architecture_for SHAREPOINT AI SEARCH PERFORMANCE
engineering
We first map tenant boundaries, permission semantics, content churn and query classes. The production design then separates ingestion, permission projection, retrieval and answer generation so each stage can be benchmarked and degraded independently.
securityauthority
Authorization should be enforced before protected content becomes a usable retrieval candidate. ACL projections need explicit freshness semantics, deny-by-default behavior and tests for group changes, inherited permissions and deleted content.
performancecritical
Measure indexing lag, candidate retrieval latency, reranker latency, end-to-end p50/p95/p99, cache hit rate and quality under representative permission filters.
technologiesvendor
SharePoint · Microsoft Graph · hybrid retrieval · vector search · ACL