Veeam Intelligent ResOps for Microsoft 365

Two ways an AI agent
lets you down

Same tenant, same agent, same instructions. The only variable is whether ResOps has been near the content first. Flip the switch.

VeeamIntelligent ResOps
Not deployedPolicies live
Scenario 01 Context drift Single source of truth

The agent answers from a policy that expired four years ago

Redundant, obsolete and trivial content in a policy library. Nothing is broken, nothing was deleted, and every wrong answer is correctly cited.

SharePoint & OneDrive
Policy Hub. 20 files, five different hotel caps, a cancelled scheme, a dead supplier, “Copy of … FINAL (1)”.
ROT policy
Veeam Intelligent ResOps
Scans both workloads, finds redundant, obsolete and trivial content, and drives archive or delete so one current version survives.
Copilot agent · PolicyBot
Grounds on whatever the library still contains. It cannot tell which of two versions won.
What a colleague is toldWhat a colleague is told

Can I get an allowance for using my own laptop?

Yes. You can opt into the BYOD scheme and receive a £450 annual allowance… complete form IT-BYOD-01 and email it to byod@northwindgroup.example.”
Scheme was cancelled in 2021. They will send the email.

Who do I call to book travel, and is there parking at Leeds?

“Contact Travelcorp on 0161 496 0022… do not book directly. Yes, 22 allocated spaces in the basement car park.”
Supplier left in 2022. Office closed in 2022.

Hotel cap in London?

“You can spend up to £150 per night.”
Cited a 2023 policy. Current cap is £180.

Can I get an allowance for using my own laptop?

No. The scheme was withdrawn on 31 December 2021 and is not available. Raise equipment requests in the IT Service Portal.”

Who do I call to book travel, and is there parking at Leeds?

“You do not call anyone. All travel is booked in the Voyager portal. There is no Northwind Leeds office — it closed in June 2022.”

Hotel cap in London?

£180 per night in London, £130 elsewhere. Alcohol is never claimable.” One document cited.

Who does what
ResOps
Applies the ROT policy across SharePoint and OneDrive. Flags duplicates, superseded versions, drafts and stale content, and drives the archive or delete.
Microsoft 365
Holds the content and the version history. Retains the archive out of the agent’s scope.
Copilot
Answers from what is left. Correct by construction, because there is only one answer to find.
Scenario 02 Sensitive disclosure Classified & enforced

The agent discloses a restructure nobody has announced

Identical files on both sides. Nothing removed, nothing moved. Eighteen sensitivity labels are the entire difference.

SharePoint & OneDrive
Ops Team Site. 38 files including rate cards, churn risk, an unannounced restructure.
Classification policy
Veeam Intelligent ResOps
Classifies PII, financial, commercial and custom identifiers at high accuracy, then pushes labels back into Purview, SharePoint and OneDrive.
Purview DLP
Knowledge-level block. Confidential and Restricted are excluded from grounding by policy, not by prompt.
Copilot agent · OpsAssist
Sees the file list either way. Can only read Public and Internal.
What a colleague is toldWhat a colleague is told

What rates do we pay Meridian, and what rebate did we earn?

Full rate card by service, then “the rebate earned was £41,300, payable in Q2 2026.”

Which customers are at risk of leaving?

Named accounts with annual values. “Norsted Energy — threatened to invoke the change of control clause.” “Penrose Manufacturing — renewal at risk, decision due Q2.”

Are any Operations roles being held or cut?

“OPS-06 Duty Manager… may be removed entirely. The Operations roles listed for redundancy are Operations Analyst, Logistics Coordinator.”

What does the Project Atlas proposal say?

“The removal of 12 roles… nothing had been communicated to colleagues and collective consultation had not started.” Then the timeline: consultation opens 6 April, notice issued 18 May 2026.

What rates do we pay Meridian, and what rebate did we earn?

Status green, renewed to Q3 2027, cost per order down 4%. “For the rate card and rebate calculations, contact the Operations Manager or Procurement.”

Which customers are at risk of leaving?

Aggregate only — SMB Ireland 21.3%, SMB North 18.6%. “For named accounts, that information is not available to me.”

Are any Operations roles being held or cut?

“I cannot find any document stating that Operations roles are being held or cut… headcount was stable quarter on quarter.” Routes to the Head of Operations or the People Team.

What does the Project Atlas proposal say?

“The document exists, but the content is not available to me. The only information available is the file name.” Contents blocked; existence is not.

Who does what
ResOps
Runs the classification policy across both workloads, identifies sensitive and custom identifiers, and writes the sensitivity label back into the file.
Purview
Owns the label taxonomy and the DLP policy that turns a label into an enforced block.
Microsoft 365
Inherits and carries the label. It travels with the file if it is copied or mailed.
Copilot
Grounds only on Public and Internal. Still answers process, performance and supplier questions in full.
Say this out loud, it is the honest bit

Ask the agent for a salary, a password or an unannounced acquisition and it declines on both sides of the toggle. That refusal comes from the model’s own priors, not from your governance. It is inconsistent between runs, invisible to audit, and it changes when the model changes.

Every example above is sensitive for a different reason: it is sensitive because of your context. No model has an opinion about your carrier’s rate card, your churn list, or which roles are quietly on hold. That is the gap only classification and enforcement close — and it is the part that is actually your job.

And the toggle protects contents, not existence. On the right-hand side the agent still confirms the restructure document is there, and names it. A label stops anyone reading it. Only taking the file out of the agent’s scope stops anyone knowing it exists.

One thing that has to be true before any of this works

Web search has to be off. With it on — the default — the agent grounds on the open internet as well as SharePoint. In testing it cited a real logistics company’s website and a salary page for it, while its own instructions said not to fill gaps from general knowledge. The instruction field is a request; grounding scope is a setting. Same reason the block above is enforced by policy, not by prompt.