SharePoint Advanced Management

Capabilities

• Oversharing Discovery Reports

  Observe Data

  Surfaces overshared or sensitive sites through Data Access Governance reports and the Content Management Assessment — flagging oversized audiences, "Everyone except external users" access, broken inheritance, and ownerless or inactive sites before Copilot can surface them. Reduces the risk of undetected oversharing.

• Restricted Access Control

  Secure Data Users Agents

  Restricts a SharePoint site's access to a specific security or Microsoft 365 group, so users outside the group — and agents acting for them — cannot reach the site even through prior permissions or links. Reduces the blast radius of an overshared site.

• Restricted Content Discovery

  Secure Data Agents

  Excludes selected SharePoint sites from Microsoft 365 Copilot and agent discovery and search indexing without changing the site's permissions. Reduces the risk of sensitive sites being surfaced by agents while oversharing is remediated.

• SharePoint Admin Agent

  ObserveGovern Users Data

  An AI-powered governance agent that lets administrators investigate tenant-level content risks — oversharing, sprawl, stale sites, and access — through natural-language queries instead of running reports manually. Analyzes SharePoint and SharePoint Advanced Management data to recommend and guide oversharing remediation before a Microsoft 365 Copilot rollout.

• Site Lifecycle Management Policies

  Govern Data

  Automates inactive-site and site-ownership policies so stale or ownerless SharePoint sites are flagged, attested, or cleaned up, keeping obsolete content out of the agent-discoverable surface. Reduces the risk of agents grounding on abandoned or unowned content.