Restrict downloads for some users on SharePoint online


Hi everyone,

Seeking assistance please.

I'm trying to restrict some users from downloading files on SharePoint online, while letting others download.

All users should be able to upload and edit files online.

So far, I have set a restrict-download policy through PS (Set-SpoSite -Identity <site url> blockdownloadpolicy $true) but this seems to set the policy across board on the specified site. As a workaround, I followed guidelines and cmdlets on this page, to exempt some user groups from the policy, but this doesn't work due to some issues to do with the Group ID and system.guid format, as I previously asked in this question:

Any other solution for this will be appreciated.

A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
9,875 questions
SharePoint Development
SharePoint Development
SharePoint: A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.Development: The process of researching, productizing, and refining new or existing technologies.
2,719 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Haoyan Xue_MSFT 20,906 Reputation points Microsoft Vendor

    Hi @James Waweru ,

    You can Create a new permission level from “View Only”(View Only permissions do not allow downloads) so that users can upload and edit files, but not download. Then grant custom permission levels to the subset of users you wish to block downloads.

    Here are steps:

    Step 1: Activate SharePoint Server Enterprise Features:

    Step 2: Create a new permission level from “View Only”

    Click “View Only” permission->Click “Copy Permission Level“ at the bottom of the page User's image

    User's image

    Step 3: Assign the New Permission Level to Users you wish to block downloads

    You can bulk Add Users from a CSV File to SharePoint Online Group using PowerShell or if the number is not large, you can manually grant permissions individually

    For more detail information,please refer to:

    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.