Over the past year, Cornell has evaluated different generative AI tools, including Microsoft 365 Copilot. The “Microsoft 365 Copilot” product integrates generative AI directly into the Microsoft environment and potentially includes access to an individual’s or a team’s Microsoft documents, OneDrive files, and SharePoint files and sites. 

As part of the effort to safely offer Microsoft 365 Copilot to the Cornell community, CIT is helping OneDrive and SharePoint owners protect information which may unintentionally be visible to the entire Cornell community through search and AI tools. In late October, site owners whose SharePoint sites with the "Everyone except external users" permission will be asked to remove that access unless they have a specific need for that setting.

The notice will look similar to the following:

To review the settings on a SharePoint site that you own: 

1. Go to your SharePoint site

2. Click Settings (Gear icon) at the top right

   

3. Click either Shared With or Site Permissions

   

4. Click either Advanced or Advanced Permissions Settings 

   
   TIP: if a folder’s permissions are set to “Everyone except external users” then all files in that folder will be visible to the same group. Once you change the folder’s permissions, files in that folder will now reflect that new status. 

As generative AI use at the university expands, files that lack appropriate viewing permissions will be exposed to individuals and uses for which they were not intended. Our goal is to help you prevent this unintended exposure. If you need help with site permissions, please contact the IT Service Desk. Here are some additional resources to help you manage your data.