Copilot Data & Privacy Issues

Does SharePoint Copilot Restriction Apply to ChatGPT Connectors?

Khadija Khan Sep 29, 2026 870 views

Question details

The user wants to know if the 'Restrict content from Microsoft 365 Copilot' setting in SharePoint Online also blocks indexing and access from external ChatGPT connectors.

Does SharePoint Copilot Restriction Apply to ChatGPT Connectors?

Product: Microsoft SharePoint Online
Device & OS: not provided
Scenario: Configuring data privacy and search indexing settings for external AI connectors like ChatGPT Business in a SharePoint environment.
Observed behavior: The user is unsure if the Microsoft 365 Copilot restriction setting universally protects files from being accessed by third-party AI connectors.

Before you start

Ensure you have Site Admin or Tenant Admin privileges in your SharePoint Online environment before modifying access permissions or site settings.

Solution 1Recommended

Control Connector Access via SharePoint Permissions

Since the Copilot restriction setting does not block third-party connectors, you must use standard SharePoint permissions to restrict content.

The 'Restrict content from Microsoft 365 Copilot' option is exclusively designed for Microsoft 365 Copilot and native Microsoft search experiences. It does not govern external applications like ChatGPT or other third-party connectors.

To properly secure your data from external AI indexing, you must manage access at the file, folder, library, or site level using standard SharePoint permissions.

Navigate to access settings

Open SharePoint Online and navigate to the specific file, folder, or document library you want to restrict.

Open Manage Access

Click the three dots (More options) next to the item and select 'Manage Access' from the dropdown menu.

Remove unauthorized access

Review the list of users, groups, and service accounts. Remove permissions for any service accounts associated with your external ChatGPT connector.

Apply changes

Ensure that only authorized personnel have 'Read' or 'Edit' access, ensuring third-party tools cannot index the sensitive data through wide-reaching permissions.

Control Connector Access via SharePoint Permissions

Permission-Based Retrieval: AI services retrieve only the content that the current user or the connector's authenticated service account is permitted to view.

Solution 2

Configure Indexing Rules within the ChatGPT Connector

Manage data privacy directly from the third-party connector's administrative dashboard to prevent crawling of specific paths.

Free Microsoft Office alternative

Looking for a Secure and Lightweight Office Suite?

While managing SharePoint permissions for Microsoft 365 Copilot can be complex, WPS Office provides a streamlined, lightweight alternative for your document creation and editing needs. It is fully compatible with Microsoft Office formats, offering seamless transitions and robust privacy controls without the overhead of complex tenant management.

1. Download the installer: Visit the official WPS Office website and click the free download button.
2. Install the application: Run the downloaded installer and follow the simple on-screen instructions to set up the suite.
3. Start creating securely: Open WPS Office and instantly start editing your documents with full format compatibility and familiar tools.

Fully compatible with Microsoft Word, Excel, and PowerPoint file formats (.docx, .xlsx, .pptx).Lightweight design that runs smoothly on almost any device and operating system.Built-in WPS AI capabilities for intelligent, localized document processing.Robust local file management and intuitive privacy controls.

Frequently Asked Questions

Can I mark a specific file for Microsoft 365 Copilot to ignore?

Currently, there is no native feature to mark an individual file or folder specifically for Copilot to ignore while keeping it visible to users. You must restrict access using standard SharePoint file permissions, as Copilot indexes whatever the user is permitted to view.

Will restricting a SharePoint site from Microsoft Search hide it from ChatGPT?

Not necessarily. Microsoft Search settings apply exclusively to the Microsoft ecosystem. External tools like ChatGPT Business connectors may bypass these settings depending on how their service account is authenticated, so restricting folder-level permissions is the most reliable method.

How do AI systems determine what files they can read in SharePoint?

AI systems and third-party connectors generally retrieve only the content that the authenticated user (or the connector's dedicated service account) is permitted to view based on active SharePoint permissions.

Microsoft Copilot Issues