OneDrive Sharing Links - Does the "Guest Access Expiry policy" Apply to "Specific People" Links?

Copper Contributor

I'm having an issue with a OneDrive integration in an application I'm developing. The integration allows creating "Specific People" sharing links, which are emailed to external users and require them to authenticate their email before accessing the shared file/folder.

 

I have seen in many places that "Specific People" sharing links do not expire. There is no expiry field available when creating the link, and I can't find any expiry settings in the Sharepoint Admin Center that seem to apply to "Specific People" links. However, some of my clients using my OneDrive integration have noticed that many of their "Specific People" links get dropped unexpectedly after a period of one or two months. I have also been able to reproduce this issue in my developer account.

 

There is one setting in the Sharepoint Admin Center that seems like it might apply:

Guest Access to a site or OneDrive will expire automatically after this many days

Since I've seen many references to the fact that "Specific People" links never expire, I thought this setting was not relevant. I also interpreted "Guest Access" as referring to "Guest Users", which can be added in the M365 Admin Center. My integration does not make any use of Guest Users, so I felt fairly confident that this setting did not apply to my use case.

 

However, I can't seem to find definite confirmation that this "Guest Access Expiry" setting does not apply to "Specific People" links. Since my clients links keep getting dropped, and I've now been able to reproduce this on my own account, I have to assume this is either a bug in OneDrive, or that this setting - or another setting I've not yet found - is causing the links to disappear.

 

I've noticed on my own account that some emails get dropped off of the "Specific People" link after a certain period of time, while others do not. Even though I added all the emails to the link at the same time. This inconsistency makes it seem more like a big than something that is being controlled by an admin setting.

 

Can someone please confirm whether the setting I referenced affects "Specific People" links, and/or if there is another OneDrive/Sharepoint/M365 setting that can cause "Specific People" links to be dropped after a certain period of time? Has anyone else noticed "Specific People" links getting dropped over time, or just one or two of the emails on a multi-person link getting dropped?

3 Replies

 

I opened a support ticket with Microsoft. At first they were unable to confirm whether the "Guest Access Expiry" policy affects external emails on "Specific People" sharing links if those external emails are not explicitly added as guest users on the tenant. However, they advised me to turn off the "Guest Access Expiry" policy and presented that as a solution to issue.

 

They also advised me to use the "Manage guest expiry" features to extend the access of external emails to my sharing links. However, not all emails that I share with show up in that feature, and I have seen specific emails disappear from sharing link when those emails were not present in the "Manage guest expiry" settings.

 

The support reps remoted onto my computer a handful of times to grab some diagnostic info on my sharing links. However, I did not receive any conclusive findings from their testing. They just continued to refer me to the "manage guest expiry" feature. I asked them a couple more times if they could confirm that the "Guest Access Expiry" policy applies to non-guest external emails on sharing links, but they still would not confirm that point.

 

Since the back-and-forth on the support ticket was going nowhere, I decided to set up a fresh test on my dev account. The results of previous tests I had set up were hard to evaluate, because during one test I had toggled the "Guest Access Expiry" policy after setting up the sharing link, and in a subsequent test I had shared with some of the same emails that I'd previously shared with. I saw emails disappear from both of those sharing links, but I can't be sure that wasn't related to the "Guest Access Expiry" policy. So I set up a new test link with emails that I have never shared with (and that have not been added as guest users - which I have never done in my testing). My "Guest Access Expiry" policy has been turned off for quite some time now and I will leave it off for the duration of my new test. I will continue to monitor this test link over the next few weeks to see if any emails get dropped. If so, I can be pretty confident that there is a bug involved that is unrelated to the "Guest Access Expiry" policy. If no emails disappear from the link, then that may be partial evidence that the "Guest Access Expiry" policy is in fact related.

 

Since the support ticket was going nowhere and my own test will take a few weeks to monitor, I asked that they archive the support ticket. In my review of the ticket I restated that I had not received confirmation yet about whether or not the "Guest Access Expiry" policy relates to non-guest external emails on sharing links. The support rep sent back this response:

 

As checked further, the "guest access expiry" policy in the SharePoint Admin Center only applies to guests who use sharing links or guests who have direct permissions to a SharePoint site after the guest policy is enabled. It does not apply to external emails that are referenced on OneDrive sharing links if those emails are not explicitly added as guest users.

So this finally appeared to be direct confirmation that the "Guest Access Expiry" policy should not apply to the external emails I've been sharing with (because they were never added as guests). But now I'm confused as to why they've been advising me to turn that policy off and use the "manage guest access" features to mitigate my issue.

 

Obviously I still have a lot of questions, but I'll see what results my new test yields and will update this post when I have more info.