Microsoft 365: The Next Generation of File & Folder Sharing

🚨 The Signal: Microsoft 365 file and folder sharing now uses a 'hero link' for all sharing methods. This aims to simplify sharing controls but centralises access management, requiring careful review of default sharing settings.

The Impact

All users are affected, with a potential risk of over-sharing if default link settings are not securely configured by administrators.

  • End users: May inadvertently over-share if not trained on new link types.
  • Administrators: Must review and adjust default sharing link settings to prevent data exposure.
  • Security Teams: Need to validate sharing policies align with data classification and access controls.

The Action

  1. Review and configure default sharing link types for SharePoint and OneDrive in the SharePoint admin center.
  2. Communicate new sharing experience and best practices to end-users.
  3. Monitor sharing activity for sensitive data using Microsoft Purview.
  4. Validate existing data loss prevention (DLP) policies are effective with new sharing mechanisms.

Domain: SharePoint · Impact: medium · Workload: SharePoint