Data loss prevention example - Block SharePoint and OneDrive knowledge source in copilots
Important
Power Virtual Agents capabilities and features are now part of Microsoft Copilot Studio following significant investments in generative AI and enhanced integrations across Microsoft Copilot.
Some articles and screenshots may refer to Power Virtual Agents while we update documentation and training content.
You can use data loss prevention (DLP) policies to prevent copilot authors for connecting to data. Doing so can help prevent data exfiltration.
See Configure data loss prevention for copilots for information about other DLP policy configurations.
Configure DLP to block or configure endpoints using Knowledge source with SharePoint and OneDrive in Copilot Studio connector in Power Platform admin center
Select or create a policy
In the Power Platform admin center, under Policies, select Data policies.
Create a new policy, or choose an existing policy to edit:
If you want to create a new policy, select New policy.
If you want to choose an existing policy to edit, select the policy and select Edit policy.
Enter a name for the policy then select Next. You can change the name later.
Choose an environment
Choose one or more environments to add to your policy.
Select + Add to policy.
Select Next.
Add the connector
Use the search box to find the connector you want to block. You can see connectors that are already blocked on the Blocked tab.
Select the connector's More actions menu (⋮), and then select Block.
Select Next.
Review your policy, then select Update policy to apply the DLP changes.
If admins wants to allow or deny SharePoint endpoints their makers can use as knowledge sources in Copilo Studio, they can use DLP connector endpoint filtering instead of blocking it.
Confirm policy enforcement
You can confirm that this connector is being used in the DLP policy from the Microsoft Copilot Studio.
First, open your copilot from the environment where the DLP policy is applied. Go to the Knowledge tab, select Add knowledge, add a SharePoint and OneDrive knowledge source.
If the policy is enforced, you'll see an error banner with a Details button after the knowledge is added. On the Channels page, expand error link and select the Download button to see details. Published button is disabled if there is a DLP violation.
In the details file, a row will appear for each violation. If a knowledge source has a DLP violation, a row will appear for the knowledge page and for each generative answers node that uses that knowledge source.
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for