Microsoft Copilot security directory

SharePoint

Published by Microsoft

High risk

SharePoint helps organizations share and collaborate with colleagues, partners, and customers. You can connect to SharePoint Online or to an on-premises SharePoint 2016 or 2019 farm using the On-Premises Data Gateway to manage documents and list items.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can send messages as you: This connector can post messages, emails, or notifications on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.

Available capabilities

This add-on exposes 53 tools or capabilities.

  • Add attachment
  • Agreements Solution - Generate document within Agreements Solution workspace
  • Approve hub site join request
  • Cancel hub site join request
  • Check if the scheduled version of the item is published [DEPRECATED]
  • Check in file
  • Check out file
  • Copy file
  • Copy file (deprecated)
  • Copy folder
  • Create an approval request for an item or file
  • Create file
  • Create item
  • Create new document set
  • Create new folder
  • Create sharing link for a file or folder
  • Delete attachment
  • Delete file
  • Delete item
  • Discard check out
  • Extract folder
  • Generate a document from a form (preview)
  • Generate document using Microsoft Syntex (preview)
  • Get all lists and libraries

The interactive security report will load automatically.