Advice for creating and migrating to a SharePoint Intranet

Use a flat structure: one Communication site as the intranet home, then separate department sites associated with a hub; use Team sites for collaboration and separate restricted sites for HR, Finance, and other confidential content rather than extensive folder or item level permissions. Grant access through Microsoft 365 or security groups, keep confidential sites private, disable external sharing there by default, and audit and clean the file share before migrating only current content.

For a contractor, enable external sharing only on a dedicated collaboration site, share the document using a “Specific people” link, and let Microsoft Entra B2B authenticate the guest through their account or a one time passcode. A SharePoint administrator can configure guest access to expire after the required period at organization or site level, so set that site to 180 days and avoid granting the contractor access to the HR or Finance site itself.  

SharePoint Pro Support – Main Guide: https://mstack360.com/sharepoint-pro-support/

SaaS Replacement Map – Rebuild Apps Natively in Microsoft 365: https://mstack360.com/saas-replacement-map-sharepoint-spfx/