For IT administrators
SharePoint exposure assessment — access approval brief
Your organisation has been asked to approve read-only access for a SharePoint exposure review ahead of Microsoft 365 Copilot rollout. This page explains what happens when you approve.
What we need
Read access to SharePoint sites, libraries, files, sharing links, and group membership — so we can see what Copilot could already surface.
Microsoft shows the exact permissions on the consent screen before you approve. We never ask for your password and nothing is installed in your environment.
What happens when you approve
- You open the approval link and sign in with a Global Administrator account.
- Microsoft displays the permissions requested. You review and click Accept.
- Permissions may take a few minutes to activate across your tenant.
- A read-only review runs. We do not change permissions, files, or settings.
Why permissions may look broad
Microsoft does not offer a “read sharing only” permission for SharePoint. The consent screen may list broader access than feels necessary, but the assessment is read-only in practice — we do not write, move, or delete anything.
How to revoke access
In Microsoft 365 admin, open Enterprise applications, find “Alif Consulting - SharePoint Assessment” (or the name shown on your consent screen), and delete the application. Access stops immediately.
Who can approve
A Microsoft 365 Global Administrator. If your organisation uses an internal approval workflow, consent may take longer than a few minutes.