Forum Discussion
MicrosoftUpcoming change:Updating default sharing setting for Office 365 Group connected SPO site collections
Microsoft
Brian Caauwe wrote:
I like the direction of making it easier to share with external users for document collaboration, but seems like a VERY wide setting to be the default. A suggestion might be to allow admins the ability to set this via a sharing policy for values set in the ClassificationList property that you can set via Azure policies when creating the group (e.g. Internal or Private = leave as ExternalUserSharingOnly, External or Partner = use ExistingExternalUserSharingOnly)
Brian, you are reading our minds. :) We are definitely moving to a model where Classification of a group/site has policies attached. Stay tuned on this front. :)
MicrosoftHi everyone - we've received great feedback here as well as from other channels. We seem to have two clear camps with opposing points of view. We've added a feature to our backlog that would allow for admins to specify the default sharing setting for site collections in a tenant. However, that work is not yet prioritized or scheduled so I don't have an ETA for when that would be available.
So, another question for all of you. What if we tied the external sharing setting for a group's site collection to the group's guest membership setting at site creation time? In other words, we would enable external sharing for a group site collection ONLY if the group allows for guests to be added (at time of creation). The settings would remain decoupled post-creation and would still be separately manageable. Would this approach be acceptable until we have an admin control to set the default?
Thanks for your feedback!
Tejas
Hi Tejas Mehta, did this "We've added a feature to our backlog that would allow for admins to specify the default sharing setting for site collections in a tenant" get rolled out / is their a timeline? Thanks John
Deleted
This feature is included in the new Sharepoint Admin Center.
See https://techcommunity.microsoft.com/t5/Change-Alerts/New-SharePoint-Admin-Center/td-p/144578
Hi Salvatore Biscari. Are their plans to enable / the ability to set the default behavior back to ExistingExternalUserSharingOnly for all new sites at creation? We would like to have this control in place, so we can still enable Teams and SharePoint Sharing, but only on request and workflow approval. Thanks again! John
Salvatore Biscari wrote:Deleted
This feature is included in the new Sharepoint Admin Center.
See https://techcommunity.microsoft.com/t5/Change-Alerts/New-SharePoint-Admin-Center/td-p/144578
- David Rosenthal
Yes.
In effect, you're saying if you have Guest Access turned on at site creation time you get the ability to externally share to those not yet in AAD via the standard invitation and authentication method for that site. If Guest Access is turned off at site creation time, nothing changes compared to what is happening today.
Am I understanding you correctly?
- Tejas Mehta
Yes, that is correct. Would this approach appease concerns in the interim?
- David Rosenthal
Yes, that would work for us. We already have external sharing turned on and limited via whitelist in both SharePoint and now Office 365 Groups with the PowerShell that was released a couple days ago, so removing that extra step of either admins having to add the external users into AAD, or the users themselves having to use Azure B2B to get created in AAD first is a win.
