Restricted Content Discovery (RCD)
Common Use Cases
- High-risk sites: keeping sensitive sites out of Copilot and search
- Copilot rollout: reducing exposure while permissions are reviewed
- Executive content: shielding sensitive leadership material
- Pre-cleanup protection: a stopgap before fixing oversharing
- Targeted control: restricting discovery on chosen sites only
- Risk mitigation: limiting accidental surfacing of content
Benefits
- Discovery control: sites stop appearing in tenant search and Copilot
- Access unchanged: direct permissions still work as before
- Targeted: applied per site, not across the whole tenant
- Buys time: review permissions without exposure
- Copilot-friendly: keep rolling out AI while protecting risky sites
- Part of SAM: integrated with governance tooling
How It Works
- Per-site flag: RCD is enabled on specific sites
- Removes from org search: the site stops surfacing tenant-wide
- Hidden from Copilot: content does not appear in Copilot Business Chat
- Direct access remains: permitted users still use the site
- Recent interaction nuance: prior interaction can still surface some results
- Managed by admins: configured through advanced management
Limits and Nuances
- Discovery, not permissions: RCD does not change who can access a site
- Licensing required: a SharePoint Advanced Management feature that applies in tenants with at least one Copilot license
- Not a cleanup substitute: it buys time but does not fix oversharing
- Recent interaction: users who recently interacted may still see results
- Per-site effort: each site is flagged individually
- Tenant search scope: it affects org-wide search and Copilot, not in-site browsing
Common Questions About Restricted Content Discovery (RCD)
What is Restricted Content Discovery?
Restricted Content Discovery, or RCD, is a SharePoint Advanced Management control that stops a specific site from surfacing in organization-wide search and Microsoft 365 Copilot, without changing who has permission to the site. People with direct access can still use the site, but its content no longer appears in tenant-wide search or Copilot Business Chat. It controls discovery, not access.
Does RCD change who can access a site?
No. This is the key point: RCD only affects discovery through organization-wide search and Copilot. It does not alter the site permissions, so everyone who could already reach the site can still open and use it directly. It simply prevents the site content from being surfaced to the broader organization through tenant search and AI.
Why would I use Restricted Content Discovery?
It is mainly used during Copilot rollouts to protect high-risk or sensitive sites while permissions are reviewed. Rather than halting your whole Copilot deployment because a few sites are overshared, you flag those sites with RCD so their content stays out of search and Copilot, then take the time to clean up access. It is a targeted safety valve rather than an all-or-nothing switch.
How is RCD different from Restricted SharePoint Search?
RCD is applied per site to remove specific sites from discovery, while Restricted SharePoint Search is a tenant-wide approach that limits search and Copilot to a curated allow-list of sites. RCD is the scalpel for individual risky sites; Restricted SharePoint Search is the broader, temporary gate for an entire tenant. They address the same concern from opposite directions.
What is required to use RCD?
Restricted Content Discovery is part of SharePoint Advanced Management, so it requires that licensing, and it applies in environments where Copilot is in use. Administrators enable it on chosen sites. One nuance to know is that users who recently interacted with a site may still see some results from it, so RCD is best paired with actual permission remediation.
How should RCD fit into a Copilot rollout?
Use it as a stopgap, not a solution. Greg Zelfond, the consultant behind LookBook 365, recommends flagging high-risk sites with RCD to reduce exposure, then using data access governance reports to find and fix the underlying oversharing. RCD keeps sensitive content out of Copilot in the short term, but the goal is to tighten permissions so the protection is no longer the only thing standing in the way.