Manufacturers Expanding Microsoft 365 Copilot Should Review Superseded Drawings and Supplier Permissions

New York, NY, Nov. 10, 2026 (GLOBE NEWSWIRE) -- The 2026 Verizon Data Breach Investigations Report tied third parties to 61% of manufacturing breaches and internal data compromise to 81% of them.* Manufacturers expanding Microsoft 365 Copilot should know which engineering and supplier files employees can open and how staff identify the approved drawing because Copilot surfaces content a user is already permitted to access. ESW provides SharePoint content management services that help organizations manage document revisions and access permissions.

"For an engineering team, finding a drawing is only part of the job. Staff also need to know whether it’s the approved revision, and access to older files needs to reflect who still has a legitimate reason to use them," said Russell Kommer, founder and CEO of eSoftware Associates. [DRAFT QUOTE: pending Russell Kommer approval]

Five steps before Copilot expands

1. Mark the approved drawing. Record each drawing’s revision and approval status with version history, content types and metadata, then configure search results so the approved revision stands out.
Check: a part-number search returns the approved drawing and its revision.

2. Retain older revisions under the right access rules. Quality teams and auditors sometimes need historical drawings for legitimate work. Keep those records in an archive library and limit access to the roles that use them.
Check: the retention schedule covers each retained revision, and only authorized roles can reach the archive.

3. Limit discovery during governance reviews. SharePoint Advanced Management offers Restricted Content Discovery, a temporary site-level control that narrows what organization-wide search and Copilot can surface. It leaves permissions untouched: a user can still open a file directly, and Copilot can still summarize one that is already open.
Check: every restricted site has a review end date and an owner who will complete the review.

4. Review supplier and partner permissions. When a supplier contract ends or a product launch wraps, audit guest accounts and shared project sites for access that is no longer in use. Confirm which external users still need engineering, quality and pricing files, and remove the rest.
Check: an owner on each externally shared site can verify the current access list.

5. Review access at project close-out. At a project’s close-out, or when a contract ends, check bid files, change orders and subcontractor pricing. Confirm which owners, architects and subcontractors still need access, and revoke what is no longer justified.
Check: the site owner signs off on who keeps access and removes the rest.

How ESW supports the review

ESW helps organizations configure SharePoint libraries and revision metadata, build SharePoint workflow automation for document approvals in Power Automate, and set role-based permissions and retention rules. That work gives document owners and IT teams a defined process for handling revisions, approvals and access as projects change. 

Founded in 2006, ESW is a 100% U.S.-based Microsoft partner that has served more than 1,500 organizations.

Frequently Asked Questions

Question: Should superseded drawings be deleted before Copilot expands?

Answer: Not necessarily. Quality records, customer requirements and regulatory obligations often mean a firm has to hold onto earlier revisions. Follow the retention schedule that applies, then decide who can reach those files and whether they should appear in everyday search or Copilot results. Moving a drawing into an archive library doesn’t restrict access on its own. The library still needs the right permissions.

Question: Who should own supplier and subcontractor access reviews?

Answer: Give that job to the site owner or program lead who manages the partner relationship, since they can say which guest accounts still serve a business purpose. IT sets the review schedule and pulls access that no longer has authorization.

Question: What should a manufacturer ask a Microsoft partner before Copilot expands?

Answer: Ask how the partner will flag approved revisions in SharePoint, preserve historical drawings, and keep supplier access current as projects and contracts change. Request a walkthrough on one of your own drawings, paired with a live external-sharing example. This shows how your staff would spot the correct revision and how the partner trims outside access that has outlived its purpose.

*Source: Verizon, 2026 Data Breach Investigations Report, Manufacturing snapshot.

About eSoftware Associates (ESW)
ESW builds secure business apps, workflows, portals, and automations across Power Apps, SharePoint, Dataverse, SPFx, Copilot & AI Agents, and Azure. 100% U.S.-based since 2006.

Majed Soufi
Zen Media
pr@zenmedia.com