Best practice for "anyone with the link" sharing

%3CLINGO-SUB%20id%3D%22lingo-sub-3451306%22%20slang%3D%22en-US%22%3EBest%20practice%20for%20%22anyone%20with%20the%20link%22%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3451306%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20seems%20the%20only%20option%20for%20allowing%20anyone%20with%20the%20link%20sharing%20is%20to%20enable%20it%20for%20the%20entire%20site%20and%20that%20becomes%20the%20default%20option.%20I'd%20like%20the%20default%20to%20be%20only%20people%20within%20the%20organization%2C%20but%20to%20have%20either%20a%20specified%20document%20library%20or%20link%20to%20a%20sharing%20site%20where%20people%20can%20easily%20share%20external%20documents%20without%20having%20the%20recipient%20verify%20identity.%20What's%20the%20best%20practice%20for%20something%20like%20this%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3451306%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Efiles%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESites%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3451580%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20for%20%22anyone%20with%20the%20link%22%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3451580%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1354301%22%20target%3D%22_blank%22%3E%40gavinarblaster%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eyou%20need%20to%20set%20the%20external%20sharing%20policy%20to%20%22anyone%22%20on%20your%20site%2C%20where%20you%20want%20to%20create%20links%20for%20anyone.%20As%20default%20you%20can%20set%20%22only%20people%20in%20your%20organization%22%2C%20both%20you%20can%20set%20on%20site%20level%20in%20your%20SharePoint%20admin%20center%20in%20M365.%20For%20additional%20security%2C%20you%20can%20set%20an%20expiration%20date%20of%20anyone%20links%20in%20your%20admin%20center%20or%20a%20guest%20expiration%20date%20on%20your%20site%20level.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAfter%20the%20settings%20you%20can%20share%20a%20folder%20or%20documents%20with%20anyone.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsolutions%2Fbest-practices-anonymous-sharing%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsolutions%2Fbest-practices-anonymous-sharing%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%20Dave%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3451598%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20for%20%22anyone%20with%20the%20link%22%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3451598%22%20slang%3D%22en-US%22%3EHave%20a%20look%20at%20sensitivity%20labels%20for%20containers.%20You%20can%20use%20those%20after%20you%20have%20configured%20the%20default%20SharePoint%20org.%20settings%20in%20the%20admin%20center.%3CBR%20%2F%3E%3CBR%20%2F%3EThese%20are%20the%20great%20options%3A%3CBR%20%2F%3E%3CBR%20%2F%3E-Privacy%20(public%20or%20private)%20of%20teams%20sites%20and%20Microsoft%20365%20groups%3CBR%20%2F%3E-External%20user%20access%3CBR%20%2F%3E-External%20sharing%20from%20SharePoint%20sites%3CBR%20%2F%3E-Access%20from%20unmanaged%20devices%3CBR%20%2F%3E-Authentication%20contexts%20(in%20preview)%3CBR%20%2F%3E-Default%20sharing%20link%20for%20a%20SharePoint%20site%20(PowerShell-only%20configuration)%3CBR%20%2F%3E-In%20preview%3A%20Site%20sharing%20settings%20(PowerShell-only%20configuration)%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsensitivity-labels-teams-groups-sites%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsensitivity-labels-teams-groups-sites%3Fview%3Do365-worldwide%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%20notice%20that%20the%20default%20site%20sharing%20settings%20depend%20on%20the%20site%20type%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepoint%2Fchange-external-sharing-site%23default-site-sharing-settings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepoint%2Fchange-external-sharing-site%23default-site-sharing-settings%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EBest%20practices%20for%20sharing%20files%20and%20folders%20with%20unauthenticated%20users%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsolutions%2Fbest-practices-anonymous-sharing%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsolutions%2Fbest-practices-anonymous-sharing%3Fview%3Do365-worldwide%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3451918%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20for%20%22anyone%20with%20the%20link%22%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3451918%22%20slang%3D%22en-US%22%3EHey%20David%2C%20not%20my%20intention%20to%20hijack%20your%20reply.%20But%20only%20one%20minute%20or%20less%20behind%20so..%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3451921%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20for%20%22anyone%20with%20the%20link%22%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3451921%22%20slang%3D%22en-US%22%3EBoth%20of%20you%20provided%20great%20info%2C%20all%20very%20helpful%20so%20thank%20you%20Christian%20and%20David!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3452182%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20for%20%22anyone%20with%20the%20link%22%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3452182%22%20slang%3D%22en-US%22%3EAll%20good%20%3B)%3C%2Fimg%3E%3CSPAN%20class%3D%22lia-unicode-emoji%22%20title%3D%22%3Athumbs_up%3A%22%3E%3Cspan%20class%3D%22lia-unicode-emoji%22%20title%3D%22%3Athumbs_up%3A%22%3E%F0%9F%91%8D%F0%9F%8F%BB%3C%2Fspan%3E%3C%2FSPAN%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

It seems the only option for allowing anyone with the link sharing is to enable it for the entire site and that becomes the default option. I'd like the default to be only people within the organization, but to have either a specified document library or link to a sharing site where people can easily share external documents without having the recipient verify identity. What's the best practice for something like this? 

5 Replies

Hello @gavinarblaster 

 

you need to set the external sharing policy to "anyone" on your site, where you want to create links for anyone. As default you can set "only people in your organization", both you can set on site level in your SharePoint admin center in M365. For additional security, you can set an expiration date of anyone links in your admin center or a guest expiration date on your site level.

 

After the settings you can share a folder or documents with anyone.

https://docs.microsoft.com/en-us/microsoft-365/solutions/best-practices-anonymous-sharing?view=o365-...

 

Regards, Dave

Have a look at sensitivity labels for containers. You can use those after you have configured the default SharePoint org. settings in the admin center.

These are the great options:

-Privacy (public or private) of teams sites and Microsoft 365 groups
-External user access
-External sharing from SharePoint sites
-Access from unmanaged devices
-Authentication contexts (in preview)
-Default sharing link for a SharePoint site (PowerShell-only configuration)
-In preview: Site sharing settings (PowerShell-only configuration)

https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view...

Also notice that the default site sharing settings depend on the site type
https://docs.microsoft.com/en-us/sharepoint/change-external-sharing-site#default-site-sharing-settin...

Best practices for sharing files and folders with unauthenticated users
https://docs.microsoft.com/en-us/microsoft-365/solutions/best-practices-anonymous-sharing?view=o365-...
Hey David, not my intention to hijack your reply. But only one minute or less behind so.. :)
Both of you provided great info, all very helpful so thank you Christian and David!
All good ;)👍🏻