Forum Discussion
Everyone external Share permission in SharePoint Online per note from MS Support
StephenRice is it possible for you to help out here to clarify if all our customers will be effected or not after March 23.. They use Everyone role inserted into SharePoint Visitors group on a large number of SharePoint sites to allow internal as well as external accounts read access to content managed on SP sites..
Below I have pasted in what Microsoft communicated out in the Admin center/notification and I read it as all tenants needs to do an action to continue as before. But the 3 tenants I have checked all has the Set-SPOTenant -ShowEveryoneClaim set to True without doing anything..
So please help out so it is crystal clear if action is still required or not in relation to SharePoint sites and use of Everybody role...
---
|
New ways to govern access of external users are coming to Office 365 |
|
Major update: General Availability rollout started |
||
|
Applied to: All customers |
|
Starting March 23, 2018, we're giving you new ways to govern access of external users. As part of this update, external users will no longer be able to see content that has been Shared with Everyone, All Authenticated Users, or All Forms Users, even if they have been invited or added to authorized groups. |
Hi Freddy Bang,
Sorry for the delay, I am following up on this and will get back to you when I have an answer. Thanks!
Stephen Rice
OneDrive Program Manager II
- Freddy BangMar 15, 2018Copper ContributorThanks StephenRice hope you can help get a clear understanding this week?
- StephenRiceMar 15, 2018
Microsoft
Hey Freddy Bang,
I have an answer for you :) By default, the value of the ShowEveryoneClaim is "unspecified". Get-SPOTenant returns the "effective" value in this case, which is currently "true". After this change goes live, the "effective" value of "unspecified" will be False. We're going to update the documentation to make this more clear (keep an eye out for that in the next few days).
In the meantime, if you want to keep the current behavior, you should explicitly set the value to True via PowerShell.
I'm not sure if this counts as a "clear" understanding but I hope it helps! Let me know if this doesn't make sense!
Stephen Rice
OneDrive Program Manager II
- Freddy BangMar 16, 2018Copper Contributor
Thanks StephenRice,
I assume I have to look at the documentation for https://docs.microsoft.com/en-us/powershell/module/sharepoint-online/get-spotenant?view=sharepoint-ps and/or https://support.microsoft.com/en-us/help/4089534/how-to-grant-the-everyone-claim-to-external-users-in-office-365 or where to keep looking?