Prevent data loss when using Copilot in your company.

Question

Is there anything special about Copilot's URL upload feature? I want to limit the URLs I can upload to, instead of having to open all SharePoint sites, which is risky when logging in with my personal account and could lead to data loss. Are there currently any DLP solutions that can detect when a user uploads a file via the Web/Teams/Outlook copy?

Answer 1

Hello @hehe

From the information you have provided, I understand that you would like to configure how files can be uploaded to Microsoft 365 Copilot and also audit user activities related to file actions within Copilot.

Regarding the management of file uploads, this configuration is handled at the Microsoft 365 Copilot service level. To implement or customize these controls, you would need to contact the Microsoft Support team directly, as they are best positioned to review your tenant configuration and apply or validate the required settings.

Microsoft provides built-in controls that allow organizations to manage file upload behavior in Copilot, including the following options:

• Allow file uploads in both Microsoft 365 Copilot and Microsoft 365 Copilot Chat
• Prevent file uploads in both Microsoft 365 Copilot and Microsoft 365 Copilot Chat
• Disable file uploads in Microsoft 365 Copilot Web mode and Microsoft 365 Copilot Chat, while still allowing file uploads in Microsoft 365 Copilot Work mode

For reference, you may review the following Microsoft documentation, which outlines these controls in detail:

Controls to manage file uploads in Microsoft 365 Copilot and Copilot Chat | Microsoft Learn

For auditing and monitoring purposes, you can use Microsoft Purview and its Audit log capabilities. Microsoft Purview allows administrators to search and review Copilot-related activities, including user interactions and file-related actions, to help meet compliance and security requirements. You can follow step-by-step mention in Search the audit log for Copilot interactions in Microsoft Purview | Copilot for M365

To create a support request to Microsoft Support, please:  

• Go to the admin center at https://admin.cloud.microsoft. If you are not the admin, please help us to contact directly to your IT Admin.  
• On the bottom right side of the page, select Help & support.    When you open a support ticket, please make sure to turn off the Support Assistant (AI) in the help panel as shown in the screenshot, simply switch Support Assistant → Off, then type your issue description such as (losing access to account). Once the AI is off, the “Contact Support” button will appear normally, allowing you to submit a ticket directly. .  From the information you have provided, I understand that you would like to configure how files can be uploaded to Microsoft 365 Copilot and also audit user activities related to file actions within Copilot.
• Select "Contact Support".
• Enter a description of your issue, confirm your contact number and email address, select your preferred contact method, and then select Contact me. The expected wait time is indicated in the Contact support pane.   

If you need any further concern, please feel free to let me know.