Forum Discussion

Christopher-Graves's avatar
Christopher-Graves
Iron Contributor
Mar 07, 2017

Why does default option sharing OneDrive for Business docs now give link anyone can use to edit?

This is new and is worrying lots of users trying to quickly share docs which the presume will remain confidential within OneDrive for Business

    • StephenRice's avatar
      StephenRice
      Icon for Microsoft rankMicrosoft

      Hi all,

       

      Looks like you've already posted the solution but to expand quickly on Salvatore's answer, if you select "Direct" as the default link, users will share by default with the "restricted" link. The dialogue will say something like "Only people on the To: line" or "Only specific people". 

       

      The one difference between this option and the old "restricted" link option is that users have the ability to permission new users at the same time they e-mail or copy the link. If you have any questions, please let me know!

       

      Stephen Rice

      OneDrive Program Manager II

      • KRISHNA PHANSE's avatar
        KRISHNA PHANSE
        Copper Contributor

        One caveat to possibly keep in mind is that when people in large organizations start adding people through this feature, it has the potential to bloat security principals (unique ACLs) attached to a site really quickly.  This adds to processing overhead for search, retrievals etc, and reduces performance overall.  For larger organizations, there may need to be an option to turn this off so we can have one function per dialog i.e. sharing screens/dialogs for sharing only, and permission screens/dialogs for permissions.  This would encourage site owners (often power users) to be more conscious of their permission structure and site structure.

  • escupham's avatar
    escupham
    Steel Contributor

    I noticed this as well as it's not the default way we'd like OneDrive files to be shared.  You can update this in the OneDrive Admin Center.  Under sharing set the default sharing links to 'direct - only people who already have permission'.  Then, by default, only those in the 'to' line will have permissions.

    • Salvatore Biscari's avatar
      Salvatore Biscari
      Silver Contributor

      To be precise, direct links (aka restricted links) give access only to people who already have permissions, as stated in the option.

      This is clearly evident if you choose Get link instead of Share.

       

Resources