[{"data":1,"prerenderedAt":1692},["ShallowReactive",2],{"article-\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen":3,"article-series-m365-copilot":1669},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"date":10,"category":11,"series":12,"seriesNo":13,"seriesLabel":14,"author":15,"thumbnail":16,"tags":17,"faq":23,"body":39,"_type":1663,"_id":1664,"_source":1665,"_file":1666,"_stem":1667,"_extension":1668},"\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen","articles",false,"","Microsoft 365 Copilotの情報漏洩対策｜SharePoint・OneDrive・Teamsの権限を棚卸しして是正する手順","Microsoft 365 Copilotの情報漏洩リスクの正体は、外部流出より「社内で見えてはいけない人に見える」ことです。共有設定の典型的な落とし穴、SharePoint Advanced Managementなど公式の仕組みとライセンス要件、権限の棚卸し5ステップと是正の優先順位を解説します。","2026-09-23","M365 Copilot導入","m365-copilot",3,"第3回","K.S.ロジャース株式会社","\u002Fimg\u002Fcontents\u002Fnews\u002Fthumb120.jpg",[18,19,20,21,22],"Microsoft 365 Copilot","情報セキュリティ","SharePoint","AIガバナンス","AX",[24,27,30,33,36],{"q":25,"a":26},"Microsoft 365 Copilotを使うと、社内の情報が外部に漏洩しますか？","企業向けのMicrosoft 365 Copilotでは、プロンプトと応答は自社テナントの契約条件の下で扱われ、基盤モデルの学習にも使われません。実務上のリスクは外部流出よりも、SharePointなどの共有設定が広すぎるために、社内の見えてはいけない人の回答に資料が出てくることです。",{"q":28,"a":29},"Copilotに特定のSharePointサイトを参照させない方法はありますか？","SharePoint Advanced ManagementのRestricted Content Discovery（制限付きコンテンツ検出）で、指定したサイトを組織全体の検索とCopilotの検出対象から外せます。ただし権限は変わらず、あくまで権限を直すまでの一時的な措置です。以前使われていたRestricted SharePoint Searchは、2026年7月31日から新規の有効化ができなくなっています。",{"q":31,"a":32},"SharePoint Advanced Managementを使うには追加費用がかかりますか？","Microsoft Learnでは、組織内で1人以上にCopilotのライセンスが割り当てられていれば、Copilot導入を支えるSharePoint Advanced Managementの機能が使えると説明されています。アプリによるサイト作成の制限など一部の機能は、別途SharePoint Advanced Management Plan 1が必要です。利用できる機能は契約中のプランによって異なるため、管理センターで確認してください。",{"q":34,"a":35},"「すべてのユーザー」リンクを作れないようにできますか？","できます。SharePoint 管理センターの［ポリシー］→［共有］で、SharePoint と OneDrive の外部共有のレベルを「新規および既存のゲスト」以下にすると、「すべてのユーザー」リンクは選べなくなります。変更前に作られた「すべてのユーザー」リンクも機能しなくなりますが、リンク自体は削除されないため、共有レベルを元に戻すと再び使えるようになります。業務で使っている社外共有は、変更前に「特定のユーザー」リンクへ作り直しておきます。",{"q":37,"a":38},"「組織内のユーザー」リンクで共有したファイルは、全社員のCopilotに出てきますか？","リンクを作っただけでは、全社員の検索結果やCopilotの回答には出てきません。リンクを受け取って開いた人などに限られます。一方、サイトやフォルダーの権限に「外部ユーザー以外のすべてのユーザー」を付けた場合は全社員が閲覧可能になり、Copilotの参照範囲にも入ります。",{"type":40,"children":41,"toc":1637},"root",[42,61,66,79,100,139,146,151,225,238,243,249,261,266,290,302,330,335,340,475,482,487,507,519,525,538,543,549,569,574,708,721,727,749,784,796,802,823,829,834,850,856,868,896,908,914,934,939,962,967,973,992,1013,1040,1045,1069,1074,1080,1092,1097,1120,1125,1131,1143,1148,1153,1184,1190,1195,1223,1235,1241,1260,1275,1374,1395,1400,1405,1410,1500,1520,1525,1537,1558,1564,1569,1582,1587],{"type":43,"tag":44,"props":45,"children":46},"element","p",{},[47,50,59],{"type":48,"value":49},"text","※ Microsoft 365 Copilot は、2026年8月から「Microsoft Copilot」に名称が変わりました（Copilot Chat は「Microsoft Copilot Chat」）。移行期間中は旧名称も併用されているため、本記事では広く使われている「Microsoft 365 Copilot」の表記で統一しています（出典：",{"type":43,"tag":51,"props":52,"children":56},"a",{"href":53,"rel":54},"https:\u002F\u002Flearn.microsoft.com\u002Fja-jp\u002Fcopilot\u002Fmicrosoft-365\u002Fmicrosoft-365-copilot-privacy",[55],"nofollow",[57],{"type":48,"value":58},"Microsoft Learn「Microsoft Copilot のデータ、プライバシー、セキュリティ」",{"type":48,"value":60},"）。",{"type":43,"tag":44,"props":62,"children":63},{},[64],{"type":48,"value":65},"「Copilot を入れたら、社内の機密情報が漏れるのではないか」——Microsoft 365 Copilot の導入を検討する会社で、経営層や法務から必ず出てくる懸念です。",{"type":43,"tag":44,"props":67,"children":68},{},[69,71,77],{"type":48,"value":70},"この懸念は半分正しく、半分は的を外しています。企業向けの Copilot は、入力した内容が AI の学習に使われたり、他社に流れたりする仕組みではありません。その意味での「外部への情報漏洩」を心配しすぎる必要はありません。一方で、Copilot を入れた直後に実際に起きやすいのは、",{"type":43,"tag":72,"props":73,"children":74},"strong",{},[75],{"type":48,"value":76},"社内の、見えてはいけない人に資料が見える",{"type":48,"value":78},"という事故です。役員会の資料、給与テーブル、人事評価——これらが、権限上は全社員が開ける場所に置かれたままになっていると、Copilot は正しくそれを見つけて回答に使います。",{"type":43,"tag":44,"props":80,"children":81},{},[82,84,90,92,98],{"type":48,"value":83},"本記事はシリーズ第3回です。",{"type":43,"tag":51,"props":85,"children":87},{"href":86},"\u002Farticles\u002Fcopilot-data-okiba-box-sharepoint\u002F",[88],{"type":48,"value":89},"第2回（前編）",{"type":48,"value":91},"で「Copilot の参照範囲は質問した本人の権限」と整理し、",{"type":43,"tag":51,"props":93,"children":95},{"href":94},"\u002Farticles\u002Fcopilot-mail-chat-ikou-checklist\u002F",[96],{"type":48,"value":97},"第2回（後編）",{"type":48,"value":99},"の導入前チェックリストで『「組織内の全員」に共有されたままの資料がないか』を確認項目に挙げました。今回はその中身として、SharePoint・OneDrive・Teams の共有設定をどう棚卸しし、どう是正するかを扱います。",{"type":43,"tag":101,"props":102,"children":103},"blockquote",{},[104,112],{"type":43,"tag":44,"props":105,"children":106},{},[107],{"type":43,"tag":72,"props":108,"children":109},{},[110],{"type":48,"value":111},"この記事の要点",{"type":43,"tag":113,"props":114,"children":115},"ul",{},[116,129,134],{"type":43,"tag":117,"props":118,"children":119},"li",{},[120,122,127],{"type":48,"value":121},"Microsoft 365 Copilot の情報漏洩リスクの中心は、外部への流出ではなく、広すぎる共有設定によって",{"type":43,"tag":72,"props":123,"children":124},{},[125],{"type":48,"value":126},"社内で見えすぎる",{"type":48,"value":128},"ことです。Copilot は権限を広げませんが、広すぎた権限を見つけやすくします",{"type":43,"tag":117,"props":130,"children":131},{},[132],{"type":48,"value":133},"棚卸しは、①守る情報を決める → ②既定の共有設定を確認する → ③広く見える場所を洗い出す → ④所有者に見直しを依頼する → ⑤是正して再発を防ぐ、の5ステップで進めます",{"type":43,"tag":117,"props":135,"children":136},{},[137],{"type":48,"value":138},"Copilot のライセンスが1人以上に割り当てられていれば、SharePoint Advanced Management の権限レポートや一時的にサイトを Copilot から隠す機能が使えます。一時措置と恒久対策を混同しないことが大切です",{"type":43,"tag":140,"props":141,"children":143},"h2",{"id":142},"microsoft-365-copilotの情報漏洩リスクとは-外に漏れるより社内で見えすぎる",[144],{"type":48,"value":145},"Microsoft 365 Copilotの情報漏洩リスクとは ― 「外に漏れる」より「社内で見えすぎる」",{"type":43,"tag":44,"props":147,"children":148},{},[149],{"type":48,"value":150},"Copilot の情報漏洩リスクを考えるときは、まず2種類を分けます。",{"type":43,"tag":152,"props":153,"children":154},"table",{},[155,179],{"type":43,"tag":156,"props":157,"children":158},"thead",{},[159],{"type":43,"tag":160,"props":161,"children":162},"tr",{},[163,169,174],{"type":43,"tag":164,"props":165,"children":166},"th",{},[167],{"type":48,"value":168},"リスクの種類",{"type":43,"tag":164,"props":170,"children":171},{},[172],{"type":48,"value":173},"内容",{"type":43,"tag":164,"props":175,"children":176},{},[177],{"type":48,"value":178},"Copilot での実態",{"type":43,"tag":180,"props":181,"children":182},"tbody",{},[183,202],{"type":43,"tag":160,"props":184,"children":185},{},[186,192,197],{"type":43,"tag":187,"props":188,"children":189},"td",{},[190],{"type":48,"value":191},"外部への流出",{"type":43,"tag":187,"props":193,"children":194},{},[195],{"type":48,"value":196},"入力した情報が AI 事業者や他社に渡る、学習に使われる",{"type":43,"tag":187,"props":198,"children":199},{},[200],{"type":48,"value":201},"企業向けの Copilot では、プロンプトと応答はテナントの契約条件の下で扱われ、基盤モデルの学習に使われない（エンタープライズデータ保護）",{"type":43,"tag":160,"props":203,"children":204},{},[205,210,215],{"type":43,"tag":187,"props":206,"children":207},{},[208],{"type":48,"value":209},"社内での過剰な露出",{"type":43,"tag":187,"props":211,"children":212},{},[213],{"type":48,"value":214},"権限上は見えるが、本来見るべきでない人の回答に資料が出てくる",{"type":43,"tag":187,"props":216,"children":217},{},[218,223],{"type":43,"tag":72,"props":219,"children":220},{},[221],{"type":48,"value":222},"これが実務上の主なリスク",{"type":48,"value":224},"。原因は Copilot ではなく、既存の共有設定",{"type":43,"tag":44,"props":226,"children":227},{},[228,230,236],{"type":48,"value":229},"外部への流出については、",{"type":43,"tag":51,"props":231,"children":233},{"href":232},"\u002Farticles\u002Fcopilot-shanai-kitei-edp\u002F",[234],{"type":48,"value":235},"特別編：その社内規則、Microsoft 365 Copilotを禁止していますか？",{"type":48,"value":237},"で、エンタープライズデータ保護（EDP）の保護範囲を整理しました。本記事が扱うのは、もう一方の「社内での過剰な露出」、英語で oversharing（過剰共有）と呼ばれる問題です。",{"type":43,"tag":44,"props":239,"children":240},{},[241],{"type":48,"value":242},"なお、個人アカウントで使う無償の生成 AI サービスに業務データを貼り付けるケースは、Copilot とは別の、文字どおりの外部流出リスクです。こちらは利用ルールの問題として第5回（ガイドライン）で扱います。",{"type":43,"tag":140,"props":244,"children":246},{"id":245},"なぜcopilotで過剰共有が表に出るのか",[247],{"type":48,"value":248},"なぜCopilotで過剰共有が表に出るのか",{"type":43,"tag":44,"props":250,"children":251},{},[252,254,259],{"type":48,"value":253},"SharePoint のアクセス権の多くは、何年も前に誰かが「とりあえず全員に見えるように」設定したまま残っています。それでも今まで事故にならなかったのは、",{"type":43,"tag":72,"props":255,"children":256},{},[257],{"type":48,"value":258},"場所を知らない人はたどり着かなかった",{"type":48,"value":260},"からです。深いフォルダーの奥にある古い資料を、わざわざ探しに行く社員はいません。",{"type":43,"tag":44,"props":262,"children":263},{},[264],{"type":48,"value":265},"Copilot は、この「見つけにくさ」に頼った状態を終わらせます。",{"type":43,"tag":267,"props":268,"children":269},"picture",{},[270,272,280,281],{"type":48,"value":271},"\n  ",{"type":43,"tag":273,"props":274,"children":279},"source",{"media":275,"srcSet":276,"width":277,"height":278},"(max-width: 768px)","\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen\u002Fmitsukeyasusa-sp.svg",420,590,[],{"type":48,"value":271},{"type":43,"tag":282,"props":283,"children":289},"img",{"src":284,"alt":285,"width":286,"height":287,"loading":288},"\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen\u002Fmitsukeyasusa.svg","Copilot導入前は、全社共有の奥にある給与テーブルは場所を知らなければ開かれなかった。導入後は、権限が同じでも質問すれば回答の根拠として見つかる",800,384,"lazy",[],{"type":43,"tag":44,"props":291,"children":292},{},[293,295,300],{"type":48,"value":294},"Copilot は、質問した本人が閲覧権限を持つ情報の中から、質問に関係する資料を探して回答に使います。権限そのものは1つも変わっていません。変わったのは、",{"type":43,"tag":72,"props":296,"children":297},{},[298],{"type":48,"value":299},"権限の範囲にある資料が、質問するだけで見つかるようになった",{"type":48,"value":301},"ことです。",{"type":43,"tag":44,"props":303,"children":304},{},[305,307,312,314,321,323,329],{"type":48,"value":306},"だからこそ、Copilot の情報漏洩対策は「Copilot の設定」ではなく、",{"type":43,"tag":72,"props":308,"children":309},{},[310],{"type":48,"value":311},"既存の権限の棚卸し",{"type":48,"value":313},"が本体になります。公開事例でも、三井化学は全社データの棚卸しとアクセス権限の再確認による過剰共有対策を先に行ってから利用を広げ（出典：",{"type":43,"tag":51,"props":315,"children":318},{"href":316,"rel":317},"https:\u002F\u002Fwww.microsoft.com\u002Fja-jp\u002Fcustomers\u002Fstory\u002F26949-mitsui-chemicals-microsoft-365-copilot",[55],[319],{"type":48,"value":320},"Microsoft 公式事例",{"type":48,"value":322},"）、日本製鉄は以前から SharePoint Online の権限設計を整えていたことで、既存の権限のまま Copilot を使い始められたとされています（出典：",{"type":43,"tag":51,"props":324,"children":327},{"href":325,"rel":326},"https:\u002F\u002Fwww.microsoft.com\u002Fja-jp\u002Fcustomers\u002Fstory\u002F23624-nippon-steel-corporation-microsoft-365-copilot",[55],[328],{"type":48,"value":320},{"type":48,"value":60},{"type":43,"tag":140,"props":331,"children":333},{"id":332},"見えすぎを生む6つの共有パターン",[334],{"type":48,"value":332},{"type":43,"tag":44,"props":336,"children":337},{},[338],{"type":48,"value":339},"非IT企業の SharePoint・OneDrive・Teams で、過剰共有の原因になりやすいのは次の6つです。",{"type":43,"tag":152,"props":341,"children":342},{},[343,364],{"type":43,"tag":156,"props":344,"children":345},{},[346],{"type":43,"tag":160,"props":347,"children":348},{},[349,354,359],{"type":43,"tag":164,"props":350,"children":351},{},[352],{"type":48,"value":353},"パターン",{"type":43,"tag":164,"props":355,"children":356},{},[357],{"type":48,"value":358},"何が起きているか",{"type":43,"tag":164,"props":360,"children":361},{},[362],{"type":48,"value":363},"Copilot への影響",{"type":43,"tag":180,"props":365,"children":366},{},[367,385,403,421,439,457],{"type":43,"tag":160,"props":368,"children":369},{},[370,375,380],{"type":43,"tag":187,"props":371,"children":372},{},[373],{"type":48,"value":374},"① 「外部ユーザー以外のすべてのユーザー」への権限付与",{"type":43,"tag":187,"props":376,"children":377},{},[378],{"type":48,"value":379},"サイトやフォルダーの権限に、社内の全員を含む特別なグループ（EEEU）が付いている",{"type":43,"tag":187,"props":381,"children":382},{},[383],{"type":48,"value":384},"全社員の Copilot の参照範囲に入る",{"type":43,"tag":160,"props":386,"children":387},{},[388,393,398],{"type":43,"tag":187,"props":389,"children":390},{},[391],{"type":48,"value":392},"② 公開（パブリック）チーム・公開サイト",{"type":43,"tag":187,"props":394,"children":395},{},[396],{"type":48,"value":397},"部門のチームが「パブリック」のまま作られている",{"type":43,"tag":187,"props":399,"children":400},{},[401],{"type":48,"value":402},"誰でも参加でき、参加した人にはファイルが見える",{"type":43,"tag":160,"props":404,"children":405},{},[406,411,416],{"type":43,"tag":187,"props":407,"children":408},{},[409],{"type":48,"value":410},"③ 権限の継承の崩れ",{"type":43,"tag":187,"props":412,"children":413},{},[414],{"type":48,"value":415},"親サイトとは別に、フォルダーやファイル単位で個別の権限が付いている",{"type":43,"tag":187,"props":417,"children":418},{},[419],{"type":48,"value":420},"どこで誰に見えているのかが追えなくなる",{"type":43,"tag":160,"props":422,"children":423},{},[424,429,434],{"type":43,"tag":187,"props":425,"children":426},{},[427],{"type":48,"value":428},"④ 共有リンクの広い配布",{"type":43,"tag":187,"props":430,"children":431},{},[432],{"type":48,"value":433},"「特定のユーザー」リンクを大人数に送る、チームのチャネルにリンクを貼る",{"type":43,"tag":187,"props":435,"children":436},{},[437],{"type":48,"value":438},"リンクで権限を得た人の参照範囲に入る",{"type":43,"tag":160,"props":440,"children":441},{},[442,447,452],{"type":43,"tag":187,"props":443,"children":444},{},[445],{"type":48,"value":446},"⑤ 所有者不在のサイト",{"type":43,"tag":187,"props":448,"children":449},{},[450],{"type":48,"value":451},"作成者の退職・異動で、誰が管理しているのか分からない",{"type":43,"tag":187,"props":453,"children":454},{},[455],{"type":48,"value":456},"権限の見直しを依頼する相手がいない",{"type":43,"tag":160,"props":458,"children":459},{},[460,465,470],{"type":43,"tag":187,"props":461,"children":462},{},[463],{"type":48,"value":464},"⑥ 退職者・異動者の権限の残り",{"type":43,"tag":187,"props":466,"children":467},{},[468],{"type":48,"value":469},"異動前の部署のサイトのメンバーのまま",{"type":43,"tag":187,"props":471,"children":472},{},[473],{"type":48,"value":474},"異動先の業務と関係ない資料が参照範囲に残る",{"type":43,"tag":476,"props":477,"children":479},"h3",{"id":478},"組織内のユーザーリンクの誤解",[480],{"type":48,"value":481},"「組織内のユーザー」リンクの誤解",{"type":43,"tag":44,"props":483,"children":484},{},[485],{"type":48,"value":486},"よく誤解されるのが、共有リンクの種類です。SharePoint と OneDrive の共有リンクには「すべてのユーザー」「組織内のユーザー」「特定のユーザー」の3種類があります。",{"type":43,"tag":44,"props":488,"children":489},{},[490,492,497,499,506],{"type":48,"value":491},"Microsoft のドキュメントでは、",{"type":43,"tag":72,"props":493,"children":494},{},[495],{"type":48,"value":496},"「組織内のユーザー」リンクを作っただけでは、そのファイルが全社員の検索結果や Copilot に出てくることはない",{"type":48,"value":498},"と説明されています。アクセスできるのはリンクを受け取って開いた人で、SharePoint・OneDrive の画面や Outlook のメール、Teams のチャットで個人宛てに送った場合は、受信者（最大100人）に対して自動的にアクセスが有効になります。一方、「特定のユーザー」リンクは、リンクに追加されたユーザーやセキュリティグループのメンバーの検索結果と Copilot から見えるようになります（出典：",{"type":43,"tag":51,"props":500,"children":503},{"href":501,"rel":502},"https:\u002F\u002Flearn.microsoft.com\u002Fja-jp\u002Fsharepoint\u002Fshareable-links-anyone-specific-people-organization",[55],[504],{"type":48,"value":505},"Microsoft Learn「OneDrive と SharePoint での共有可能なリンクのしくみ」",{"type":48,"value":60},{"type":43,"tag":44,"props":508,"children":509},{},[510,512,517],{"type":48,"value":511},"つまり、全社員に見える状態を作る最大の原因は、リンクではなく、①の「",{"type":43,"tag":72,"props":513,"children":514},{},[515],{"type":48,"value":516},"外部ユーザー以外のすべてのユーザー",{"type":48,"value":518},"」をサイトやフォルダーの権限に付ける操作や、②の公開チームです。棚卸しでは、ここから確認します。",{"type":43,"tag":476,"props":520,"children":522},{"id":521},"teamsの公開チーム",[523],{"type":48,"value":524},"Teamsの公開チーム",{"type":43,"tag":44,"props":526,"children":527},{},[528,530,537],{"type":48,"value":529},"Teams のチームを作るとき、プライバシーを「パブリック」にすると、そのチームは組織のすべてのユーザーのチーム一覧に表示され、所有者の承認なしに参加できます。「プライベート」にすると、所有者が追加しない限り、チームを検索したり参加したりできなくなります（出典：",{"type":43,"tag":51,"props":531,"children":534},{"href":532,"rel":533},"https:\u002F\u002Fsupport.microsoft.com\u002Fja-jp\u002Foffice\u002Fmicrosoft-teams%E3%81%A7%E3%83%91%E3%83%96%E3%83%AA%E3%83%83%E3%82%AF-%E3%83%81%E3%83%BC%E3%83%A0%E3%82%92%E3%83%97%E3%83%A9%E3%82%A4%E3%83%99%E3%83%BC%E3%83%88%E3%81%AB%E3%81%99%E3%82%8B-6f324fbc-6599-4612-8daa-ff5d35a746bf",[55],[535],{"type":48,"value":536},"Microsoft サポート「Microsoft Teams でパブリック チームをプライベートにする」",{"type":48,"value":60},{"type":43,"tag":44,"props":539,"children":540},{},[541],{"type":48,"value":542},"Teams のチームで共有したファイルの実体は SharePoint のサイトにあるため、公開チームのファイルは、参加した人の Copilot の参照範囲に入ります。経営企画や人事のチームがパブリックのまま運用されていないかは、最初に確認すべき項目です。",{"type":43,"tag":140,"props":544,"children":546},{"id":545},"copilot導入向けのmicrosoft公式の仕組みとライセンス要件",[547],{"type":48,"value":548},"Copilot導入向けのMicrosoft公式の仕組みとライセンス要件",{"type":43,"tag":44,"props":550,"children":551},{},[552,554,559,561,568],{"type":48,"value":553},"Microsoft は、Copilot 導入に向けた過剰共有対策の仕組みを用意しています。中心になるのが ",{"type":43,"tag":72,"props":555,"children":556},{},[557],{"type":48,"value":558},"SharePoint Advanced Management",{"type":48,"value":560},"（SAM）です。SAM は、SharePoint と OneDrive のコンテンツの広がりやライフサイクルを管理し、過剰共有を防ぐための管理機能群です（出典：",{"type":43,"tag":51,"props":562,"children":565},{"href":563,"rel":564},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fadvanced-management",[55],[566],{"type":48,"value":567},"Microsoft Learn「SharePoint Advanced Management overview」",{"type":48,"value":60},{"type":43,"tag":44,"props":570,"children":571},{},[572],{"type":48,"value":573},"非IT企業の棚卸しで特に役立つのは、次の機能です。",{"type":43,"tag":152,"props":575,"children":576},{},[577,598],{"type":43,"tag":156,"props":578,"children":579},{},[580],{"type":43,"tag":160,"props":581,"children":582},{},[583,588,593],{"type":43,"tag":164,"props":584,"children":585},{},[586],{"type":48,"value":587},"機能",{"type":43,"tag":164,"props":589,"children":590},{},[591],{"type":48,"value":592},"できること",{"type":43,"tag":164,"props":594,"children":595},{},[596],{"type":48,"value":597},"位置づけ",{"type":43,"tag":180,"props":599,"children":600},{},[601,619,636,654,672,690],{"type":43,"tag":160,"props":602,"children":603},{},[604,609,614],{"type":43,"tag":187,"props":605,"children":606},{},[607],{"type":48,"value":608},"データアクセスガバナンス（DAG）レポート",{"type":43,"tag":187,"props":610,"children":611},{},[612],{"type":48,"value":613},"サイトのアクセス許可の全体像、「外部ユーザー以外のすべてのユーザー」への共有、共有リンクが多く作られたサイトなどを一覧化する",{"type":43,"tag":187,"props":615,"children":616},{},[617],{"type":48,"value":618},"洗い出し",{"type":43,"tag":160,"props":620,"children":621},{},[622,627,632],{"type":43,"tag":187,"props":623,"children":624},{},[625],{"type":48,"value":626},"コンテンツ管理評価（Content Management Assessment）",{"type":43,"tag":187,"props":628,"children":629},{},[630],{"type":48,"value":631},"過剰共有の可能性、所有者不在や非アクティブなサイトなどをまとめて評価し、推奨事項を示す",{"type":43,"tag":187,"props":633,"children":634},{},[635],{"type":48,"value":618},{"type":43,"tag":160,"props":637,"children":638},{},[639,644,649],{"type":43,"tag":187,"props":640,"children":641},{},[642],{"type":48,"value":643},"サイトアクセスレビュー",{"type":43,"tag":187,"props":645,"children":646},{},[647],{"type":48,"value":648},"過剰共有が疑われるサイトの見直しを、サイト所有者に依頼する",{"type":43,"tag":187,"props":650,"children":651},{},[652],{"type":48,"value":653},"是正（現場に委ねる）",{"type":43,"tag":160,"props":655,"children":656},{},[657,662,667],{"type":43,"tag":187,"props":658,"children":659},{},[660],{"type":48,"value":661},"制限付きアクセス制御（Restricted Access Control）",{"type":43,"tag":187,"props":663,"children":664},{},[665],{"type":48,"value":666},"サイトにアクセスできる人を、指定したグループのメンバーに限定する",{"type":43,"tag":187,"props":668,"children":669},{},[670],{"type":48,"value":671},"是正（強制）",{"type":43,"tag":160,"props":673,"children":674},{},[675,680,685],{"type":43,"tag":187,"props":676,"children":677},{},[678],{"type":48,"value":679},"制限付きコンテンツ検出（Restricted Content Discovery）",{"type":43,"tag":187,"props":681,"children":682},{},[683],{"type":48,"value":684},"指定したサイトを、組織全体の検索と Copilot の検出対象から外す。権限は変わらない",{"type":43,"tag":187,"props":686,"children":687},{},[688],{"type":48,"value":689},"一時措置",{"type":43,"tag":160,"props":691,"children":692},{},[693,698,703],{"type":43,"tag":187,"props":694,"children":695},{},[696],{"type":48,"value":697},"サイト所有権ポリシー・非アクティブサイトポリシー",{"type":43,"tag":187,"props":699,"children":700},{},[701],{"type":48,"value":702},"所有者が足りないサイトや、使われていないサイトを検出して通知する",{"type":43,"tag":187,"props":704,"children":705},{},[706],{"type":48,"value":707},"再発防止",{"type":43,"tag":44,"props":709,"children":710},{},[711,713,720],{"type":48,"value":712},"DAG レポートのうち、アクティビティレポートは直近28日間に作られた共有リンクや全社共有を追跡するもので、Microsoft はスナップショットレポートで全体像を押さえたうえでアクティビティレポートを併用し、前者は四半期ごと、後者は毎月実行することを勧めています（出典：",{"type":43,"tag":51,"props":714,"children":717},{"href":715,"rel":716},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fdata-access-governance-reports",[55],[718],{"type":48,"value":719},"Microsoft Learn「Data access governance reports」",{"type":48,"value":60},{"type":43,"tag":476,"props":722,"children":724},{"id":723},"ライセンス要件2026年9月時点",[725],{"type":48,"value":726},"ライセンス要件（2026年9月時点）",{"type":43,"tag":44,"props":728,"children":729},{},[730,732,739,741,748],{"type":48,"value":731},"SAM の機能をどのライセンスで使えるかは、次のように説明されています（出典：",{"type":43,"tag":51,"props":733,"children":736},{"href":734,"rel":735},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fsharepoint-advanced-management-prerequisites",[55],[737],{"type":48,"value":738},"Microsoft Learn「Prerequisites for SharePoint Advanced Management」",{"type":48,"value":740},"、",{"type":43,"tag":51,"props":742,"children":745},{"href":743,"rel":744},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fsharepoint-advanced-management-features-copilot-license",[55],[746],{"type":48,"value":747},"「SharePoint Advanced Management features in Microsoft Copilot licenses」",{"type":48,"value":60},{"type":43,"tag":113,"props":750,"children":751},{},[752,762,774,779],{"type":43,"tag":117,"props":753,"children":754},{},[755,760],{"type":43,"tag":72,"props":756,"children":757},{},[758],{"type":48,"value":759},"組織内で1人以上のユーザーに Copilot のライセンスが割り当てられている",{"type":48,"value":761},"場合、SharePoint 管理者は Copilot 導入を支える SAM の機能を使えます。割り当てを受けるユーザーが SharePoint 管理者である必要はありません。上の表の機能はこれに含まれ、対象は企業（enterprise）と一般法人（business）の商用顧客とされています",{"type":43,"tag":117,"props":763,"children":764},{},[765,767,772],{"type":48,"value":766},"Copilot のライセンスがない場合は、",{"type":43,"tag":72,"props":768,"children":769},{},[770],{"type":48,"value":771},"SharePoint Advanced Management Plan 1",{"type":48,"value":773}," のアドオンを購入する方法があります",{"type":43,"tag":117,"props":775,"children":776},{},[777],{"type":48,"value":778},"アプリによるサイト作成の制限（Restricted site creation by apps）は Copilot のライセンスには含まれず、Plan 1 が必要です",{"type":43,"tag":117,"props":780,"children":781},{},[782],{"type":48,"value":783},"秘密度ラベルに関する DAG レポートは、E5 などの上位ライセンスが前提です",{"type":43,"tag":44,"props":785,"children":786},{},[787,789,794],{"type":48,"value":788},"一方で、同じ前提条件のページでは、基本となるサブスクリプションとして Office 365 E3・E5、Microsoft 365 E1・E3・E5 などが列挙されています。Microsoft 365 Business Standard・Business Premium に Copilot Business を追加している会社は、",{"type":43,"tag":72,"props":790,"children":791},{},[792],{"type":48,"value":793},"SharePoint 管理センターの［高度な管理］で実際に使える機能を確認してから",{"type":48,"value":795},"計画を立ててください。",{"type":43,"tag":476,"props":797,"children":799},{"id":798},"restricted-sharepoint-searchは新規に使えない",[800],{"type":48,"value":801},"Restricted SharePoint Searchは新規に使えない",{"type":43,"tag":44,"props":803,"children":804},{},[805,807,812,814,821],{"type":48,"value":806},"Copilot 導入の初期によく紹介されていた ",{"type":43,"tag":72,"props":808,"children":809},{},[810],{"type":48,"value":811},"Restricted SharePoint Search",{"type":48,"value":813},"（検索対象を最大100サイトの許可リストに絞る設定）は、提供終了に向かっています。2026年7月31日から新規の有効化はできなくなり、Microsoft は代わりに Restricted Content Discovery などを使うよう案内しています（出典：",{"type":43,"tag":51,"props":815,"children":818},{"href":816,"rel":817},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Frestricted-sharepoint-search",[55],[819],{"type":48,"value":820},"Microsoft Learn「Restricted SharePoint Search」",{"type":48,"value":822},"）。古い解説記事を参考にする場合は注意してください。",{"type":43,"tag":140,"props":824,"children":826},{"id":825},"sharepoint権限の棚卸し-5つのステップ",[827],{"type":48,"value":828},"SharePoint権限の棚卸し ― 5つのステップ",{"type":43,"tag":44,"props":830,"children":831},{},[832],{"type":48,"value":833},"ここからが実務の手順です。棚卸しは次の5ステップで進めます。",{"type":43,"tag":267,"props":835,"children":836},{},[837,838,843,844],{"type":48,"value":271},{"type":43,"tag":273,"props":839,"children":842},{"media":275,"srcSet":840,"width":277,"height":841},"\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen\u002Ftanaoroshi-5steps-sp.svg",580,[],{"type":48,"value":271},{"type":43,"tag":282,"props":845,"children":849},{"src":846,"alt":847,"width":286,"height":848,"loading":288},"\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen\u002Ftanaoroshi-5steps.svg","SharePoint・OneDrive・Teamsの権限棚卸しの5ステップ：守る情報を決める、既定の共有設定を確認、広く見える場所を洗い出す、所有者に見直しを依頼、是正して再発を防ぐ",262,[],{"type":43,"tag":476,"props":851,"children":853},{"id":852},"ステップ1守る情報を決める",[854],{"type":48,"value":855},"ステップ1：守る情報を決める",{"type":43,"tag":44,"props":857,"children":858},{},[859,861,866],{"type":48,"value":860},"最初にやるのは、ツールを開くことではなく、",{"type":43,"tag":72,"props":862,"children":863},{},[864],{"type":48,"value":865},"「誰に見えたら困るか」が明確な情報を一覧にする",{"type":48,"value":867},"ことです。非IT企業で優先度が高いのは、次のような情報です。",{"type":43,"tag":113,"props":869,"children":870},{},[871,876,881,886,891],{"type":43,"tag":117,"props":872,"children":873},{},[874],{"type":48,"value":875},"人事・給与（給与テーブル、人事評価、採用選考、懲戒）",{"type":43,"tag":117,"props":877,"children":878},{},[879],{"type":48,"value":880},"役員会・経営会議の資料、M&A や組織再編の検討資料",{"type":43,"tag":117,"props":882,"children":883},{},[884],{"type":48,"value":885},"顧客や取引先の個人情報、契約条件",{"type":43,"tag":117,"props":887,"children":888},{},[889],{"type":48,"value":890},"見積の原価や利益率、取引先ごとの価格",{"type":43,"tag":117,"props":892,"children":893},{},[894],{"type":48,"value":895},"社員の健康情報、ハラスメント相談の記録",{"type":43,"tag":44,"props":897,"children":898},{},[899,901,906],{"type":48,"value":900},"この一覧は、経営と総務・人事で30分話せば作れます。棚卸しの範囲を「全サイト」ではなく",{"type":43,"tag":72,"props":902,"children":903},{},[904],{"type":48,"value":905},"この情報が置かれていそうな場所",{"type":48,"value":907},"から始めることで、作業量を現実的な大きさにできます。",{"type":43,"tag":476,"props":909,"children":911},{"id":910},"ステップ2既定の共有設定を確認する",[912],{"type":48,"value":913},"ステップ2：既定の共有設定を確認する",{"type":43,"tag":44,"props":915,"children":916},{},[917,919,924,926,933],{"type":48,"value":918},"次に、SharePoint 管理センターの［ポリシー］→［共有］で、組織全体の共有設定を確認します。Microsoft は、",{"type":43,"tag":72,"props":920,"children":921},{},[922],{"type":48,"value":923},"SharePoint の共有設定は既定で最も許容度の高い設定になっている",{"type":48,"value":925},"と説明し、Copilot に備えて見直すことを勧めています（出典：",{"type":43,"tag":51,"props":927,"children":930},{"href":928,"rel":929},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fcopilot\u002Fget-ready-copilot-sharepoint-advanced-management",[55],[931],{"type":48,"value":932},"Microsoft Learn「Get ready for Microsoft Copilot with SharePoint Advanced Management」",{"type":48,"value":60},{"type":43,"tag":44,"props":935,"children":936},{},[937],{"type":48,"value":938},"確認するのは次の点です。",{"type":43,"tag":113,"props":940,"children":941},{},[942,947,957],{"type":43,"tag":117,"props":943,"children":944},{},[945],{"type":48,"value":946},"外部共有をどこまで許可しているか（「すべてのユーザー」リンクを許可しているか）",{"type":43,"tag":117,"props":948,"children":949},{},[950,952],{"type":48,"value":951},"ユーザーが共有するときに",{"type":43,"tag":72,"props":953,"children":954},{},[955],{"type":48,"value":956},"既定で選ばれるリンクの種類",{"type":43,"tag":117,"props":958,"children":959},{},[960],{"type":48,"value":961},"リンクの有効期限や、既定の権限（表示のみか編集可か）",{"type":43,"tag":44,"props":963,"children":964},{},[965],{"type":48,"value":966},"この設定は SAM がなくても、どのプランでも見直せます。",{"type":43,"tag":476,"props":968,"children":970},{"id":969},"ステップ2の補足すべてのユーザーリンクは作れないようにしておく",[971],{"type":48,"value":972},"ステップ2の補足：「すべてのユーザー」リンクは作れないようにしておく",{"type":43,"tag":44,"props":974,"children":975},{},[976,978,983,985,990],{"type":48,"value":977},"K.S.Rogers では、",{"type":43,"tag":72,"props":979,"children":980},{},[981],{"type":48,"value":982},"「すべてのユーザー」リンクを作れない設定にしておく",{"type":48,"value":984},"ことをおすすめしています。「すべてのユーザー」リンクは、受け取った人がサインインせずに開けるリンクで、転送されれば社外の誰でも開けます。誰が開いたかも記録に残りません（出典：",{"type":43,"tag":51,"props":986,"children":988},{"href":501,"rel":987},[55],[989],{"type":48,"value":505},{"type":48,"value":991},"）。これは Copilot の参照範囲とは別の、文字どおりの外部への流出経路です。",{"type":43,"tag":44,"props":993,"children":994},{},[995,997,1002,1004,1011],{"type":48,"value":996},"設定は、SharePoint 管理センターの［ポリシー］→［共有］で、SharePoint と OneDrive の外部共有のレベルを「",{"type":43,"tag":72,"props":998,"children":999},{},[1000],{"type":48,"value":1001},"新規および既存のゲスト",{"type":48,"value":1003},"」以下にするだけです。「すべてのユーザー」リンクは、このレベルが一番上の「すべてのユーザー」のときにしか選べないため、これで社員の共有画面から選択肢が消えます。社外と共有するときは、相手を指定し、サインインか確認コードで本人確認をする「特定のユーザー」リンクを使う運用になります（出典：",{"type":43,"tag":51,"props":1005,"children":1008},{"href":1006,"rel":1007},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fturn-external-sharing-on-or-off",[55],[1009],{"type":48,"value":1010},"Microsoft Learn「Manage sharing settings for SharePoint and OneDrive」",{"type":48,"value":1012},"）。OneDrive は既定で「すべてのユーザー」になっているため、SharePoint と OneDrive の両方を下げます。",{"type":43,"tag":44,"props":1014,"children":1015},{},[1016,1018,1023,1025,1030,1032,1039],{"type":48,"value":1017},"気になるのは、",{"type":43,"tag":72,"props":1019,"children":1020},{},[1021],{"type":48,"value":1022},"設定を変える前に作られた「すべてのユーザー」リンク",{"type":48,"value":1024},"の扱いです。Microsoft Learn では、組織の共有レベルを下げると、それより広い共有は使えなくなり、共有済みのリンクも機能しなくなると説明されています。ゲストのアクセスも、通常は変更から1時間以内に失われます。ただし、リンクそのものが削除されるわけではありません。",{"type":43,"tag":72,"props":1026,"children":1027},{},[1028],{"type":48,"value":1029},"共有レベルを元に戻すと、以前のリンクは再び機能します",{"type":48,"value":1031},"（出典：",{"type":43,"tag":51,"props":1033,"children":1036},{"href":1034,"rel":1035},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fchange-external-sharing-site",[55],[1037],{"type":48,"value":1038},"Microsoft Learn「Change the sharing settings for a site」",{"type":48,"value":60},{"type":43,"tag":44,"props":1041,"children":1042},{},[1043],{"type":48,"value":1044},"そのため、次の順番で進めると安全です。",{"type":43,"tag":1046,"props":1047,"children":1048},"ol",{},[1049,1054,1059,1064],{"type":43,"tag":117,"props":1050,"children":1051},{},[1052],{"type":48,"value":1053},"変更の前に、どのファイルが「すべてのユーザー」リンクで社外に共有されているかを確認する（SAM があれば DAG レポートの共有リンクのレポートで一覧にできます）",{"type":43,"tag":117,"props":1055,"children":1056},{},[1057],{"type":48,"value":1058},"取引先との受け渡しなど、業務で使っている共有は、相手を指定した「特定のユーザー」リンクに作り直す",{"type":43,"tag":117,"props":1060,"children":1061},{},[1062],{"type":48,"value":1063},"共有レベルを「新規および既存のゲスト」以下に下げ、社内に周知する",{"type":43,"tag":117,"props":1065,"children":1066},{},[1067],{"type":48,"value":1068},"後から「一時的に戻す」ことがないように運用を決める。戻すと、止めたはずの古いリンクがまとめて復活します",{"type":43,"tag":44,"props":1070,"children":1071},{},[1072],{"type":48,"value":1073},"なお、「すべてのユーザー」リンクを作っただけでは、そのファイルが Copilot の回答に出てくることはありません。この設定は Copilot の見えすぎ対策ではなく、Copilot 導入を機に外部への流出経路も閉じておく、という位置づけです。",{"type":43,"tag":476,"props":1075,"children":1077},{"id":1076},"ステップ3広く見える場所を洗い出す",[1078],{"type":48,"value":1079},"ステップ3：広く見える場所を洗い出す",{"type":43,"tag":44,"props":1081,"children":1082},{},[1083,1085,1090],{"type":48,"value":1084},"SAM を使える場合は、DAG レポートの",{"type":43,"tag":72,"props":1086,"children":1087},{},[1088],{"type":48,"value":1089},"サイトのアクセス許可レポート",{"type":48,"value":1091},"で、全体像を把握します。このレポートは、利用者が数千人規模のサイト、外部ゲストを含むサイト、「外部ユーザー以外のすべてのユーザー」に権限があるサイトなど、アクセスが広いサイトを特定するためのものです。続いて、全社共有のアクティビティレポートと共有リンクのレポートで、直近の動きを確認します。",{"type":43,"tag":44,"props":1093,"children":1094},{},[1095],{"type":48,"value":1096},"SAM を使えない場合は、次の手作業で代替します。",{"type":43,"tag":1046,"props":1098,"children":1099},{},[1100,1105,1110,1115],{"type":43,"tag":117,"props":1101,"children":1102},{},[1103],{"type":48,"value":1104},"SharePoint 管理センターの［アクティブなサイト］でサイトの一覧を書き出す",{"type":43,"tag":117,"props":1106,"children":1107},{},[1108],{"type":48,"value":1109},"ステップ1の情報が置かれていそうなサイトに印をつける",{"type":43,"tag":117,"props":1111,"children":1112},{},[1113],{"type":48,"value":1114},"印をつけたサイトごとに、サイトのアクセス許可と、所有者・メンバー・訪問者の構成を確認する",{"type":43,"tag":117,"props":1116,"children":1117},{},[1118],{"type":48,"value":1119},"Teams 管理センターで、チームのプライバシー（パブリック／プライベート）を一覧で確認する",{"type":43,"tag":44,"props":1121,"children":1122},{},[1123],{"type":48,"value":1124},"手作業でも、対象を絞っていれば数十サイトの確認で済むことが多いのが実感です。",{"type":43,"tag":476,"props":1126,"children":1128},{"id":1127},"ステップ4所有者に見直しを依頼する",[1129],{"type":48,"value":1130},"ステップ4：所有者に見直しを依頼する",{"type":43,"tag":44,"props":1132,"children":1133},{},[1134,1136,1141],{"type":48,"value":1135},"見つかった問題を、情報システム担当が1つずつ直すのは現実的ではありません。そのサイトに何が置かれていて、誰に見えるべきかを知っているのは",{"type":43,"tag":72,"props":1137,"children":1138},{},[1139],{"type":48,"value":1140},"サイトの所有者",{"type":48,"value":1142},"（現場）だからです。",{"type":43,"tag":44,"props":1144,"children":1145},{},[1146],{"type":48,"value":1147},"SAM のサイトアクセスレビューを使うと、DAG レポートで見つかったサイトの所有者に見直しを依頼し、所有者がメンバーやリンクを整理できます。SAM がない場合も、「このサイトのメンバー一覧と共有リンクを確認し、○日までに不要なものを外してください」という依頼の型を作っておけば同じ運用ができます。",{"type":43,"tag":44,"props":1149,"children":1150},{},[1151],{"type":48,"value":1152},"依頼するときは、次の3つを必ずセットにします。",{"type":43,"tag":113,"props":1154,"children":1155},{},[1156,1166,1176],{"type":43,"tag":117,"props":1157,"children":1158},{},[1159,1164],{"type":43,"tag":72,"props":1160,"children":1161},{},[1162],{"type":48,"value":1163},"なぜ見直すのか",{"type":48,"value":1165},"（Copilot の参照範囲は本人の権限であること）",{"type":43,"tag":117,"props":1167,"children":1168},{},[1169,1174],{"type":43,"tag":72,"props":1170,"children":1171},{},[1172],{"type":48,"value":1173},"何を見ればよいか",{"type":48,"value":1175},"（メンバー、「外部ユーザー以外のすべてのユーザー」、共有リンク、個別に権限が付いたフォルダー）",{"type":43,"tag":117,"props":1177,"children":1178},{},[1179],{"type":43,"tag":72,"props":1180,"children":1181},{},[1182],{"type":48,"value":1183},"いつまでに、どう報告するか",{"type":43,"tag":476,"props":1185,"children":1187},{"id":1186},"ステップ5是正して再発を防ぐ",[1188],{"type":48,"value":1189},"ステップ5：是正して再発を防ぐ",{"type":43,"tag":44,"props":1191,"children":1192},{},[1193],{"type":48,"value":1194},"是正の具体的な操作は、次のとおりです。",{"type":43,"tag":113,"props":1196,"children":1197},{},[1198,1203,1208,1213,1218],{"type":43,"tag":117,"props":1199,"children":1200},{},[1201],{"type":48,"value":1202},"「外部ユーザー以外のすべてのユーザー」の権限を外し、必要な部署のグループに置き換える",{"type":43,"tag":117,"props":1204,"children":1205},{},[1206],{"type":48,"value":1207},"公開チームをプライベートに変える",{"type":43,"tag":117,"props":1209,"children":1210},{},[1211],{"type":48,"value":1212},"個別に付いたフォルダー単位の権限を整理し、サイト単位の継承に戻す（どうしても分けたい情報は、別のサイトに移す）",{"type":43,"tag":117,"props":1214,"children":1215},{},[1216],{"type":48,"value":1217},"所有者不在のサイトに、新しい所有者を2名以上割り当てる",{"type":43,"tag":117,"props":1219,"children":1220},{},[1221],{"type":48,"value":1222},"使われていないサイトはアーカイブや削除を検討する",{"type":43,"tag":44,"props":1224,"children":1225},{},[1226,1228,1233],{"type":48,"value":1227},"そのうえで、",{"type":43,"tag":72,"props":1229,"children":1230},{},[1231],{"type":48,"value":1232},"同じ状態に戻らない仕組み",{"type":48,"value":1234},"を入れます。共有リンクの既定値の変更、チーム作成時の既定をプライベートにする運用、サイト所有権ポリシーや非アクティブサイトポリシーによる定期的な通知、四半期ごとのレポート確認などです。",{"type":43,"tag":140,"props":1236,"children":1238},{"id":1237},"是正の優先順位-どこから直すか",[1239],{"type":48,"value":1240},"是正の優先順位 ― どこから直すか",{"type":43,"tag":44,"props":1242,"children":1243},{},[1244,1246,1251,1253,1258],{"type":48,"value":1245},"棚卸しで見つかった問題を、全部同時に直す必要はありません。",{"type":43,"tag":72,"props":1247,"children":1248},{},[1249],{"type":48,"value":1250},"情報の機微度",{"type":48,"value":1252},"と",{"type":43,"tag":72,"props":1254,"children":1255},{},[1256],{"type":48,"value":1257},"見える範囲の広さ",{"type":48,"value":1259},"の2軸で、優先順位をつけます。",{"type":43,"tag":267,"props":1261,"children":1262},{},[1263,1264,1268,1269],{"type":48,"value":271},{"type":43,"tag":273,"props":1265,"children":1267},{"media":275,"srcSet":1266,"width":277,"height":841},"\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen\u002Fzesei-yusenjun-sp.svg",[],{"type":48,"value":271},{"type":43,"tag":282,"props":1270,"children":1274},{"src":1271,"alt":1272,"width":286,"height":1273,"loading":288},"\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen\u002Fzesei-yusenjun.svg","権限是正の優先順位：機微度が高く全社に見える情報は今すぐ止めて直す、機微度が高く限定は所有者と見直す、機微度が低く全社は既定値で広がりを止める、低く限定は定期確認",364,[],{"type":43,"tag":152,"props":1276,"children":1277},{},[1278,1299],{"type":43,"tag":156,"props":1279,"children":1280},{},[1281],{"type":43,"tag":160,"props":1282,"children":1283},{},[1284,1289,1294],{"type":43,"tag":164,"props":1285,"children":1286},{},[1287],{"type":48,"value":1288},"優先度",{"type":43,"tag":164,"props":1290,"children":1291},{},[1292],{"type":48,"value":1293},"状態",{"type":43,"tag":164,"props":1295,"children":1296},{},[1297],{"type":48,"value":1298},"対応",{"type":43,"tag":180,"props":1300,"children":1301},{},[1302,1320,1338,1356],{"type":43,"tag":160,"props":1303,"children":1304},{},[1305,1310,1315],{"type":43,"tag":187,"props":1306,"children":1307},{},[1308],{"type":48,"value":1309},"最優先",{"type":43,"tag":187,"props":1311,"children":1312},{},[1313],{"type":48,"value":1314},"機微度が高い情報が、全社に見える",{"type":43,"tag":187,"props":1316,"children":1317},{},[1318],{"type":48,"value":1319},"権限をすぐに是正する。是正に時間がかかるなら、その間は Restricted Content Discovery などで Copilot の検出対象から一時的に外す",{"type":43,"tag":160,"props":1321,"children":1322},{},[1323,1328,1333],{"type":43,"tag":187,"props":1324,"children":1325},{},[1326],{"type":48,"value":1327},"高",{"type":43,"tag":187,"props":1329,"children":1330},{},[1331],{"type":48,"value":1332},"機微度が高い情報が、限られた範囲に見える",{"type":43,"tag":187,"props":1334,"children":1335},{},[1336],{"type":48,"value":1337},"所有者と一緒に、その範囲が妥当かを見直す",{"type":43,"tag":160,"props":1339,"children":1340},{},[1341,1346,1351],{"type":43,"tag":187,"props":1342,"children":1343},{},[1344],{"type":48,"value":1345},"中",{"type":43,"tag":187,"props":1347,"children":1348},{},[1349],{"type":48,"value":1350},"機微度が低い情報が、全社に見える",{"type":43,"tag":187,"props":1352,"children":1353},{},[1354],{"type":48,"value":1355},"個別に直すより、共有の既定値やチーム作成のルールを変えて広がりを止める",{"type":43,"tag":160,"props":1357,"children":1358},{},[1359,1364,1369],{"type":43,"tag":187,"props":1360,"children":1361},{},[1362],{"type":48,"value":1363},"低",{"type":43,"tag":187,"props":1365,"children":1366},{},[1367],{"type":48,"value":1368},"機微度が低い情報が、限られた範囲に見える",{"type":43,"tag":187,"props":1370,"children":1371},{},[1372],{"type":48,"value":1373},"定期レビューで確認する",{"type":43,"tag":44,"props":1375,"children":1376},{},[1377,1379,1384,1386,1393],{"type":48,"value":1378},"ここで注意したいのが、",{"type":43,"tag":72,"props":1380,"children":1381},{},[1382],{"type":48,"value":1383},"一時措置と恒久対策を混同しない",{"type":48,"value":1385},"ことです。Restricted Content Discovery は、サイトを Copilot と組織全体の検索から見つからなくする機能ですが、権限は変わりません。Microsoft も、権限や所有者の見直しが終わるまでの一時的なガバナンス制御と位置づけ、使いすぎると Copilot が参照できる情報が減り、回答の質に影響すると注意しています（出典：",{"type":43,"tag":51,"props":1387,"children":1390},{"href":1388,"rel":1389},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Frestricted-content-discovery",[55],[1391],{"type":48,"value":1392},"Microsoft Learn「Restrict discovery of SharePoint sites and content」",{"type":48,"value":1394},"）。サイトの URL を知っている人は、引き続きファイルを開けます。",{"type":43,"tag":44,"props":1396,"children":1397},{},[1398],{"type":48,"value":1399},"「Copilot から隠したので対応完了」とせず、隠した理由になった権限を直し、直したら制限を外す——この順番を守ります。",{"type":43,"tag":140,"props":1401,"children":1403},{"id":1402},"導入前にできる最低限の対策",[1404],{"type":48,"value":1402},{"type":43,"tag":44,"props":1406,"children":1407},{},[1408],{"type":48,"value":1409},"時間も人手も限られる中で、Copilot の有償ライセンスを配る前に最低限やっておきたいことを、チェックリストにまとめます。",{"type":43,"tag":113,"props":1411,"children":1414},{"className":1412},[1413],"contains-task-list",[1415,1428,1437,1446,1455,1464,1473,1482,1491],{"type":43,"tag":117,"props":1416,"children":1419},{"className":1417},[1418],"task-list-item",[1420,1426],{"type":43,"tag":1421,"props":1422,"children":1425},"input",{"disabled":1423,"type":1424},true,"checkbox",[],{"type":48,"value":1427}," 「誰に見えたら困るか」が明確な情報の一覧を、経営と総務・人事で作った",{"type":43,"tag":117,"props":1429,"children":1431},{"className":1430},[1418],[1432,1435],{"type":43,"tag":1421,"props":1433,"children":1434},{"disabled":1423,"type":1424},[],{"type":48,"value":1436}," SharePoint 管理センターで、外部共有の範囲と既定のリンクの種類を確認・変更した",{"type":43,"tag":117,"props":1438,"children":1440},{"className":1439},[1418],[1441,1444],{"type":43,"tag":1421,"props":1442,"children":1443},{"disabled":1423,"type":1424},[],{"type":48,"value":1445}," 「すべてのユーザー」リンクを作れない設定（共有レベルを「新規および既存のゲスト」以下）にした。変更前に、業務で使っている共有を「特定のユーザー」リンクに作り直した",{"type":43,"tag":117,"props":1447,"children":1449},{"className":1448},[1418],[1450,1453],{"type":43,"tag":1421,"props":1451,"children":1452},{"disabled":1423,"type":1424},[],{"type":48,"value":1454}," 人事・給与・役員会などのサイトやチームに、「外部ユーザー以外のすべてのユーザー」の権限が付いていないことを確認した",{"type":43,"tag":117,"props":1456,"children":1458},{"className":1457},[1418],[1459,1462],{"type":43,"tag":1421,"props":1460,"children":1461},{"disabled":1423,"type":1424},[],{"type":48,"value":1463}," 経営企画・人事・経理などのチームが、パブリックになっていないことを確認した",{"type":43,"tag":117,"props":1465,"children":1467},{"className":1466},[1418],[1468,1471],{"type":43,"tag":1421,"props":1469,"children":1470},{"disabled":1423,"type":1424},[],{"type":48,"value":1472}," 所有者がいないサイト、退職者が所有者のサイトに、新しい所有者を割り当てた",{"type":43,"tag":117,"props":1474,"children":1476},{"className":1475},[1418],[1477,1480],{"type":43,"tag":1421,"props":1478,"children":1479},{"disabled":1423,"type":1424},[],{"type":48,"value":1481}," 異動・退職のときに、Microsoft 365 のグループやサイトのメンバーから外す手順を決めた",{"type":43,"tag":117,"props":1483,"children":1485},{"className":1484},[1418],[1486,1489],{"type":43,"tag":1421,"props":1487,"children":1488},{"disabled":1423,"type":1424},[],{"type":48,"value":1490}," 最初に Copilot を配る部門のユーザーについて、アクセスできるサイトを確認した（SAM があれば「ユーザーのサイトのアクセス許可レポート」を使う）",{"type":43,"tag":117,"props":1492,"children":1494},{"className":1493},[1418],[1495,1498],{"type":43,"tag":1421,"props":1496,"children":1497},{"disabled":1423,"type":1424},[],{"type":48,"value":1499}," 是正に時間がかかる機微なサイトの扱い（一時的に Copilot から外すか、パイロットの範囲から外すか）を決めた",{"type":43,"tag":44,"props":1501,"children":1502},{},[1503,1505,1511,1513,1518],{"type":48,"value":1504},"特に最後から2つ目は効果が大きい対策です。",{"type":43,"tag":51,"props":1506,"children":1508},{"href":1507},"\u002Farticles\u002Fm365-copilot-donyu-roadmap\u002F",[1509],{"type":48,"value":1510},"第1回",{"type":48,"value":1512},"で紹介した「二層構成」で有償席を一部の部門に絞るなら、",{"type":43,"tag":72,"props":1514,"children":1515},{},[1516],{"type":48,"value":1517},"その部門の人が見える範囲",{"type":48,"value":1519},"だけを先に確認すれば、パイロットを安全に始められます。全社の棚卸しは、パイロットと並行して進められます。",{"type":43,"tag":140,"props":1521,"children":1523},{"id":1522},"権限の棚卸しの次にやること",[1524],{"type":48,"value":1522},{"type":43,"tag":44,"props":1526,"children":1527},{},[1528,1530,1535],{"type":48,"value":1529},"権限の棚卸しは、「誰がどの場所を見られるか」を整える作業です。さらに「このファイルは役員だけ」「この資料は社外に送らない」といった",{"type":43,"tag":72,"props":1531,"children":1532},{},[1533],{"type":48,"value":1534},"ファイル単位の扱い",{"type":48,"value":1536},"まで決める仕組みが、秘密度ラベルと DLP（データ損失防止）です。",{"type":43,"tag":44,"props":1538,"children":1539},{},[1540,1542,1548,1550,1556],{"type":48,"value":1541},"ただし、一般的な中小企業の多くには、秘密度ラベルと DLP までは必要ありません。",{"type":43,"tag":51,"props":1543,"children":1545},{"href":1544},"\u002Farticles\u002Fcopilot-security-settei-chusho\u002F",[1546],{"type":48,"value":1547},"第4回（前編）：中小企業に秘密度ラベルとDLPは必要か",{"type":48,"value":1549},"では、必要かどうかの判定チェックと、必要ない会社がやるべきことを整理します。必要な会社に向けた段階的な導入は、",{"type":43,"tag":51,"props":1551,"children":1553},{"href":1552},"\u002Farticles\u002Fcopilot-sensitivity-label-dlp\u002F",[1554],{"type":48,"value":1555},"第4回（後編）",{"type":48,"value":1557},"で扱います。",{"type":43,"tag":140,"props":1559,"children":1561},{"id":1560},"ksrogers-の支援",[1562],{"type":48,"value":1563},"K.S.Rogers の支援",{"type":43,"tag":44,"props":1565,"children":1566},{},[1567],{"type":48,"value":1568},"K.S.Rogers では、Microsoft 365 Copilot の導入に向けた権限の棚卸しと是正を、非IT企業の体制に合わせて伴走しています。守る情報の洗い出しを経営・総務の方と一緒に行うところから、SharePoint 管理センターでの共有設定の見直し、DAG レポートの読み解き、サイト所有者への見直し依頼の型づくり、パイロット部門の参照範囲の確認までを支援します。",{"type":43,"tag":44,"props":1570,"children":1571},{},[1572,1574,1580],{"type":48,"value":1573},"「専任の情報システム担当がいないので、どこまでやれば導入してよいのか判断できない」という段階からご相談いただけます。ご相談は",{"type":43,"tag":51,"props":1575,"children":1577},{"href":1576},"\u002Fcontact\u002F",[1578],{"type":48,"value":1579},"お問い合わせ",{"type":48,"value":1581},"からどうぞ。",{"type":43,"tag":140,"props":1583,"children":1585},{"id":1584},"まとめ",[1586],{"type":48,"value":1584},{"type":43,"tag":113,"props":1588,"children":1589},{},[1590,1602,1614,1626],{"type":43,"tag":117,"props":1591,"children":1592},{},[1593,1595,1600],{"type":48,"value":1594},"Copilot の情報漏洩リスクの中心は外部流出ではなく、",{"type":43,"tag":72,"props":1596,"children":1597},{},[1598],{"type":48,"value":1599},"広すぎる共有設定による社内での見えすぎ",{"type":48,"value":1601},"です。Copilot は権限を広げず、広すぎた権限を見つけやすくします",{"type":43,"tag":117,"props":1603,"children":1604},{},[1605,1607,1612],{"type":48,"value":1606},"全社員に見える状態の主な原因は、「外部ユーザー以外のすべてのユーザー」への権限付与と",{"type":43,"tag":72,"props":1608,"children":1609},{},[1610],{"type":48,"value":1611},"公開チーム",{"type":48,"value":1613},"です。「組織内のユーザー」リンクを作っただけでは全社員には見えません",{"type":43,"tag":117,"props":1615,"children":1616},{},[1617,1619,1624],{"type":48,"value":1618},"棚卸しは",{"type":43,"tag":72,"props":1620,"children":1621},{},[1622],{"type":48,"value":1623},"守る情報を決める",{"type":48,"value":1625},"ところから始め、既定値の確認、洗い出し、所有者レビュー、是正と再発防止の5ステップで進めます",{"type":43,"tag":117,"props":1627,"children":1628},{},[1629,1631,1635],{"type":48,"value":1630},"SharePoint Advanced Management は Copilot のライセンスで使える機能が多い一方、プランによって差があります。Restricted Content Discovery は",{"type":43,"tag":72,"props":1632,"children":1633},{},[1634],{"type":48,"value":689},{"type":48,"value":1636},"であり、権限の是正と混同しないことが大切です",{"title":7,"searchDepth":1638,"depth":1638,"links":1639},2,[1640,1641,1642,1646,1650,1658,1659,1660,1661,1662],{"id":142,"depth":1638,"text":145},{"id":245,"depth":1638,"text":248},{"id":332,"depth":1638,"text":332,"children":1643},[1644,1645],{"id":478,"depth":13,"text":481},{"id":521,"depth":13,"text":524},{"id":545,"depth":1638,"text":548,"children":1647},[1648,1649],{"id":723,"depth":13,"text":726},{"id":798,"depth":13,"text":801},{"id":825,"depth":1638,"text":828,"children":1651},[1652,1653,1654,1655,1656,1657],{"id":852,"depth":13,"text":855},{"id":910,"depth":13,"text":913},{"id":969,"depth":13,"text":972},{"id":1076,"depth":13,"text":1079},{"id":1127,"depth":13,"text":1130},{"id":1186,"depth":13,"text":1189},{"id":1237,"depth":1638,"text":1240},{"id":1402,"depth":1638,"text":1402},{"id":1522,"depth":1638,"text":1522},{"id":1560,"depth":1638,"text":1563},{"id":1584,"depth":1638,"text":1584},"markdown","content:articles:copilot-joho-rouei-sharepoint-kengen.md","content","articles\u002Fcopilot-joho-rouei-sharepoint-kengen.md","articles\u002Fcopilot-joho-rouei-sharepoint-kengen","md",[1670,1674,1679,1682,1686,1691],{"_path":1671,"title":1672,"seriesNo":1673,"seriesLabel":1510},"\u002Farticles\u002Fm365-copilot-donyu-roadmap","非IT企業のMicrosoft 365 Copilot導入ロードマップ｜ライセンスを配る前に決めるべきこと",1,{"_path":1675,"title":1676,"seriesNo":1677,"seriesLabel":1678},"\u002Farticles\u002Fcopilot-shanai-kitei-edp","その社内規則、Microsoft 365 Copilotを禁止していますか？｜「外部AIへの機微情報投入禁止」とEDPの読み合わせ方",1.5,"特別編",{"_path":1680,"title":1681,"seriesNo":1638,"seriesLabel":89},"\u002Farticles\u002Fcopilot-data-okiba-box-sharepoint","Microsoft 365 Copilotは社内のメールやチャットを「学習」するのか｜データの置き場所とBox・SharePoint・OneDriveの判断",{"_path":1683,"title":1684,"seriesNo":1685,"seriesLabel":97},"\u002Farticles\u002Fcopilot-mail-chat-ikou-checklist","Exchange Online移行の注意点とLINE WORKSからTeamsへの判断｜Microsoft 365 Copilot導入前チェックリスト",2.5,{"_path":1687,"title":1688,"seriesNo":1689,"seriesLabel":1690},"\u002Farticles\u002Fm365-copilot-iranai-google-hikaku","Microsoft 365 Copilotはいらない？無料版との違い・料金と「Googleより高い」への答え方",2.8,"番外編",{"_path":4,"title":8,"seriesNo":13,"seriesLabel":14},1790095863941]