How to restrict user for unauthorized sharepoint index?

Question

How to restrict user for unauthorized sharepoint index?

Akash Tripathy 0

I have developed a chatbot using Azure Open AI.

https://learn.microsoft.com/en-us/azure/search/search-howto-index-sharepoint-online

I utilize SharePoint to store relevant documents and create an index to retrieve answers from the bot related to those documents. The issue at hand is that certain individuals have access to the SharePoint site, but those without access are still able to access the index. Essentially, they can use the bot and obtain answers from the documents without restrictions.

I want to ensure that those without access to the SharePoint site are unable to retrieve answers from the index.

I gone through lots of documents but did not find anything related.

I'm unsure if there is any mechanism available for this. Can you provide guidance or suggestions?

Ramr-msft 17,826 Reputation points

2024-03-05T14:21:54.1066667+00:00

Thanks for the question, In order to provide end user access control over documents, it is recommended that Security filters for trimming results - Azure Cognitive Search | Microsoft Learn is used so only users that are part of specific groups can access documents.

SharePoint supports a granular authorization model that determines per-user access at the document level. The indexer doesn't pull these permissions into the index, and Azure AI Search doesn't support document-level authorization. When a document is indexed from SharePoint into a search service, the content is available to anyone who has read access to the index. If you require document-level permissions, you should consider security filters to trim results and automate copying the permissions at a file level to a field in the index.

Indexing user-encrypted files, Information Rights Management (IRM) protected files, ZIP files with passwords or similar encrypted content isn't supported. For encrypted content to be processed, the user with proper permissions to the specific file must remove the encryption so the item can be indexed accordingly when the indexer runs the next scheduled iteration.
Akash Tripathy 0 Reputation points

2024-03-06T10:43:22.95+00:00

Thank you for your answer, but I have all my data in pdf format in one of my Sharepoint Site.

Here the link given by you I for single files, how can i do with Sharepoint Site. I do indexing through datasource and indexers, But here nothing like that in the documentation you provide.

Can you provide something in my context?

Your answer

Ramr-msft 17,826 Reputation points

2024-03-05T14:21:54.1066667+00:00

Thanks for the question, In order to provide end user access control over documents, it is recommended that Security filters for trimming results - Azure Cognitive Search | Microsoft Learn is used so only users that are part of specific groups can access documents.

SharePoint supports a granular authorization model that determines per-user access at the document level. The indexer doesn't pull these permissions into the index, and Azure AI Search doesn't support document-level authorization. When a document is indexed from SharePoint into a search service, the content is available to anyone who has read access to the index. If you require document-level permissions, you should consider security filters to trim results and automate copying the permissions at a file level to a field in the index.

Indexing user-encrypted files, Information Rights Management (IRM) protected files, ZIP files with passwords or similar encrypted content isn't supported. For encrypted content to be processed, the user with proper permissions to the specific file must remove the encryption so the item can be indexed accordingly when the indexer runs the next scheduled iteration.
Akash Tripathy 0 Reputation points

2024-03-06T10:43:22.95+00:00

Thank you for your answer, but I have all my data in pdf format in one of my Sharepoint Site.

Here the link given by you I for single files, how can i do with Sharepoint Site. I do indexing through datasource and indexers, But here nothing like that in the documentation you provide.

Can you provide something in my context?

Share via

How to restrict user for unauthorized sharepoint index?

Your answer