Which Files Can Microsoft 365 Copilot Summarize for User1?

SC-401 By islever Editorial Last updated

Protect data used by AI services Implement and manage sensitivity labels in Microsoft Purview

Short answer

A File2 only, because its sensitivity label grants User1 the EXTRACT usage right Copilot needs for encrypted content.

Question

You have a Microsoft 365 E5 subscription. The subscription contains a user named User1 and the sensitivity labels shown in the following table.
Exhibit: Which Files Can Microsoft 365 Copilot Summarize for User1?
You publish the labels to User1.
The subscription contains the files shown in the following table.
Exhibit: Which Files Can Microsoft 365 Copilot Summarize for User1?
Which files can Microsoft 365 Copilot summarize for User1?
  1. File2 only Correct Answer
  2. File3 only
  3. File2 and File3 only
  4. File1, File2, and File3

Key Takeaways

The question tests whether Copilot honors sensitivity-label encryption and usage rights, and the trap is assuming VIEW permission alone is enough for summarization.

Microsoft 365 Copilot can summarize sensitivity-labeled files only when User1 has the EXTRACT usage right on the file's encrypted content. This page establishes that File2 is the only listed file satisfying that condition, making A correct.

Common mistake: The common mistake is choosing every file User1 can open, especially adding File3 because VIEW access exists, while ignoring that Copilot also requires the EXTRACT usage right.

Expert Analysis

Why the Answer Is Correct

Microsoft 365 Copilot honors existing sensitivity-label protection rather than bypassing it. For encrypted files, the signed-in user must have an effective EXTRACT usage right, which Purview exposes as Copy and extract content (EXTRACT), so Copilot can read the content for summarization. In the exhibit, only File2's label grants User1 that combination; its effective permissions include the extract capability alongside view access. Therefore A is the defensible answer even though the source key was marked unknown.

Why the Other Options Are Wrong

B is wrong because File3 can be opened with VIEW rights but its label does not grant User1 EXTRACT, so Copilot cannot summarize it. C is wrong for the same File3 reason, and D overstates access by adding both File1 and File3. File1 also lacks the effective EXTRACT grant for User1, so being visible or openable is not enough. The options are not testing file existence or user access alone; they test Copilot's processing right.

Community Comment Notes

The learner consensus is strongly for A: florinvele, Gtc_, and rvln7 all point to Microsoft's Copilot considerations for the EXTRACT usage right, and Nurob summarizes that view and extract permissions are required. kollyp2000 adds that encryption is the trigger for this check. Suranka's "Google answer" choosing C is unsupported by the cited documentation and conflicts with the EXTRACT requirement.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

For Copilot questions, separate access rights from processing rights: VIEW lets a user open encrypted content, but EXTRACT is the decisive right for summarization. Map each file to its label's effective permissions before selecting an option.

Frequently Asked Questions

Why can't Copilot summarize File3 when User1 can open it?

Opening encrypted content requires VIEW, but Copilot processing requires EXTRACT. File3's label lacks the EXTRACT right for User1, so Copilot cannot summarize it.

Does Copilot need EXTRACT for files without encryption?

No. The EXTRACT requirement applies when a sensitivity label encrypts content; unencrypted files do not carry Rights Management usage rights for Copilot to honor.

More SC-401 FAQ →

Discussion 6 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 6

  1. florinvele 👍 9 Answered A
    In the Microsoft Purview portal, the EXTRACT usage right is displayed as Copy and extract content(EXTRACT) https://learn.microsoft.com/en-us/purview/ai-m365-copilot-considerations#copilot-honors-existing-protection-with-the-extract-usage-right
  2. Gtc_ 👍 2 Answered A
    Need Extract enabled for Copilot. https://learn.microsoft.com/en-us/purview/ai-m365-copilot-considerations#copilot-honors-existing-protection-with-the-extract-usage-right
  3. Nurob 👍 2 Answered A
    View and extract oemrissions are required to be able to summarize
  4. kollyp2000 👍 1 Answered A
    When encryption is applied, the user must have EXTRACT and VIEW usage rights for Copilot to interact with the content.” Source: How data is protected and audited in Microsoft 365 and Microsoft Copilot
  5. rvln7 👍 1 Answered A
    A is correct https://learn.microsoft.com/en-us/purview/rights-management-usage-rights#usage-rights-and-descriptions
Show 1 more comment
  1. Suranka 👍 1 Answered C
    Google answer

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Using Sensitivity Labels to Restrict Microsoft 365 Copilot Access

S-grade

Microsoft Purview Retention Policy Conflict Resolution

S-grade

Maximum Primary Elements in Microsoft Purview EDM Classifier

S-grade

Encrypting Emails with Azure Storage Keys via DLP

S-grade

← Back to SC-401 Study Guide