question

Pflipper avatar image
0 Votes"
Pflipper asked Pflipper00001 commented

Sharing with external users, but restricting their sharing

Sharepoint external sharing still seems to be either poorly thought out or poorly implemented, and no link to a Q & A five years ago will give me the information I need.

Here is my issue... I have a need to securely share files with a customer. I know I can send them a link to share, and they will have access to the folder that I set up on Sharepoint.

What I do not want is for the external user to be able to also share the folder with another external user. From my testing, however, it seems that once I share a folder with an external user that they can share it as well with whoever they want. I tested this by sharing the folder with another personal external email, then using that email to send the link to another external email. I do not want that.

What I want is to have specific external users have access to the folder on my Sharepoint site, without the ability of those external users to share it with other external users.

Is there a setup item that I missed that would limit external users from sharing with other external users?

office-sharepoint-online
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

michev avatar image
0 Votes"
michev answered michev commented

If you want to restrict "forwarding" of the sharing link, you can toggle the RequireAcceptingAccountMatchInvitedAccount setting: https://docs.microsoft.com/en-us/powershell/module/sharepoint-online/set-spotenant?view=sharepoint-ps

While you're at it, you might also consider toggling PreventExternalUsersFromResharing.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi michev,

I updated both restrictions using Powershell, and I was able to limit the external sharing by external users (they can only share now with other external users who are authorized to access the folder). I don't know if I should use the suggestion from EmilyDu below to further restrict access - ?

0 Votes 0 ·

Up to you, it depends on which method(s) you use for generating the links. Anonymous links will not be affected by those settings.

1 Vote 1 ·
EmilyDu-MSFT avatar image
0 Votes"
EmilyDu-MSFT answered Pflipper00001 commented

@Pflipper

Per my knowledge, there is no option to prevent external users from sharing with other external users with Anyone link.

I suggest that you can go to the Microsoft Tech Community to submit a feedback about this requirement.


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Emily,

Thanks for your reply. Is this what you are talking about when you mention Anyone link (see attached). I wound up using both restrictions that michev mentioned, and I was able to limit the external sharing by external users (they can only share now with other external users who are authorized to access the folder). I don't know if your suggestion matches what is below, and if it is a further setting that would help me restrict access. Let me know.

143073-image.png


0 Votes 0 ·
image.png (74.5 KiB)

@PhilFerrero-8400

Yes, I mentioned in the answer is Anyone link.

0 Votes 0 ·

@Pflipper

I’m checking how the things are going on about this issue. Whether the answer helps you?

If there is any problem with this issue, feel free to let me know.

0 Votes 0 ·

Hi EmilyDu,

I think your solution would work to open up access, however, because of the limitations that Sharepoint has for external users in calendars and other areas I decided to set up the user with a license.

0 Votes 0 ·