Microsoft Copilot security directory

SharePoint Embedded

Published by Microsoft

High risk

Microsoft SharePoint Embedded is a cloud-based file and document management system suitable for use in any application. SharePoint Embedded is an API-only solution that enables app developers to harness the power of the Microsoft 365 file and document storage platform for any app, and is suitable for enterprises building line-of-business applications and ISVs building multitenant applications.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can send messages as you: This connector can post messages, emails, or notifications on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.

Available capabilities

This add-on exposes 45 tools or capabilities.

  • Activate container
  • Check in file
  • Check out file
  • Create container column
  • Create container permission
  • Create file
  • Create file preview
  • Create folder
  • Create sharing link
  • Delete container
  • Delete container column
  • Delete container permission
  • Delete file
  • Delete file version
  • Delete recycled container
  • Delete recycled items
  • Delete sharing permission
  • Discard check out
  • Get a container
  • Get container column
  • Get container custom properties
  • Get file content
  • Get file properties
  • Get file version

The interactive security report will load automatically.