{"id":44419,"date":"2024-08-20T11:11:55","date_gmt":"2024-08-20T09:11:55","guid":{"rendered":"https:\/\/ways.se\/?p=44419"},"modified":"2024-08-20T11:15:02","modified_gmt":"2024-08-20T09:15:02","slug":"gain-control-over-external-sharing-in-microsoft-365","status":"publish","type":"post","link":"https:\/\/ways.se\/en\/articles\/gain-control-over-external-sharing-in-microsoft-365\/","title":{"rendered":"Gain control over external sharing in Microsoft 365"},"content":{"rendered":"\n

Documents in MetaShare can be shared with users that do not have access to the workspace they are residing in. As a global admin or SharePoint admin you can however control what type of sharing you want to allow within your organization and also within different workspaces. Beneath you see what options you have and instructions on how to set these settings.<\/p>\n\n\n\n

How to change sharing setting for your organization<\/h2>\n\n\n\n

Depending on your business needs and the sensitivity of your data, you can:<\/p>\n\n\n\n

    \n
  1. Forbid sharing with people outside your organization<\/li>\n\n\n\n
  2. Require people outside your organization to authenticate<\/li>\n\n\n\n
  3. Restrict sharing to specified domains<\/li>\n<\/ol>\n\n\n\n

    This section describes how you control the sharing capabilities at the organization level in SharePoint and OneDrive.<\/p>\n\n\n\n

    Azure Organizational relationships settings<\/h3>\n\n\n\n

    Sharing in Microsoft 365 is governed at its highest level by the organizational relationships settings in Azure Active Directory. If guest sharing is disabled or restricted in Azure AD, this will override any sharing settings that you configure in Microsoft 365. If you want to be able to share documents with external users, check the organizational relationships settings to ensure that sharing with guests is not blocked by:<\/p>\n\n\n\n

      \n
    1. Log in to the Azure portal<\/a>.<\/li>\n\n\n\n
    2. Open “Microsoft Entra ID<\/a>“.<\/li>\n\n\n\n
    3. In the left navigation, click on “External Identities<\/a>“:
      \"External<\/li>\n\n\n\n
    4. In the left navigation, click on “External collaboration settings<\/a>“:
      \"External<\/li>\n\n\n\n
    5. Set appropriate settings in the “Guest invite settings” section. For everyone to be able to share documents, then you need to select the “Member users and users assigned to specific admin roles can invite guest users including guests with member permissions” option:
      \"Guest<\/li>\n\n\n\n
    6. Note the settings in the “Collaboration restrictions” section. Make sure that the domains of the guests that you want to collaborate with aren’t blocked. To not restrict sharing to any domains, select the “Allow invitations to be sent to any domain (most inclusive)” option:
      \"Collaboration<\/li>\n\n\n\n
    7. If you made changes, click on “Save” in the toolbar.<\/li>\n<\/ol>\n\n\n\n

      SharePoint organization level sharing settings<\/h3>\n\n\n\n

      In order for people outside your organization to have access to a document in SharePoint or OneDrive, the SharePoint and OneDrive organization-level sharing settings must allow for sharing with people outside your organization.<\/p>\n\n\n\n

      The organization-level settings for SharePoint determine what settings are available for individual SharePoint sites. Site settings cannot be more permissive than the organization-level settings. The organization-level setting for OneDrive determines what level of sharing is available in users’ OneDrive libraries.<\/p>\n\n\n\n

      For SharePoint and OneDrive, if you want to allow unauthenticated document sharing, choose “Anyone”. If you want to ensure that people outside your organization have to authenticate, choose “New and existing guests”. “Anyone” links are the easiest way to share: people outside your organization can open the link without authentication and are free to pass it on to others.

      For SharePoint, choose the most permissive setting that will be needed by any site in your organization. To set SharePoint organization level sharing settings:<\/p>\n\n\n\n

      Enable external sharing in SharePoint<\/h4>\n\n\n\n
        \n
      1. Login to Microsoft 365 and open the “Admin<\/a>” app (Microsoft 365 admin center):
        \"\"<\/li>\n\n\n\n
      2. Open the SharePoint admin center:
        \"\"<\/li>\n\n\n\n
      3. Under the “Policies” section, open the “Sharing” page:
        \"\"<\/li>\n\n\n\n
      4. Set content can be shared with to “Anyone” or “New and existing guests”. Note that the OneDrive setting cannot be more permissive than the SharePoint setting:
        \"\"<\/li>\n<\/ol>\n\n\n\n

        Configure sharing links<\/h4>\n\n\n\n

        The default file and folder links settings determine which link option is shown to the user by default when they share a document. Users can change the link type to one of the other options before sharing if desired. <\/p>\n\n\n\n

        \n