Home

Change to ODB/SPO sharing dialog specific people option

Highlighted
Stephen Rice
Microsoft

Change to ODB/SPO sharing dialog specific people option

Hi all,

 

Based on feedback, we're making a small update to how the new sharing dialog works with the "Specific People" option.

 

You may recall that we previously had two people pickers in the dialog: One to select who the sharing link work for and another to choose who to actually send the link to. We have eliminated the first people picker and have folded the functionality together. Here's a quick example:snip_20170828111412.pngsnip_20170828111435.png

When "Specific People" is selected as the default link type, users will no longer need to open the Links settings page to choose who they want to share with. This change is rolling out now and should be available in all organizations by the end of the day.

Let me know if you have any questions. Thanks!

 

Stephen Rice

OneDrive Program Manager II

 

23 Replies

Re: Change to ODB/SPO sharing dialog specific people option

Tagging @Juan Carlos González Martín and @Andrew Silcock as I know they were both interested in this change :) 

Re: Change to ODB/SPO sharing dialog specific people option

Thanks for this update Stephen!!! I will blog about it as soon as I seen on my tenants :-).

Re: Change to ODB/SPO sharing dialog specific people option

Thanks very much for looking into this and letting us know Stephen.

I will have a test this morning and let you know. Initial testing looks good though.

One thing we're wondering, is it going to be possible in the future to change the default option so that when clicking on Share and Copy, it defaults to "People with existing access" - Only people who already have access can use this link? We're currently able to change it to default to all other options but this one. Presumably, because this option isn't available in OneDrive, it makes it harder to implement?

Re: Change to ODB/SPO sharing dialog specific people option

Hi @Andrew Silcock,

 

With this update, you should actually see "People with existing access" in OneDrive as well :) We don't currently have any plans to add it as an option for "default" but it's something I'm watching for feedback on. 

 

Thanks!

 

Stephen Rice

OneDrive Program Manager II

Re: Change to ODB/SPO sharing dialog specific people option

You can change the default at the tenant from OneDrive Admin > Sharing > Default Sharing Links and select 'Direct'. I am not aware of a way change the default at the user level.

Re: Change to ODB/SPO sharing dialog specific people option

Will you be separating ODB and SPO sharing? If so when? 

Re: Change to ODB/SPO sharing dialog specific people option

Hi @Meryem Burduroglu,

 

We definitely have heard feedback that many customers have different scenarios between ODB and SPO when it comes to sharing and need a little more freedom/separation in order to effectively manage their organization. We don't have anything specific to share about that though, other than that we're definitely aware of the request. Thanks,

 

Stephen Rice

OneDrive Program Manager II

Re: Change to ODB/SPO sharing dialog specific people option

Hi Stephen,

A little off topic, but are you aware of an issue with external users in OneDrive and SharePoint sharing, whereby I cannot share with the primary SMTP of an external user but I can share with their alias.

The user receives something along the lines of:

"You are trying to accept your invitation with alias@external.com.

The item was shared with primarysmtp@external.com. This organisation's policy requires you to accept the invitation using the account that it was shared with"

Despite this being the same account, the sharing will not work unless I share specifically with their primary SMTP, which often means having to ask the external user for their log on email address as123@external.com rather than andy.silcock@external.com.

We have “External users must accept sharing invitations using the same account that the invitations were sent to” checked and we're not about to uncheck it.

I'm wondering if the new external sharing options, using validation codes are going to resolve this?

Thanks,

Andy.

Re: Change to ODB/SPO sharing dialog specific people option

@Andrew Silcock,

 

Yes, the new validation codes will solve this. As long as the user can receive the validation code via the e-mail that was shared with, they can verify their identity and access the content.

 

Stephen Rice

OneDrive Program Manager II

Re: Change to ODB/SPO sharing dialog specific people option

We'd REALLY like to have this default to "People with existing access" in SP. It is messing with our preferred approach in SharePoint of keeping specific user assignment in security to a minimum. We cannot convince our users with permissions that every time they want to send a file link, they need to change the link type, and we end up with people who already have access via group membership now having specific named access.

Re: Change to ODB/SPO sharing dialog specific people option

Hi @Brent Hawthorne,

 

We have this work on our backlog but don't have a timeline to offer. The best thing you can do to help us prioritize the work is to make or vote up a request on user voice. 

 

In the short term, one other option you can explore is turning off the "members can share" feature on your team sites. Once disabled, only the owners can add new people which may help reduce oversharing cases. Thanks!

 

Stephen Rice

OneDrive Program Manager II

Re: Change to ODB/SPO sharing dialog specific people option

Hi Stephen

Do you have any news about this feature? I was looking today to set "People with existing access" as default, but still not possible.

Thank you and kind regards
Ivo

Re: Change to ODB/SPO sharing dialog specific people option

Hi @Ivo Rohrer,

 

Nothing to share here at the moment, sorry. Feel free to submit this idea on user voice as well as this helps us prioritize work as well. Thanks!

 

Stephen Rice

OneDrive Program Manager II

Re: Change to ODB/SPO sharing dialog specific people option

Hi Stephen, any ideas on a release for the new external sharing method? Thanks!

Re: Change to ODB/SPO sharing dialog specific people option

Hi @Andrew Silcock,

 

The new external sharing flow is available to all customers now. You should be able to see it anytime you share a file or folder to a new external user. Thanks,

 

Stephen Rice

OneDrive Program Manager II

Re: Change to ODB/SPO sharing dialog specific people option

We're just as bad as end users with not using search. I found a number of suggestions on User Voice for the option to default share and copy link be for people with existing access. Can we all just go to one and vote it up? Maybe this one - https://sharepoint.uservoice.com/forums/329214-sites-and-collaboration/suggestions/31747333-default-...

Re: Change to ODB/SPO sharing dialog specific people option

Hi Stephen,

 

I used to use this Sharing option in my personal OneDrive (via Office365 Home).  I used to share my PRIVATE family photos with only my wife... and now for some reason the options to Specify a User have all gone!  (I went to share a new folder today....)

 

This was a BIG part of the usefulness of OneDrive.  Do you have an explanation of why this option has been removed and when it will return?  For me, this is a make or break.  We use OneDrive in Office365 in business and the option to specify specific users still exists.  But to be blunt, it makes my Home subscription useless for me as I don't have a secure way to share documents between family members now.

 

Thanks, Dave

 

Re: Change to ODB/SPO sharing dialog specific people option

Hi @David Pilcher,

 

In OneDrive personal, you should still have the ability to share to specific users. If you click share and select "E-mail" you will be sending a link to only your recipients. Are you not seeing the "e-mail" option or am I misunderstanding what you're seeing? Thanks!

 

Stephen Rice

OneDrive Program Manager II

Re: Change to ODB/SPO sharing dialog specific people option

You can select "send as an email", but that basically emails a link that is forwarded as a PUBLIC link (that can be re-forwarded etc)

 

It is not the same as only sharing with a Specific User.

Re: Change to ODB/SPO sharing dialog specific people option

Hi David,

 

Thanks for the clarification. You are correct, the link is still accessible to anyone though note that it will only work for people who possess the link. At this time, OneDrive personal does not support sharing to specific people (without allowing the re-forwarding) and this is not something that has ever been in the product. About two years ago now, we did remove an option that used to say "Require sign-in" but all that actually did was require that the recipient sign-in with a Microsoft account (regardless of whether they were the user that was shared with). The team was hearing lots of confusion around the setting so it was removed when we updated the UX design.

 

One option that may be available to you now is that you can actually copy a link and set a password on it. So you could copy the link, set a password and then send it to your wife so that only people with the link & the password will be able to use it.

 

I'd also definitely recommend that you vote up (or submit) a request on onedrive.uservoice.com for sharing with specific users. This helps the team prioritize future work. Thanks!

 

Stephen Rice

OneDrive Program Manager II

Re: Change to ODB/SPO sharing dialog specific people option

I will look for something to upvote, but I have a memory of using "Specific People" on the personal site.  I remember the Require Sign-In option too.

 

Passwords, as we know are not secure either and can still be forwarded.  I find it weird that under "Manage Access" I can see specific people listed as well as public links for some items...

 

Capture.PNGIgnoring the share link here, can only Alan see the file or not?

 

It's very concerning from a privacy standpoint.  As consumers move into the cloud it is vital that companies like Microsoft protect customer data very securely and when a user shares data with someone that only that person can access the data.  Trust is hard to gain but lost overnight...

 

Re: Change to ODB/SPO sharing dialog specific people option

@David Pilcher,

 

Yes, passwords can be forwarded as well but the idea behind it is to add a second layer. If a link has a password on it, the user will have to accidentally forward both the link and the password. I totally understand the desire for the specific people option though and it is something the team has talked about in the past.

 

As for the case below, Alan likely is accessing via a link and if he passes it on to someone else, that person will show up in Manage Access with a note saying that they "accessed via Alan's link" or something like that.

 

Overall, OneDrive places privacy & customer data protection as one of our core principles and we certainly know that it requires consistent dedication on our part for you to trust us. In the sharing case, we evolved the sharing dialog to be as clear as possible so that users know that when they share, the link will work for anyone who has the link and we've continued to add additional features like link expiration and link passwords to make them stronger and more secure. I'm happy to pass your feedback along to the rest of the team as well.

Re: Change to ODB/SPO sharing dialog specific people option

I've just been doing some testing and have to say I'm stunned.  And disappointed.  The answer is Alan is not the only one who can see my data...

 

I set up a test OneNote document and shared it to a friend and then we've forwarded and used the link in other ways:

 

1) While it shows an individual is being shared to (if they have an MSA account), it is a public link

2) Access can be permitted by ANYONE with that link (even a private browsing window just shows the data with no login request)

3) There is NO visibility that random people/PCs are accessing this data

 

This is a massive breech of trust..  I have some very private household information (e.g. tax/bills/legal etc.) being shared with my wife in OneNote (via OneDrive) and clearly OneDrive is not protecting this at all, while giving the impression that information is only being shared with specific people.

 

 

All I can say is wow.  I'm stunned.

Related Conversations
FindTime becomes Find a time in Office 365
Darrell Webster in Change Alerts on
82 Replies
Events from Email now showing up in Calendars
David Margossian in Change Alerts on
13 Replies
New Features - Messagecenter and Roadmap differs
Anonymous in Change Alerts on
7 Replies
Message Center - Weekly Digest Update
Brian Levenson in Office 365 on
5 Replies
Office 365 - Meltdown and Spectre CPU bugs
Cian Allner in Office 365 on
0 Replies