Services

Copilot Readiness & Permissions Audit

Find oversharing and broken inheritance before Copilot and other AI tools surface it, then fix it with a plan you can follow.

Get a quote How it works

Who this is for

Organizations planning a Microsoft 365 Copilot rollout who want leadership comfortable with what it can reach
Teams that inherited sites with years of one-off sharing and unique permissions
Security and compliance owners preparing for an access review or audit
IT groups cleaning up after a reorganization or a tenant consolidation

What you get

A permissions inventory for the sites in scope: unique versus inherited access, broad groups, external users and sharing links
A review of high-risk patterns such as Everyone except external users and widely shared links
An Excel report your team can sort, filter and share with site owners
A prioritized remediation plan, starting with the most sensitive sites
Guidance on the governance tools available in your licensing, including SharePoint Advanced Management and Microsoft Purview
Recommendations for site ownership and regular access reviews

How it works

1
Scope
Agree which sites matter most: HR, finance, legal, executive and M&A content first, then the long tail.
2
Scan
Report on permissions at the depth you need, down to folders and files where it matters, including external users and sharing links.
3
Review and prioritize
Walk through the findings with you and rank what to fix first by sensitivity and exposure.
4
Remediate
Reset unique permissions, remove broad access and tighten sharing, either by your team following the plan or with us doing the changes.
5
Re-check
Run the report again to confirm the changes and set up a simple routine for the next review.

What a typical engagement looks like

Scope: A defined set of sites, from a handful of sensitive ones to a large part of the tenant, with a focus on what Copilot and search could surface.
Shape of the work: A scoped assessment that produces findings, a prioritization session, and then remediation work agreed with you, followed by a re-check.
What you keep: The permissions report, the prioritized plan, and a lightweight review process for site owners.

What drives the cost

These are the factors that move the estimate for this kind of work.

How many sites and libraries are in scope, and how deep the review goes
The amount of unique permissions and external sharing found
Whether remediation is done by your team or by us
Sensitivity labeling and the governance tools included in your licensing
How many site owners need to be involved in reviews

Ways to work with us

Assessment first

A short, scoped review that produces findings and a recommended plan, so you know what the work involves before you commit to it. Larger work that follows is quoted as a scoped project through the contact form.

Monthly advisory

Ongoing hands-on help with the Standard and Priority advisory plans. Details and pricing are on the Support Plans page.

Setup only

A one-time Quick Start to get the free tools running in your tenant. Details and pricing are on the Support Plans page.

See the Support Plans page for the advisory and setup plans.

Free tools for this work

We go with the best tool for each job, whether it is ours or not. These free, open-source tools are ones we built for this kind of work, and you can inspect them or run them yourself.

SharePoint Smart PermissionsAudit access and export read-only permission reports.

Common questions

Does Copilot ignore permissions?

No. Microsoft Copilot works within what each user can already access, so the exposure comes from oversharing that already exists. That is why a permissions review comes before a rollout.

Do we need Copilot licenses before an audit?

No. The audit comes first. If you later buy a Copilot license, Microsoft includes SharePoint Advanced Management capabilities for your Copilot deployment once any one user in the organization is assigned one. Our Copilot licensing guide explains the details.

Can we do this ourselves with the free tools?

Many teams can. The free Copilot oversharing self-assessment and Smart Permissions report cover a lot of ground. This service is for teams that want an expert review, help prioritizing, or hands-on remediation.

What do you deliver at the end?

A report you can share with site owners, a prioritized plan, and recommendations for ownership and recurring reviews. If we do the remediation, we re-run the report to confirm the changes.

How is the work priced?

We start with a scoped assessment and then quote any remediation. The factors above are what move the estimate.

Related guides

Tell us what you are working on

Describe the project in the contact form and we will reply with questions or next steps.

Get a quote