“Microsoft Copilot is designed to operate strictly within a user's existing permissions, meaning it can only access data and perform actions that the user is already authorized to access.”