Copilot for Microsoft 365 Security and Governance AMA

Copilot Studio adds the ability to interact with data sources outside of Microsoft 365 using plugins and other action types. These would also need to be scoped to intended users or groups for that information. The same would be true when building your own full-page copilots - permissions for those should be scoped to just the users and groups intended. Related, Microsoft Graph connectors can also be scoped to users and groups as you extend search in your Microsoft 365 environment. Generally, the recommendation here is a using dynamic groups as your scoping mechanism so that users are automatically provisioned and de-provisioned as their role, status or location changes.