What Your Search Index Still Answers After You Revoke Access
Azure AI Search offers four ways to do document-level access control, and only security filters are generally available today. Whichever one you pick, the index stores its own copy of the permissions, captured the last time an indexer looked. Changes at the source do not reach it on their own: a parent-scope change in SharePoint and any permission change in ADLS Gen2 both need an explicit resync, and until one runs the index keeps answering from what it captured.
Read article