A governance lead asks how Microsoft 365 Copilot decides which documents it can use when answering a prompt. Which statement correctly describes the access model Copilot applies?
- ACopilot uses the signed-in user's existing permissions and can only reference content that the user already has rights to open. Correct
- BCopilot is granted a dedicated service identity with tenant-wide read access so it can reason over every document in the organisation.
- CCopilot can read any file whose sensitivity label is lower than the user's clearance level, regardless of sharing permissions.
- DCopilot indexes content under an administrator identity, then filters results to the user only at display time.
Why A is correct: Correct. Copilot has no access model of its own; it queries content through Microsoft Graph in the user's security context, so it surfaces only what that user could already retrieve.
Why B is wrong: Tempting because Copilot can seem to 'know everything', but it holds no elevated tenant-wide identity; it always operates within the requesting user's permissions.
Why C is wrong: Sensitivity labels influence protection and usage rights, but access is decided by the user's file permissions, not by a clearance comparison, so this is wrong.
Why D is wrong: This sounds plausible given central indexing, but retrieval is trimmed by permission in the user's context during the query, not by a late display-time filter over admin-read data.