Hacker News Reader

Employees can already search through everything _they have permission to _

Copilot only has access to whatever the user has access to - it uses the same permissions.

The copilot bots in the article are slightly different from normal copilot so might have elevated permissions but if you are creating a service with access to your data then you should make sure it has the correct restrictions in place - there is nothing special about copilot in this regard.

View on HN

But bots need to be trained on data before use. That the bot will 'soak in'. And have acces to the specific set of data allowed during the training. Which then will be given out at the time being used. Either those bots have access to the very same set of data at training time as the user will have at using time, or there will be trouble (not working with right set of data and miss things, or giving too much not having privilege to normally). Right? Jut trying to understand.

So then each user need to use a specific bot trained precisely to the level of acces the user is having. And need proper matching mechanism the right bot to the right user without glitch. Right? Switching bots at changing privilege levels, deserting previously used one for a - for the user - brand new one. Like this?

Reply on news.ycombinator.com