on correct file sharing and permission practices.
Detailed Instructions
1. Audit Existing Permissions
Before activating Copilot, verify who can access your business data. Copilot respects existing Microsoft 365 permissions, so any file a user can open is potentially visible to Copilot.
- Sign in to the Microsoft 365 admin centre at admin.microsoft.com using your administrator account.
- In the left navigation, select Show all, then choose SharePoint to open the SharePoint admin centre.
- Select Active sites from the menu to review your SharePoint team sites and communication sites.
- For each site, select Permissions to check which groups and individuals have access.
- Remove any external sharing links or guest access that are no longer required.
- Repeat the process for OneDrive accounts by selecting Active users in the Microsoft 365 admin centre, choosing a user, and reviewing their OneDrive sharing settings.
2. Restructure Folders for Data Security
Organise your SharePoint and OneDrive libraries so that confidential information is stored separately from general collaboration folders. This reduces the risk of Copilot surfacing sensitive documents in response to routine queries.
- Identify folders containing payroll, human resources, director remuneration, or client contract information.
- Move these files into dedicated SharePoint sites or OneDrive folders with restricted membership.
- Manage unique permissions on sensitive folders so they do not inherit access from parent libraries where inappropriate.
- Assign access only to specific security groups rather than individual users where possible.
- Use clear, consistent naming conventions such as
/HR/Payroll/2024-25/or/Clients/Confidential/to make access reviews easier.
3. Run a Data Governance Review with Microsoft Purview
Microsoft Purview helps you locate, classify, and protect sensitive information across Microsoft 365.
- Navigate to the Microsoft Purview compliance portal at compliance.microsoft.com.
- Select Data lifecycle management > Microsoft 365 sensitivity labels.
- Create labels such as Confidential, Internal Only, and Public if they do not already exist.
- Publish the labels to users so they can apply them to documents in Word, Excel, PowerPoint, and Outlook.
- Use Data classification > Sensitive info types to scan for credit card numbers, tax file numbers, or Australian business numbers stored in documents.
- Review the Content explorer and Activity explorer to see which files contain sensitive data and who has accessed them.
4. Apply Sensitivity Labels Before Enabling Copilot
Sensitivity labels can enforce encryption and restrict copying or printing. Applying these labels ensures that even if Copilot can see a file, unauthorised users cannot open or extract its contents.
- In Microsoft Word, Excel, PowerPoint, or Outlook, open the document you want to protect.
- Select the Sensitivity button from the ribbon or File > Info > Protect Document (or equivalent).
- Apply the appropriate label, such as Confidential.
- Repeat for all folders containing payroll, contracts, or client records.
- Communicate to staff that they must apply sensitivity labels when creating new confidential documents.
5. Prepare Staff and Test Copilot Safely
Technology controls are only effective if your team understands how to use them.
- Run a short training session covering correct file sharing, sensitivity labels, and the difference between internal and external sharing.
- Enable Copilot for a small pilot group first, such as management and IT administrators.
- Ask pilot users to test common tasks like summarising meeting notes, drafting proposals, and analysing spreadsheets.
- Review audit logs in the Microsoft Purview portal to confirm Copilot is not accessing restricted content.
- Gradually roll out Copilot to the rest of the organisation once permissions are confirmed secure.
Troubleshooting
Copilot Is Returning Sensitive Files in Search Results
If Copilot surfaces documents that should be restricted, the issue is almost always excessive permissions rather than a Copilot setting.
- Open the file in SharePoint or OneDrive and select Manage access.
- Review the list of users and groups with direct access or sharing links.
- Remove any unnecessary permissions or convert editable links to view-only.
- Check whether the file inherits permissions from a parent folder and manage unique permissions if required.
- Reapply a sensitivity label to the file to enforce additional protection.
Staff Cannot Find Files After Restructuring
Moving files to restricted folders can break existing shortcuts and bookmarks.
- Use the Recycle bin in SharePoint or OneDrive to restore accidentally deleted files.
- Update internal team documentation and intranet links to point to the new folder locations.
- Encourage staff to use Search in Microsoft 365 rather than relying on saved file paths.
- Create shortcuts in frequently used libraries that point to the new secure locations.
Sensitivity Labels Are Not Appearing in Office Apps
If users do not see sensitivity labels in Word, Excel, or PowerPoint, the labels may not be published correctly or the apps may need updating.
- Confirm the label is published to the relevant users or groups in the Microsoft Purview compliance portal.
- Ask users to restart their Office applications and sign out, then sign back in.
- Ensure Microsoft 365 Apps are updated by selecting File > Account > Update Options > Update Now.
- Verify the user has a licence that supports sensitivity labels, such as Microsoft 365 Business Premium or E3/E5.
If you host with us, you don't need to do this yourself — just Open a Ticket and our Brisbane team will get it sorted.
Still Having Issues?
💻 Open a Ticket