Forum Discussion

roniy's avatar
roniy
Brass Contributor
Jul 20, 2020

"Everyone except external users" has read permission on many personal OD sites

Hi,

 

We noticed that the group "Everyone except external users" has read permission on many personal OD sites. The permission appears to be on the site level (not a specific file or folder).

However, when I try to browse to those sites (https://org-my.sharepoint.com/personal/name_org_com ) I don't have access to them. 

I reached out to some of these people and they did not grant this permission intentionally. 

 

Can anyone explain this behavior?

 

  • roniy 

    Where are you seeing this group?  Has it been added to the visitors group?

     

    As a wider answer, do you know what your default Sharing settings are?  I suspect that these may be the culprit.  I've seen this a few times where the default sharing settings are configured to the entire organisation.  Quite often the defaults are accepted and that'll result in the "Everyone but external" group being added to an item / site.

     

    • roniy's avatar
      roniy
      Brass Contributor

      Thanks Steven Andrews!

      It's not in the visitors group.

      So you're saying it must be a result of sharing?

       

      I still wonder why I (an internal user) don't have access while the group is there:

       

       

      • That's probably a remnant from back in the day where we had the "shared with everyone" folder. You can still provision that via the ProvisionSharedWithEveryoneFolder switch, but it's no longer enabled by default afaik.

Resources