Hi, How can I allow the use of guest link only for specific users in an organization? thx

If we are talking about ODFB here, it should indeed be possible as you can now control the sharing options per SC. However, the "allow guests" setting is "less restrictive", and the per-SC permissions can only be "more restrictive". Thus you take to do it the other way around - configure ExternalUserAndGuestSharing at the Global level and then switch Guest sharing off for everyone apart the user(s) you want to be able to use this. That's assuming you only want to give them permissions to share files in their own ODFB.

Well, as a regular user you won't be able to use SPO cmdlets because they will require you to be at least a SPO Admin... but as a regular user and site collection owner of your OneDrive, you will be able to use Client Side Object Model (CSOM) against your OneDrive...so to answer your question I would have to dig into what CSOM allows to do in regards of sharing capability at the site collection level. If you review this post from a year ago, http://sadomovalex.blogspot.com.es/2015/10/set-sharing-capabilities-of-sharepoint.html, you could change sharing capability using CSOM, but since you need a tenant object you won't be able to do it since you are a simple site collection owner...but, as I said, a deeper dive into CSOM it's required to fully answer to your question

I'll try to summarize:A GA / SPO admin can change the sharing capability setting of every ODFB SC using PowerShell, despite the fact that he/she is not an SCA for that SC.Conversely, a normal user cannot change the sharing capability setting of his/her own ODFB SC using PowerShell, despite the fact that he/she is an SCA for that SC (because he/she is not a GA / SPO admin). Also, he/she cannot use an UI for that purpose, because it doesn't exist. Maybe (not sure), if really a great expert, he/she could use CSOM...Wow!Thanks. ;-)

Hi all, As you may know, we have a feature coming out soon that will allow admins to specify which security groups are allowed to share externally. This feature will restrict only those users in the specified SG's from sharing both externally and anonymous (if enabled). Now, that doesn't sound like it would be useful in this case, but we also have some work planned to separate out the "anonymous" and "authenticated external" setting. This would mean you could set something like: Security group A and B can share with authenticated external users Only security Group B can share via anonymous links Would that satisfy your requirement? Also, usual disclaimer: This is all still under design and nothing is committed or planned just yet. So stay tuned :) Stephen Rice OneDrive Program Manager II

Allow creation of guest links for specific users only

16 Replies

Salvatore Biscari
Silver Contributor
Mar 06, 2017
AFAIK you can't.
- jcgonzalezmartin
  MVP
  Mar 06, 2017
  Salvatore is correct...you can only configure the link type at the tenant level what means this is a global feature
  - Robert Lien
    Brass Contributor
    Mar 07, 2017
    I would expand on that. The setting does have to be set at the global level yes, but then its also set at the individual site collections (Sharepoint site collections, meaning I can have the global setting on, while having other site collections disabled).
    Also I believe each users OneDrive is its own site collection, even though somehow the settings for User's guest links, is one setting for all users's OneDrive??
    I hope this feature becomese available soon, to where we can control guest links for only specific users, not all users or no users...
    thx

Forum Discussion

Allow creation of guest links for specific users only

16 Replies

Resources