Attaching Onedrive file default permissions

%3CLINGO-SUB%20id%3D%22lingo-sub-86654%22%20slang%3D%22en-US%22%3EAttaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-86654%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20question%2C%20been%20looking%20into%20it%20and%20can't%20find%20a%20solution.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20our%20users%20open%20a%20new%20email%20and%20attach%20a%20OneDrive%20file%20the%20default%20permission%20is%20anybody%20in%20the%20organisation%20can%20edit.%26nbsp%3B%20This%20seems%20to%20be%20a%20bit%20insane%20to%20me%20%3A)%3C%2Fimg%3E%26nbsp%3B%20Is%20there%20somewhere%20I%20can%20change%20that%20default%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%20if%20you%20then%20discard%20the%20email%20the%20file%20is%20shared%20with%20the%20organisation%20anyway.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJason%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-86654%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-191862%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-191862%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20permissions%20are%20the%20default%20when%20using%20Outlook%20web%20rather%20than%20the%20client%3F%26nbsp%3B%20There%20was%20a%20time%20when%20Outlook%20Web%20was%20setting%20%22recipients%20can%20edit%22%20and%20the%20client%20was%20still%20setting%20%22org%20can%20edit.%22%26nbsp%3B%20This%20was%20fixed%20in%20a%20Click%20to%20Run%20update.%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%2C%20at%20one%20point%20I%20had%20to%20move%20that%20switch%20from%20direct%20to%20internal%2C%20save%2C%20then%20change%20it%20back%20to%20direct%20and%20save.%26nbsp%3B%20Maybe%20you%20need%20to%20try%20the%20same.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-191861%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-191861%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Mike%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%26nbsp%3B%20you%20for%20your%20reply.%20I%20checked%20this%20but%20this%20setting%20is%20already%20set%20like%20you%20suggested.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F33805i23636B94E7CDD9E2%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image.png%22%20title%3D%22image.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-191857%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-191857%22%20slang%3D%22en-US%22%3E%3CUL%3E%3CLI%3EOpen%20Office%20365%20SharePoint%20admin%20center%3C%2FLI%3E%3CLI%3EClick%26nbsp%3Bsharing%3C%2FLI%3E%3CLI%3ESet%20the%20default%20link%20type%20to%20direct.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EThis%20will%20set%20the%20default%20permissions%20to%20recipients%20can%20edit.%3C%2FLI%3E%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-191835%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-191835%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20any%20update%20on%20this%20setting%20as%20our%20organization%20also%20runs%20in%20to%20this%20issue.%3C%2FP%3E%3CP%3EWe%20don't%20want%20the%20Organization%20Can%20Edit%20setting%20by%20default%2C%20but%20we%20want%20%22Recepient%20can%20Edit%22%20as%20default.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-100806%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-100806%22%20slang%3D%22en-US%22%3EI've%20noticed%20something%20else%20now.%20If%20you%20attach%20the%20file%20to%20an%20email%20and%20change%20your%20mind%20and%20remove%20it%20or%20discard%20the%20email%2C%20you%20then%20have%20to%20go%20and%20manually%20remove%20those%20permissions.%20I%20can%20see%20chaos%20on%20the%20horizon.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-100805%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-100805%22%20slang%3D%22en-US%22%3E%3CP%3EI%20first%20noticed%20this%20in%20Outlook%20on%20the%20Web%20in%20April.%20%26nbsp%3BI%20opened%20an%20Office%20365%20case%20that%20was%20not%20helpful%20at%20all%20then%20opened%20a%20Premier%20case%20which%20was%20not%20helpful%20either.%26nbsp%3B%20I%20was%20told%20this%20was%20the%20way%20Modern%20Attachments%20have%20always%20behaved%20but%20I%20disagree.%20%26nbsp%3BPremier%20support%20said%20my%20feature%20request%20was%20forwarded%20to%20the%20product%20team%20and%20that%20is%20the%20last%20information%20that%20I%20have%20received.%26nbsp%3B%20In%20May%20when%20my%20Office%20C2R%20bits%20updated%20to%20build%201704.8067.2115%20Outlook%20started%20assigning%20default%20permissions%20as%20organization%20can%20edit.%26nbsp%3B%20The%20documentation%20here%20says%20%22message%20%3CSTRONG%3Erecipients%3C%2FSTRONG%3E%20are%20automatically%20given%20permission%20to%20edit%20the%20file%22%26nbsp%3B%20-%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FAdd-an-attachment-in-Outlook-Web-App-41afffaf-bb90-440d-a1ba-9a736e066947%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FAdd-an-attachment-in-Outlook-Web-App-41afffaf-bb90-440d-a1ba-9a736e066947%3C%2FA%3E.%26nbsp%3B%20I%20also%20have%26nbsp%3B%20a%20screenshot%20of%20the%20Office365%20roadmap%20from%20May%20that%20shows%20%22modern%20attachments%20are%20shared%20by%20default%20with%20%3CSTRONG%3Erecipients%3C%2FSTRONG%3E%20can%20edit.%22%26nbsp%3B%20I%20hope%20this%20information%20helps%20someone%20else%20and%20hope%20this%20will%20be%20configurable%20at%20the%20tenant%20level%20in%20the%20near%20future.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENote%20-%20When%20the%20attachment%20is%20applied%20%22organization%20can%20edit%22%20permissions%20it%20is%20actually%20an%20anonymous%20link%20rather%20than%20setting%20permissions%20on%20the%20file%20(won't%20show%20up%20in%20Delve).%26nbsp%3B%20Once%20the%20link%20is%20clicked%20by%20a%20user%20then%20that%20user%20shows%20permissions%20to%20the%20file.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-89408%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-89408%22%20slang%3D%22en-US%22%3EYeah%2C%20still%20waiting%20for%20the%20global%20setting.%20I%20already%20had%20those%20settings%20mentioned%20in%20that%20link%2C%20that%20was%20what%20made%20me%20realise%20the%20problem%20was%20there.%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-86848%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-86848%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20recently%20introduced%20some%20changes%20that%20give%20us%20more%20contrl%20over%20this%3A%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FOffice-365%2FModern-attachments-just-got-better%2Ftd-p%2F75498%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FOffice-365%2FModern-attachments-just-got-better%2Ftd-p%2F75498%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20in%20general%20I%20would%20appreciate%20a%20setting%20that%20allows%20us%20to%20set%20a%20global%20%22read-only%22%2C%20as%20even%20with%20the%20above%20improvements%20it%20doesnt%20seem%20to%20be%20possible%20atm.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-86710%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-86710%22%20slang%3D%22en-US%22%3EIt's%20worse%20for%20us%20as%20once%20the%20file%20has%20been%20sent%20all%20of%20the%20organisation%20can%20edit%20it.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-86685%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-86685%22%20slang%3D%22en-US%22%3ESo%20I%20did%20some%20testing%20and%20any%20one%20you%20send%20the%20file%20to%20can%20edit%20it!%3CBR%20%2F%3E%3CBR%20%2F%3EHere's%20what%20I%20did%3A%3CBR%20%2F%3E%3CBR%20%2F%3E1)%20Removed%20all%20Sharing%20from%20the%20file%20in%20OD%3CBR%20%2F%3E2)%20In%20the%20file%20level%20permissions%2C%20made%20it%20read-only%3CBR%20%2F%3E3)%20sent%20it%20externally%3CBR%20%2F%3E%3CBR%20%2F%3EI%20was%20able%20to%20download%20the%20file%20when%20it%20was%20received%20at%20an%20external%20email%20address%20and%20once%20downloaded%2C%20click%20on%20Enable%20Edit%20and%20was%20able%20them!%3CBR%20%2F%3E%3CBR%20%2F%3EOpps%2C%20not%20good!%3CBR%20%2F%3E%3CBR%20%2F%3EHopefully%20MS%20fixes%20this.%3CBR%20%2F%3E%3CBR%20%2F%3Echeers%3CBR%20%2F%3EPaul%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-86680%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-86680%22%20slang%3D%22en-US%22%3EThanks.%20will%20add%20my%20vote.%20I%20still%20can't%20believe%20somebody%20thought%20this%20was%20the%20best%20default%20option%20to%20use.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-86677%22%20slang%3D%22en-US%22%3ERe%3A%20Attaching%20Onedrive%20file%20default%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-86677%22%20slang%3D%22en-US%22%3E%3CP%3EI%20think%20this%20is%20still%20not%20possible%20for%20now%20to%20change%20default%20permission%20in%20attaching%20OneDrive%20file%20to%20Outlook%20but%20you%20could%20submit%20and%20add%20your%20vote%20in%20%3CA%20href%3D%22https%3A%2F%2Foffice365.uservoice.com%2Fforums%2F289138-office-365-security-compliance%2Fsuggestions%2F19677733-change-default-permissions-when-attaching-a-onedri%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EOffice%20365%20User%20Voice%3C%2FA%3E%26nbsp%3Bbecause%26nbsp%3BMicrosoft%20might%20consider%20to%20include%20this%20on%20their%20future%20updates.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi

 

I have a question, been looking into it and can't find a solution.

 

When our users open a new email and attach a OneDrive file the default permission is anybody in the organisation can edit.  This seems to be a bit insane to me :)  Is there somewhere I can change that default?

 

Also if you then discard the email the file is shared with the organisation anyway.

 

Thanks

 

Jason

12 Replies
Highlighted

I think this is still not possible for now to change default permission in attaching OneDrive file to Outlook but you could submit and add your vote in Office 365 User Voice because Microsoft might consider to include this on their future updates.

Highlighted
Thanks. will add my vote. I still can't believe somebody thought this was the best default option to use.
Highlighted
So I did some testing and any one you send the file to can edit it!

Here's what I did:

1) Removed all Sharing from the file in OD
2) In the file level permissions, made it read-only
3) sent it externally

I was able to download the file when it was received at an external email address and once downloaded, click on Enable Edit and was able them!

Opps, not good!

Hopefully MS fixes this.

cheers
Paul
Highlighted
It's worse for us as once the file has been sent all of the organisation can edit it.
Highlighted

The recently introduced some changes that give us more contrl over this: https://techcommunity.microsoft.com/t5/Office-365/Modern-attachments-just-got-better/td-p/75498

 

But in general I would appreciate a setting that allows us to set a global "read-only", as even with the above improvements it doesnt seem to be possible atm.

Highlighted
Yeah, still waiting for the global setting. I already had those settings mentioned in that link, that was what made me realise the problem was there. :)
Highlighted

I first noticed this in Outlook on the Web in April.  I opened an Office 365 case that was not helpful at all then opened a Premier case which was not helpful either.  I was told this was the way Modern Attachments have always behaved but I disagree.  Premier support said my feature request was forwarded to the product team and that is the last information that I have received.  In May when my Office C2R bits updated to build 1704.8067.2115 Outlook started assigning default permissions as organization can edit.  The documentation here says "message recipients are automatically given permission to edit the file"  - https://support.office.com/en-us/article/Add-an-attachment-in-Outlook-Web-App-41afffaf-bb90-440d-a1b....  I also have  a screenshot of the Office365 roadmap from May that shows "modern attachments are shared by default with recipients can edit."  I hope this information helps someone else and hope this will be configurable at the tenant level in the near future.

 

Note - When the attachment is applied "organization can edit" permissions it is actually an anonymous link rather than setting permissions on the file (won't show up in Delve).  Once the link is clicked by a user then that user shows permissions to the file.

Highlighted
I've noticed something else now. If you attach the file to an email and change your mind and remove it or discard the email, you then have to go and manually remove those permissions. I can see chaos on the horizon.
Highlighted

Hi,

 

Is there any update on this setting as our organization also runs in to this issue.

We don't want the Organization Can Edit setting by default, but we want "Recepient can Edit" as default.

Highlighted
  • Open Office 365 SharePoint admin center
  • Click sharing
  • Set the default link type to direct. 

    This will set the default permissions to recipients can edit.
Highlighted

Hi Mike,

 

Thank  you for your reply. I checked this but this setting is already set like you suggested.

 

image.png

Highlighted

What permissions are the default when using Outlook web rather than the client?  There was a time when Outlook Web was setting "recipients can edit" and the client was still setting "org can edit."  This was fixed in a Click to Run update.

Also, at one point I had to move that switch from direct to internal, save, then change it back to direct and save.  Maybe you need to try the same.