Collaborator by "any from domain" filter is not working

%3CLINGO-SUB%20id%3D%22lingo-sub-1074275%22%20slang%3D%22en-US%22%3ECollaborator%20by%20%26amp%3Bquot%3Bany%20from%20domain%26amp%3Bquot%3B%20filter%20is%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1074275%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20doing%20a%20filter%20on%20a%20file%20and%20choose%20Collaborator%20%26gt%3B%20Any%20from%20domain%20%26gt%3B%20%22Gmail.com%22%20nothing%20is%20returned%2C%20and%20even%20though%20there're%20files%20that%20have%20gmail%20addresses%20as%20a%20collaborator.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EResults%20are%20only%20returned%20when%20the%20owner%20of%20the%20document%20is%20gmail.com%20but%20not%20when%20a%20file%20is%20shared%20with%20a%20gmail.com%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20does%20mean%20if%20we%20create%20a%20file%20policy%20from%20the%20existing%20template%20%22%3CA%20href%3D%22https%3A%2F%2Fkhaldoon.portal.cloudappsecurity.com%2F%23%2Fpolicy%2Ffile%2F5dfb8aad6736ddcee328d9f8%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EFile%20shared%20with%20personal%20email%20addresses%3C%2FA%3E%22%20will%20not%20work%20as%20it%20uses%20the%20same%20filters%20to%20determine%20if%20a%20file%20was%20shared%20with%20a%20gmail%20account%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20screenshots%20attached.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1074275%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EData%20Protection%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1147076%22%20slang%3D%22en-US%22%3ERe%3A%20Collaborator%20by%20%26amp%3Bquot%3Bany%20from%20domain%26amp%3Bquot%3B%20filter%20is%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1147076%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F230793%22%20target%3D%22_blank%22%3E%40Khaldoun%20Almarzouk%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20reason%20is%20that%20OneDrive%20and%20SharePoint%20sharing%20done%20via%20the%20share%20link%20option%20does%20not%20add%20guests%20accounts%20as%20contributors%20to%20files%2C%20if%20you%20look%20at%20the%20file%20in%20MCAS%20you%20will%20see%20a%20shared%20link.xxxxx%20group%20with%20the%20guests%20inside.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Etry%20adding%20a%20Gmail%20account%20to%20a%20file%20using%20the%20direct%20access%20option%2C%20it%20will%20trigger%20the%20policy.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3EUnfortunately%2C%20no%20one%20uses%20the%20direct%20access%20to%20share%20files%20in%20OneDrive%20or%20SharePoint%20so%20this%20template%20only%20works%20for%20gsuite%20at%20the%20moment.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%E2%80%99m%20waiting%20for%20updates%20on%20this%20issue%2C%20will%20let%20you%20know%20once%20I%20get%20feedback%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThx%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EShlomi%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1151020%22%20slang%3D%22en-US%22%3ERe%3A%20Collaborator%20by%20%26amp%3Bquot%3Bany%20from%20domain%26amp%3Bquot%3B%20filter%20is%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1151020%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F425203%22%20target%3D%22_blank%22%3E%40Fananico%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20reply.%20I%20have%20contacted%20support%20for%20the%20issue%20and%20I%20was%20told%20that%20this%20is%20a%20known%20issue%20that%20the%20development%20team%20is%20working%20on.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20you%20confirm%20that%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1151025%22%20slang%3D%22en-US%22%3ERe%3A%20Collaborator%20by%20%26amp%3Bquot%3Bany%20from%20domain%26amp%3Bquot%3B%20filter%20is%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1151025%22%20slang%3D%22en-US%22%3EYes%2C%20same%20answer%20I%20got%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1151103%22%20slang%3D%22en-US%22%3ERe%3A%20Collaborator%20by%20%26amp%3Bquot%3Bany%20from%20domain%26amp%3Bquot%3B%20filter%20is%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1151103%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F425203%22%20target%3D%22_blank%22%3E%40Fananico%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20response%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

When doing a filter on a file and choose Collaborator > Any from domain > "Gmail.com" nothing is returned, and even though there're files that have gmail addresses as a collaborator.

 

Results are only returned when the owner of the document is gmail.com but not when a file is shared with a gmail.com account.

 

This does mean if we create a file policy from the existing template "File shared with personal email addresses" will not work as it uses the same filters to determine if a file was shared with a gmail account

 

I have screenshots attached.

4 Replies
Highlighted

@Khaldoun Almarzouk 

 

Hi,

 

The reason is that OneDrive and SharePoint sharing done via the share link option does not add guests accounts as contributors to files, if you look at the file in MCAS you will see a shared link.xxxxx group with the guests inside.

 

try adding a Gmail account to a file using the direct access option, it will trigger the policy.

Unfortunately, no one uses the direct access to share files in OneDrive or SharePoint so this template only works for gsuite at the moment.

 

I’m waiting for updates on this issue, will let you know once I get feedback :)

 

Thx

 

Shlomi

 

Highlighted

@Fananico Thanks for the reply. I have contacted support for the issue and I was told that this is a known issue that the development team is working on.

 

Can you confirm that?

 

Thanks,

Highlighted
Yes, same answer I got :)
Highlighted