Microsoft Copilot security directory

Profisee

Published by Profisee

High risk

The Profisee Power Platform Custom Connector enables a Profisee customer to interface with Microsoft Apps, Copilot Studio, or other that can utilize a Power Platform connector. One must have access to a Profisee instance with a current product license and an active Microsoft Azure subscription. This custom connector offers the following Profisee master data operations: create entity and attribute, create/update/delete records, get metadata, and update a color theme.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 10 tools or capabilities.

  • Create a new attribute
  • Create a new entity
  • Create records by entity name
  • Delete a record from an entity
  • Get attributes metadata by entity name
  • Get data quality issues by entity name
  • Get entity metadata by name
  • Get records by entity name
  • Update an existing theme
  • Update records by entity name

The interactive security report will load automatically.