Security Considerations - enabling "File request" in SharePoint

Question

What would be the Security Considerations for enabling "File request" feature in SharePoint?

We have already enabled anonymous links option in Sharepoint online for the tenant and sharing settings are most permissive, still I'd like to understand what should be considered before enabling this in a tenant.

Answer 1

Hi @Manoj ,

Thank you for posting in this comunity.

Steps to Enable Request Files for SharePoint Online:

1. Check if you have enabled Anyone links at the tenant level for SharePoint sites.
2. Ensure folder permissions are set to View, edit and upload.
3. Check CoreRequestFilesLinkEnabled is set correctly via SharePoint Online Management Shell.
   • Run Get-SPOTenant.
   • Check if CoreRequestFilesLinkEnabled is set to True. If it isn't set to True, run Set-SPOTenant -CoreRequestFIlesLinkEnabled $True.
   • If this is set to True, Request files link on the core partition for all SharePoint sites is enabled (not including OneDrive sites). If this value isn't set, Request files will only show for OneDrive with Anyone links enabled.
4. You can also set the RequestFilesLink Expiration by using Set-SPOTenant -CoreRequestFilesLinkExpirationInDays (Optional).

Reference:https://learn.microsoft.com/en-us/sharepoint/enable-file-requests#enable-or-disable-request-files-for-sharepoint

With Anyone Link enabled, external users can access files via an anonymous link. Remember to strike a balance between collaboration and security. Adapt to the needs of the organization at each stage.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.