AB-900 decision sheets

• SharePoint vs Microsoft 365 vs Entra vs Purview: where a Copilot/SharePoint control actually lives
• AI Administrator vs Global Reader vs Global Administrator: least-privilege role for Copilot governance
• Snapshot vs activity reports: reading SharePoint's data access governance reports
• Declarative vs custom engine agent: which one needs extra hosting, which one can act on its own
• DLP vs Insider Risk vs Communication Compliance vs DLM vs DSPM: which Purview capability applies