Forum Discussion
Allow creation of guest links for specific users only
If we are talking about ODFB here, it should indeed be possible as you can now control the sharing options per SC. However, the "allow guests" setting is "less restrictive", and the per-SC permissions can only be "more restrictive". Thus you take to do it the other way around - configure ExternalUserAndGuestSharing at the Global level and then switch Guest sharing off for everyone apart the user(s) you want to be able to use this.
That's assuming you only want to give them permissions to share files in their own ODFB.
I don't particularly like this solution, as I am having to then remember to turn off guest-sharing for each new person that is created, which can be easy to forget. But I suppose it is a method it could work, since a regular user would not be able to connect to PowerShell to turn it back on, unless there is another way for that to happen, because as Salvatore points out, a user would be a SCA of his/her own ODFB SC.
- StephenRice
Microsoft
Hi all,
As you may know, we have a feature coming out soon that will allow admins to specify which security groups are allowed to share externally. This feature will restrict only those users in the specified SG's from sharing both externally and anonymous (if enabled). Now, that doesn't sound like it would be useful in this case, but we also have some work planned to separate out the "anonymous" and "authenticated external" setting.
This would mean you could set something like:
- Security group A and B can share with authenticated external users
- Only security Group B can share via anonymous links
Would that satisfy your requirement? Also, usual disclaimer: This is all still under design and nothing is committed or planned just yet. So stay tuned :)
Stephen Rice
OneDrive Program Manager II
StephenRice That is exactly what we are looking for. Has this been implemented yet? If not, what timeline are might we expect?
Thanks
- StephenRice
Hi Johann Hough,
Yes, this feature is now available. You can find it in the SharePoint Admin Center on the sharing tab. Thanks!
Stephen Rice
OneDrive Program Manager II
