Forum Discussion
Do not allow users to share files and folders they do now own
Hi Daniel!
- (I do not recommend it but...) You can restrict sharing this way but it leads to that the owner(s) of the site is/are the only one(s) able to share files. That could cause a lot of administrative work for the owners.
- That is the easy part. You just place the users in the right group. If needed You can break the inheritance of the document library (but i do not recommend that either :-) ). Check this video: https://support.office.com/en-us/article/video-understanding-permissions-in-sharepoint-c13a4f37-eea1-48f6-8dac-14ac37d73903?redirectSourcePath=%252fen-us%252farticle%252fvideo-share-a-site-without-access-request-8eafd9da-f654-4920-aa87-4d452e677887&ui=en-US&rs=en-US&ad=US
- If You have been assigned to the owner-group of the site you will have that access level.
Unless this is about highly confidential documents, I recommend that you do not "lock down" the access too much, that will cause a lot of extra work. Keep it simple and stay as "open" as possible. (If needed, everything is traceable in the version history and Audit Log and possible to track afterwards.)
Hope that answered Your question.
Regards, Magnus
- (I do not recommend it but...) You can restrict sharing this way but it leads to that the owner(s) of the site is/are the only one(s) able to share files. That could cause a lot of administrative work for the owners.
Hi, at the site collection level I set it so only site owners can share.
Only the IT team have been set as owners of the site and subsites.
When I open a subsite I can see all options under access request permissions are unticked.
However staff who are not owners of the sites are still able to open a document library and share a folder or file.
Its seems the settings are not applying. Anyone have any idea what could be the problem?
Can someone provide a powershell script we could try to do the same?
We want any new folders and files to inherit permissions and not allow staff to create special permissions by sharing. We are also only a 50 person company and its more efficient for us to manage permissions this way its also important for us to keep a tight hold of which staff have access to our data.
P.S. We also have one drive syncing.
MicrosoftHi geckonet,
Can you paste screenshots of the request access UI & the sharing options that your end users are seeing? Thanks!
Stephen Rice
OneDrive Program Manager II
We had thought our staff could share as we noticed the share button becomes enabled when they select a folder and they were able to then open the 'share with' page.
Further testing shows though that they can't actually commit the share. When they hit 'share' they are prevented from sharing and presented with the ugly error message below.
Not exactly eloquent but it fits the purpose.
- StephenRice
Hi geckonet,
Agreed though I think it is better in the modern UI :) Glad it's working at least!
Stephen RiceOneDrive Program Manager II