Forum Discussion

Robert Lien's avatar
Robert Lien
Brass Contributor
Mar 06, 2017

Allow creation of guest links for specific users only

Hi,   How can I allow the use of guest link only for specific users in an organization?   thx
limits
OneDrive for Business
VasilMichev's avatar
VasilMichev
MVP
Mar 07, 2017

Salvatore Biscari I dont think PowerShell respects the SCA settings, the GA/SPO Admin permissions you need to run PowerShell superseed those I guess. jcgonzalezmartin is the authority on SharePoint, he might be able to give more insight :)

 

As for the owner being able to revert them, in theory this is indeed the case, if he is able to access the relevant settings. Pretty much the same issue we had with the owner of the ODFB site being able to remove IRM protection.

Salvatore Biscari's avatar
Salvatore Biscari
Silver Contributor
Mar 07, 2017

VasilMichev

VasilMichev wrote:

As for the owner being able to revert them, in theory this is indeed the case, if he is able to access the relevant settings.

I think so too, in theory.

But how can an user access, in practice, the sharing capability setting of his/her ODFB SC?

cc jcgonzalezmartin

  • jcgonzalezmartin's avatar
    jcgonzalezmartin
    MVP
    Mar 08, 2017
    That's a good summary :-)
  • Salvatore Biscari's avatar
    Salvatore Biscari
    Silver Contributor
    Mar 07, 2017

    I'll try to summarize:

    1. A GA / SPO admin can change the sharing capability setting of every ODFB SC using PowerShell, despite the fact that he/she is not an SCA for that SC.
    2. Conversely, a normal user cannot change the sharing capability setting of his/her own ODFB SC using PowerShell, despite the fact that he/she is an SCA for that SC (because he/she is not a GA / SPO admin). Also, he/she cannot use an UI for that purpose, because it doesn't exist. Maybe (not sure), if really a great expert, he/she could use CSOM...

    Wow!

    Thanks. ;-)

  • jcgonzalezmartin's avatar
    jcgonzalezmartin
    MVP
    Mar 07, 2017
    Well, as a regular user you won't be able to use SPO cmdlets because they will require you to be at least a SPO Admin... but as a regular user and site collection owner of your OneDrive, you will be able to use Client Side Object Model (CSOM) against your OneDrive...so to answer your question I would have to dig into what CSOM allows to do in regards of sharing capability at the site collection level. If you review this post from a year ago, http://sadomovalex.blogspot.com.es/2015/10/set-sharing-capabilities-of-sharepoint.html, you could change sharing capability using CSOM, but since you need a tenant object you won't be able to do it since you are a simple site collection owner...but, as I said, a deeper dive into CSOM it's required to fully answer to your question
  • Salvatore Biscari's avatar
    Salvatore Biscari
    Silver Contributor
    Mar 07, 2017

    Thank you Juan.

    But let us suppose the user is you ( i.e. a super expert, but nevertheless a simple user, not a GA / SPO admin).

    My question is : will you be able to change the sharing capability setting of your ODFB SC ?

    If yes, how?

  • jcgonzalezmartin's avatar
    jcgonzalezmartin
    MVP
    Mar 07, 2017

    Ey guys,

    Sorry for being late at the party...basically as you have already said, end user is not going to be able to configure (and he/she shouldn't even knowing he/she is the owner of his/her site collection) the sharing setting for ODFB...this capabilitie should remain on the GA / SPO Admin

Resources