{
	"id": "7eca151f-32ba-4f61-bac7-a18bb481767f",
	"created_at": "2026-04-06T00:06:35.12447Z",
	"updated_at": "2026-04-10T03:20:01.05165Z",
	"deleted_at": null,
	"sha1_hash": "81a5f6e0d3db048791541e6bcd8a4d7fd4b9b45b",
	"title": "Manage sharing settings for SharePoint and OneDrive in Microsoft 365 - SharePoint in Microsoft 365",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 177795,
	"plain_text": "Manage sharing settings for SharePoint and OneDrive in Microsoft\r\n365 - SharePoint in Microsoft 365\r\nBy maggierui\r\nArchived: 2026-04-05 21:18:09 UTC\r\nAs a SharePoint Administrator in Microsoft 365, you can change the organization-level sharing settings for\r\nSharePoint and OneDrive. These settings control sharing at the organization level, and you can then configure\r\nmore restrictive settings for specific sites if needed.\r\nFor end-to-end guidance around how to configure guest sharing in Microsoft 365, see:\r\nSet up secure collaboration with Microsoft 365\r\nCollaborate with guests on a document\r\nCollaborate with guests in a site\r\nCollaborate with guests in a team\r\nTo change the sharing settings for a site after you've set the organization-level sharing settings, see Change sharing\r\nsettings for a site. To learn how to change the external sharing setting for a specific user's OneDrive, see Change\r\nthe external sharing setting for a user's OneDrive.\r\nTip\r\nAs a companion to this article, see our Microsoft Sharepoint setup guide to review best practices and understand\r\nthe deployment process from site creation to data migration. Features include protection labels, data loss\r\nprevention policies, and file activity auditing. For a customized experience based on your environment, you can\r\naccess the Set up SharePoint in Microsoft 365 guide in the Microsoft 365 admin center.\r\nThere are two external sharing models used in SharePoint and OneDrive:\r\nSharePoint external authentication\r\nSharePoint and OneDrive integration with Microsoft Entra B2B\r\nWhen using Microsoft Entra B2B integration, Microsoft Entra external collaboration settings, such as guest invite\r\nsettings and collaboration restrictions apply.\r\nThe following table shows the differences between the two sharing models.\r\nSharing method Files and folders Sites\r\nSharePoint external authentication\r\n(Microsoft Entra B2B integration not\r\nenabled)\r\nNo guest account created*\r\nMicrosoft Entra settings don't\r\napply\r\nN/A\r\n(Microsoft Entra B2B always\r\nused)\r\nhttps://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off\r\nPage 1 of 7\n\nSharing method Files and folders Sites\r\nMicrosoft Entra B2B integration\r\nenabled\r\nGuest account always created\r\nMicrosoft Entra settings apply\r\nGuest account always created\r\nMicrosoft Entra settings apply\r\n*A guest account may already exist from another sharing workflow, such as sharing a team, in which case it's used\r\nfor sharing.\r\nFor information on how to enable or disable Microsoft Entra B2B integration, see SharePoint and OneDrive\r\nintegration with Microsoft Entra B2B.\r\nThis video shows how the settings on the Sharing page in the SharePoint admin center affect the sharing options\r\navailable to users.\r\n1. Go to Sharing in the SharePoint admin center, and sign in with an account that has admin permissions for\r\nyour organization.\r\n2. Under External sharing, specify your sharing level for SharePoint and OneDrive. The default level for\r\nboth is Anyone.\r\nNote\r\nThe SharePoint setting applies to all site types, including those connected to Microsoft 365 groups and teams.\r\nGroups and Teams guest sharing settings also affect connected SharePoint sites.\r\nThe OneDrive setting can be more restrictive than the SharePoint setting, but not more permissive.\r\nhttps://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off\r\nPage 2 of 7\n\nThis setting is for your organization overall. Each site has its own sharing setting that you can set independently,\r\nthough it must be at the same or more restrictive setting as the organization. See Change the external sharing\r\nsetting for a site for more information.\r\nImportant\r\nMicrosoft Entra external collaboration settings determine who can invite guests in your organization for site\r\nsharing (always) and file and folder sharing (if Azure B2B collaboration is enabled). Be sure to review Microsoft\r\nEntra guest access settings as part of your SharePoint and OneDrive sharing setup.\r\nSelect this\r\noption:\r\nIf you want to:\r\nAnyone\r\nAllow users to share files and folders by using links that let anyone who has the link\r\naccess the files or folders without authenticating. This setting also allows users to share\r\nsites with new and existing guests who authenticate. If you select this setting, you can\r\nrestrict the Anyone links so that they must expire within a specific number of days, or so\r\nthat they can give only View permission.\r\nFile requests requires that OneDrive be set to Anyone and edit permissions for Anyone\r\nlinks be enabled. OneDrive settings other than Anyone disable file requests.\r\nSee Best practices for sharing files and folders with unauthenticated users for more\r\ninformation.\r\nNew and\r\nexisting guests\r\nRequire people who have received invitations to sign in with their work or school\r\naccount (if their organization uses Microsoft 365) or a Microsoft account, or to provide a\r\ncode to verify their identity. Users can share with guests already in your organization's\r\ndirectory, and they can send invitations to people who will be added to the directory if\r\nthey sign in. For more info about verification codes, see Secure external sharing in\r\nSharePoint\r\nExisting guests\r\nAllow sharing only with guests who are already in your directory. These guests may exist\r\nin your directory because they previously accepted sharing invitations or because they\r\nwere manually added, such as through Azure B2B collaboration. (To see the guests in\r\nyour organization, go to the Guests page in the Microsoft 365 admin center).\r\nOnly people in\r\nyour\r\norganization\r\nTurn off external sharing.\r\nNote\r\nIf you turn off external sharing for your organization and later turn it back on, guests who previously had access\r\nregain it. If you know that external sharing was previously turned on and in use for specific sites and you don't\r\nhttps://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off\r\nPage 3 of 7\n\nwant guests to regain access, first turn off external sharing for those specific sites.\r\nIf you restrict or turn off external sharing, guests typically lose access within one hour of the change.\r\nThis is useful if you want to limit sharing with particular partners, or help prevent sharing with people at certain\r\norganizations. The organization-level setting on this page affects all SharePoint sites and each user's OneDrive. To\r\nuse this setting, list the domains (maximum of 5000) in the box, using the format domain.com. To list multiple\r\ndomains, press Enter after adding each domain.\r\nYou can also limit external sharing by domain by using the Set-SPOTenant Microsoft PowerShell cmdlet with -\r\nSharingDomainRestrictionMode and either -SharingAllowedDomainList or -SharingBlockedDomainList. For info\r\nabout limiting external sharing by domain at the site level, see Restricted domains sharing.\r\nAllowed or blocked domains in Microsoft Entra ID also affect SharePoint and OneDrive site sharing (always) and\r\nfile and folder sharing (if Azure B2B collaboration is enabled). Be sure to review Microsoft Entra collaboration\r\nrestrictions as part of your SharePoint and OneDrive sharing setup.\r\nFor info about this setting, see Manage security groups.\r\nBy default, guests must have full control permission to share items externally.\r\nIf your administrator has set an expiration time for guest access, each guest that you invite to the site or with\r\nwhom you share individual files and folders will be given access for a certain number of days. For more\r\ninformation visit, Manage guest expiration for a site\r\nIf people who use a verification code have selected to \"stay signed in\" in the browser, they must prove they can\r\nstill access the account they used to redeem the sharing invitation by entering a code sent to that account. If Azure\r\nB2B collaboration is enabled, the Microsoft Entra setting is used instead of this setting.\r\nChoose the option you want to show by default when a user creates a sharing link.\r\nNote\r\nThis setting specifies the default for your organization, but you can choose a different default link type for a site.\r\nhttps://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off\r\nPage 4 of 7\n\nSpecific people - This option is most restrictive and impedes broad internal sharing. If you allow external\r\nsharing, this option lets users share with specific people outside the organization.\r\nOnly people in your organization - If links are forwarded, they'll work for anyone in the organization.\r\nThis option is best if your organization shares broadly internally and rarely shares externally.\r\nAnyone with the link - This option is available only if your external sharing setting is set to Anyone.\r\nForwarded links work internally or externally, but you can't track who has access to shared items or who\r\nhas accessed shared items. This is best for friction-free sharing if most files and folders in SharePoint and\r\nOneDrive aren't sensitive.\r\nImportant\r\nIf you select Anyone with the link, but the site or OneDrive is set to allow sharing only with guests who\r\nsign in or provide a verification code, the default link is Only people in your organization. Users need to\r\nchange the link type to Specific people to share files and folders in the site or OneDrive externally.\r\nLink expiration - You can require all Anyone links to expire, and specify the maximum number of days allowed.\r\nIf you change the expiration time, existing links will keep their current expiration time if the new setting is longer,\r\nor be updated to the new setting if the new setting is shorter.\r\nLink permissions - You can restrict Anyone links so that they can only provide view permission for files or\r\nfolders.\r\nIf you would like to use the Request Files feature, the link permissions must be set to View, edit, and upload or\r\nView and Upload for folders.\r\nhttps://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off\r\nPage 5 of 7\n\nThis setting lets you control whether the owner of a shared file can see on the file card the people who only view\r\n(and don't edit) the file in OneDrive. The file card appears when users hover over a file name or thumbnail in\r\nOneDrive. The info includes the number of views on the file, the number of people who viewed it, and the list of\r\npeople who viewed it. To learn more about the file card, see See files you shared in OneDrive.\r\nNote\r\nThis setting is selected by default. If you clear it, file viewer info is still recorded and available to you to audit as\r\nan admin. OneDrive owners can also still see people who have viewed their shared Office files by opening the\r\nfiles from Office.com or from the Office desktop apps.\r\nThis setting lets you specify whether site owners can allow users who have access to a file, page, or news post to\r\nsee on the file card who has viewed the item.\r\nThis setting is turned on by default at the organization level and off at the site level for existing sites. Viewer\r\ninformation is shown only when the setting is on at both the organization and site level. We recommend that site\r\nowners turn on this feature only on team sites that don't have sensitive information. Learn how site owners can\r\nturn on this feature.\r\nNote\r\nhttps://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off\r\nPage 6 of 7\n\nHistorical data is included when this setting is enabled. Likewise, if the setting is turned off and back on at the\r\norganization level or site level, the views during the off period are included in the history.\r\nUses a shorter link format for sharing files and folders. This may be useful if you have integrations that require a\r\nshorter URL.\r\n If you have technical questions about this topic, you might find it helpful to post them on the SharePoint\r\ndiscussion forum. It's a great resource for finding others who have worked with similar issues or who have\r\nencountered the same situation.\r\nYou can also find help on security and permissions in these YouTube videos from SharePoint community experts.\r\nLimit accidental exposure to files when sharing with guests\r\nCreate a secure guest sharing environment\r\nStop sharing files or folders or change permissions\r\nSource: https://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off\r\nhttps://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off\r\nPage 7 of 7",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off"
	],
	"report_names": [
		"turn-external-sharing-on-or-off"
	],
	"threat_actors": [],
	"ts_created_at": 1775433995,
	"ts_updated_at": 1775791201,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/81a5f6e0d3db048791541e6bcd8a4d7fd4b9b45b.pdf",
		"text": "https://archive.orkl.eu/81a5f6e0d3db048791541e6bcd8a4d7fd4b9b45b.txt",
		"img": "https://archive.orkl.eu/81a5f6e0d3db048791541e6bcd8a4d7fd4b9b45b.jpg"
	}
}