A licensed user asks Copilot about a protected document they cannot access. What permission principle should the administrator expect?

1. A Copilot license automatically grants every SharePoint permission
2. A sufficiently long prompt bypasses document access
3. Any group membership grants every mailbox's content
4. Copilot's organizational grounding must respect the user's authorized data access