Rolling out enterprise Copilot without breaking your DLP posture
Sensitivity labels, Graph permissions and the three settings that decide the outcome.
Microsoft MVP / Microsoft 365
Software developer and M365 specialist. Notes on .NET, Azure, Intune and Copilot rollouts that survive contact with real tenants, plus reviews of the hardware and software I actually run.
Sensitivity labels, Graph permissions and the three settings that decide the outcome.
Most read this month
Browse by service
Latest writing
Hardware and software
Software · Compute Protocol-level testing
Fast, complete and officially maintained. The constraint is not speed, it is that one snapshot of a content-heavy page can eat 31,800 tokens of context.
Software · Compute Partial - wizard only
Boots in under five seconds and idles at 140 MiB, a fraction of anything else here. Transcoding on a laptop CPU tops out around two 1080p streams.
The lab
Three compute nodes, one storage node and a switch that has never needed a reboot. Hardware runs the same workload set for at least ninety days, power logged at the wall. Software gets tested in a tenant with real users in it, not a demo tenant.
Books
Two titles in progress. How much of each one you can read before it ships depends on who is publishing it, and each book says so on its own page.
Chapter 4 is readable here. The rest ships with the book.
Next up