Dataverse - Enhance Dataverse record descriptions for Copilot /mention

🚨 The Signal: Dataverse record descriptions for Copilot /mention will be enhanced, providing richer context for users. This improves record identification but increases the attack surface for data exposure via Copilot.

The Impact

All users interacting with Copilot and Dataverse are affected, increasing the risk of inadvertent data exposure through enhanced record descriptions.

  • End users: Risk of inadvertently exposing sensitive Dataverse information via Copilot.
  • Security teams: Increased complexity in monitoring and auditing data access through AI agents.
  • Data owners: Potential for broader exposure of Dataverse records than intended.
  • Compliance teams: New considerations for data handling and privacy with AI agent interactions.

The Action

  1. Review existing Dataverse security roles and permissions to ensure least privilege is enforced.
  2. Audit Dataverse tables and columns for sensitive data that could be exposed via enhanced descriptions.
  3. Develop or update data loss prevention (DLP) policies to monitor and restrict sensitive Dataverse content shared via Copilot.
  4. Educate users on responsible use of Copilot when referencing Dataverse records, emphasizing data sensitivity.
  5. Monitor Microsoft Purview audit logs for unusual access patterns to Dataverse records via Copilot interactions.

Domain: Agentic-AI · Impact: high · Workload: Other