Centeye
Book a call Start free trial

Copilot security for MSPs

See what Microsoft 365 Copilot can reach, before your clients find out.

Copilot can only see what each person can already open. In most businesses that is far more than anyone thinks: payroll shared with everyone, old contracts in open sites, HR notes in a team folder. Centeye finds what Copilot can surface in every client tenant, gives you the exact change to make, and watches Copilot access from then on.

Start free trial Book a 30-minute call →

Connect Microsoft 365 with one admin sign-in. Nothing to install.

Copilot exposure · Harbor Dental Group Sample data
  • 14 Sites and folders open to everyone3 hold payroll or HR files
  • 37 Sensitive files Copilot opened this weekfor 11 people
  • 9 AI apps with mail or file access2 unused for 90+ days
  • 1 Unusual Copilot accesscase waiting for you
Made-up client. This is the first view Centeye gives you for each tenant.

Why Copilot changes the risk

Copilot doesn’t break your permissions. It reads them out loud.

Before Copilot, an overshared folder sat quietly until someone went looking. Now anyone can ask a plain question and get the answer in seconds. Three things decide what Copilot can expose in a client tenant.

  1. 01

    Files shared too widely

    Copilot answers from everything a person can open. Sites shared with everyone, old team folders and “anyone with the link” files turn into answers for anyone who asks the right question.

  2. 02

    AI apps and agents beside Copilot

    Note-takers, add-ins and agents that people connected to their mail and files keep that access for months, often long after anyone used them.

  3. 03

    A stolen account with Copilot

    An attacker who takes over one account gets Copilot too: a fast way to search for invoices, bank details and passwords across everything that person can reach.

Copilot security in action

Five ways Copilot goes wrong, and what Centeye does about each.

The intern who asked about salary bands

Tuesday, 10:00 am

  1. What happened

    A client rolls Copilot out to all staff. A week later an intern asks it about “salary bands” and gets an answer, because the payroll folder was shared with everyone years ago.

  2. What Centeye saw

    Synthwatch finds the payroll folder open to everyone and shows which files Copilot could surface, and to whom.

  3. What it did

    The folder’s owner gets the exact sharing change to make. Centeye then confirms Copilot can no longer reach it, and the register records the fix.

What Centeye checks

Every way Copilot and other AI can reach client data.

  • Shows you the fix

    Files Copilot can surface to anyone

    Sites, folders and files shared with everyone, so Copilot can put payroll, contracts or HR notes in front of anyone who asks.

    Centeye Synthwatch · early access

  • Shows you

    Copilot opening sensitive files

    When Copilot opens files on someone’s behalf, which of those files are sensitive, and for whom.

    Centeye Synthwatch · early access

  • Alerts, acts at your setting

    Unusual Copilot access

    Copilot activity that doesn’t fit the person, such as a burst of file access right after an odd sign-in.

    Centeye Gatewatch

  • Acts at your setting

    Stolen sessions and risky sign-ins

    Sessions replayed from someone else’s machine, impossible travel and sign-ins from anonymising networks: the takeovers that hand Copilot to an attacker.

    Centeye Gatewatch

  • Revoke at your setting

    AI apps and agents connected to Microsoft 365

    Every AI app or agent holding access to mail, files or calendars, what each grant allows, who approved it, and vendors nobody recognises.

    Centeye Lumen

  • Coach or block

    AI use outside Copilot

    Which other AI sites people use, sign-ins with personal accounts, and how much company data goes out to them. Never the content. Needs the browser extension.

    Centeye Lumen

  • Built in

    Fixes that fit the client’s plan

    Centeye reads each client’s Microsoft licence and proposes only the fixes that plan supports, so nobody is told to switch on a feature they don’t have.

    Centeye Lumen

  • Coming

    Copilot Studio and Entra Agent ID registries

    Reading the agents your clients build in Copilot Studio straight from Microsoft’s own registries.

    Centeye Synthwatch · early access

Microsoft’s controls, and what Centeye adds

Microsoft gives each tenant the settings. Centeye tells you which client needs which fix first.

Microsoft 365 has good controls for Copilot. Each one works inside a single tenant and waits for an admin to run it. Centeye works alongside them, across every client you look after.

The jobIn Microsoft 365What Centeye adds
Find oversharingSharePoint data access governance reports list sites shared with large groups, one tenant at a time.Every client’s overshared sites and folders in one view, ranked by what Copilot could actually surface, each with an owner.
Keep content out of CopilotRestricted Content Discovery keeps chosen SharePoint sites out of Copilot and organisation-wide search while permissions are reviewed. It doesn’t change who can open them.The exact sharing change for each folder, so access is actually fixed, then a check that Copilot can no longer reach it.
Label sensitive dataSensitivity labels in Microsoft Purview mark and protect files, once someone has labelled them.Shows which sensitive files Copilot is opening today, and for whom, while the longer labelling work goes on.
Sign-in rulesConditional Access sets who can sign in, from where and on which devices.Watches every sign-in for the takeovers that get past the rules, and joins them to the Copilot access that follows.
Connected appsEntra admin pages list each app with permissions in one tenant.Every AI app and agent across every client, with its reach, its owner, a 90-day review, and a revoke you can undo.

Microsoft features as described on Microsoft Learn, October 2026. Availability depends on each client’s Microsoft plan, which Centeye reads before it proposes a fix.

What Centeye reads

One admin sign-in. Here is what it looks at.

Centeye connects to Microsoft 365 the way an admin tool does, reads what it needs to answer “what can Copilot reach?”, and changes nothing until you say so.

Who can open what
Sites, folders and files open to everyone or to large groups.
Copilot activity
When Copilot opens files on someone’s behalf, and which of those are sensitive.
Sign-in records
Where, when and from which device and browser each person signed in.
App grants
Every app and agent with access to mail, files or the directory, and who approved it.
The client’s licence
Which Microsoft plan each client has, so fixes match what they own.
Optional: browser and laptop
The Chrome and Edge extension and the Windows sensor add other AI sites, personal accounts and how much data went out. Never the content.

What it does about it

The fix, not just the finding.

  1. 01

    The exact sharing change

    For each overshared site or folder, the change to make and who owns it. Centeye then checks Copilot can no longer reach it.

  2. 02

    End sessions, reset sign-in

    When an account is taken over, every session ends and the password and sign-in methods reset, at your setting.

  3. 03

    Revoke an AI app’s access

    Remove one specific grant, checked at Microsoft afterwards. Every revoke can be undone.

  4. 04

    Lock an app identity

    Lock a service principal or reset an API token when an app or agent steps out of line.

  5. 05

    A ticket and a nudge

    Open a ticket in your PSA, tell the owner, or coach the person in the moment towards the approved tool.

  6. 06

    An owner and a review date

    Copilot and every other AI tool land in one register per client, with an owner and a 90-day re-approval.

You choose how far it goes, per client and per action Tell me Centeye finds it, explains it and recommends the fix. You do the rest.Ask me first Centeye prepares the fix and runs it the moment you approve, from a phone if needed.Handle it Centeye fixes it on its own, checks it worked, and tells you after.

Risky steps never run on their own. Every action is checked at Microsoft afterwards, recorded with who, what, why and when, and undone where Microsoft allows.

Copilot rollout checklist

A safe Copilot rollout for each client, in three stages.

Use it with or without Centeye. Centeye runs the checks for you, in every tenant, and keeps running them.

1Before you switch Copilot on

  • Find the sites, folders and files open to everyone, starting with payroll, HR, finance and legal.
  • Give each overshared site an owner and fix the sharing, not just the search results.
  • List the AI apps and agents already connected to mail and files, and remove the ones nobody uses.
  • Agree the approved AI tools and write a one-page AI usage policy.
  • Make sure admins use phishing-resistant sign-in, such as passkeys.

2In the first 30 days

  • Watch which sensitive files Copilot opens, and for whom.
  • Alert on Copilot access that doesn’t fit the person, especially after an odd sign-in.
  • See who still uses personal AI accounts beside Copilot, and point them to it.
  • Review new AI app consents as they happen, not at the end of the quarter.

3Every month after

  • Re-check sharing: new sites and folders get shared with everyone all the time.
  • Bring every AI app and agent back for review every 90 days.
  • Send the client a short report on what Copilot could reach and what was fixed.

Need the policy part? Copy our one-page AI usage policy template.

Built for MSPs

Copilot readiness for every client, from one screen.

Your clients are switching Copilot on whether or not anyone checked their sharing first. Start with the Copilot check for a few clients, then add identity, email and endpoint protection on the same platform when you’re ready.

  • Every client, one screen

    Copilot exposure, AI apps and open cases across all your tenants, grouped by what each would touch.

  • Policy per client

    Set the dial per client and per action, or start every client from your own MSP template.

  • Tickets where you work

    Findings open tickets in standard PSA tools and alerts go to Microsoft Teams, Slack or email.

  • A report clients read

    Argus writes each client’s report in plain words: what Copilot could reach, what was fixed, and one thing to do next.

Copilot agents

Agents built on Copilot need an owner and an off switch too.

Clients are starting to build their own agents. Each one is a new identity holding keys to their data. Here is what Centeye covers today, and what is on the way.

Covered today
  • AI agents and apps holding access to Microsoft 365 through app grants, and what each can reach.
  • App identities and service principals nobody recognises.
  • A named owner and a 90-day re-approval for every agent.
  • Revoke a grant, lock a service principal, reset an API token, at your setting.
Coming
  • Reading agents straight from Copilot Studio’s registry.
  • Microsoft Entra Agent ID.
  • Agents and MCP servers running on laptops.

Agent security is Centeye Synthwatch, in early access.

In the console

Copilot, in the AI register for each client.

Real screens from the Centeye console. The clients, people and data in them are made up.

Lumen AI register: Microsoft Copilot, Gemini, NoteGenie, SummarizeIt and ChatGPT with the people using each, a risk level and a review status.
The AI register for each client. Every AI app in use, how many people use it, how much it can reach, and whether it was approved, blocked or still needs a review.Real Centeye screen · sample data, client names are made upFull size ↗

Questions

Copilot security, answered.

Does Copilot give people access to files they couldn’t open before?
No. Microsoft 365 Copilot works within each person’s existing permissions. The risk is that many files are already shared far more widely than anyone realises, and Copilot makes them easy to find with a plain question.
What is Copilot oversharing?
Oversharing is when files are open to more people than need them: sites shared with everyone, old team folders, or “anyone with the link” files. Before Copilot, people rarely stumbled on them. With Copilot, one question can surface them in seconds.
Does Centeye replace Microsoft’s own Copilot controls?
No. It works alongside them. Microsoft gives each tenant’s admin reports and settings. Centeye shows an MSP which clients need which fix first, gives the exact change and its owner, and checks afterwards that Copilot can no longer reach the data.
Will Centeye change sharing or revoke access on its own?
Only if you set it to. Everything starts on “Tell me”: Centeye shows what it finds and recommends the fix. You can move each action to “Ask me first” or “Handle it”, per client. Risky steps never run on their own, and every action is checked at Microsoft afterwards.
Do I need to install anything?
No. Connect Microsoft 365 with one admin sign-in to see oversharing, Copilot access and connected AI apps, usually in under 10 minutes. The Chrome and Edge extension and the Windows sensor add the browser and laptop view if you want it.
Can I see every client in one place?
Yes. Centeye is multi-tenant, so an MSP sees Copilot risk across every client tenant in one view, with policy set per client and tickets opened in standard PSA tools.
Should we check oversharing before or after rolling out Copilot?
Before, if you can. Fixing the widest sharing first means Copilot starts with a clean view. If Copilot is already live, start now: the same checks show what it has already been able to reach.
Does it cover Copilot Studio agents?
Agents and AI apps that hold access to Microsoft 365 through app grants are covered today, each with an owner and a 90-day review. Reading Copilot Studio’s own agent registry and Entra Agent ID is coming. Synthwatch is in early access.
What about Gemini and Google Workspace?
Connected AI apps, sign-ins and AI use are covered in Google Workspace too. This page focuses on Microsoft 365 Copilot; see Centeye Lumen for the wider AI picture.

Read more: Centeye Lumen · Centeye Synthwatch · Centeye Gatewatch · Shadow AI detection · AI usage policy template · What Copilot can see: the checklist · How to secure AI agents

Microsoft, Microsoft 365, Copilot, SharePoint, Purview and Entra are trademarks of the Microsoft group of companies. Use here describes compatibility only.

See what Copilot can reach in your first client today.

Everything starts on “tell me”: Centeye shows you what it finds and changes nothing until you say so.

Start free trial Book a 30-minute call →