Block downloading sharepoint

%3CLINGO-SUB%20id%3D%22lingo-sub-3300237%22%20slang%3D%22en-US%22%3EBlock%20downloading%20sharepoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3300237%22%20slang%3D%22en-US%22%3E%3CP%3EWe%26nbsp%3B%20built%20outlook%20365%20share%20point%20portal%26nbsp%3B%20wherein%20we%20need%20block%20downloading%20(%20ppt)%20where%20as%20the%20Read%20access%20allows%20to%20download%20.%20Restricted%20view%20is%20not%20allowing%20to%20access%20the%20site%20and%20it%20ask%20for%20access%20.%20How%20do%20i%20block%20the%20download%20through%20front%20end%20rather%20preventing%20from%20the%20remote%20setting.%20Pl%20suggest%20how%20do%20i%20control%20through%20permission%20level%20shown%20below%20to%20prevent%20the%20downloading%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22aravind_c_0-1651494536366.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F368406i5CC2812A63339798%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22aravind_c_0-1651494536366.png%22%20alt%3D%22aravind_c_0-1651494536366.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3300237%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eblock%20downloading%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3300938%22%20slang%3D%22en-US%22%3ERe%3A%20Block%20downloading%20sharepoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3300938%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1378748%22%20target%3D%22_blank%22%3E%40aravind_c%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EIn%20your%20case%2C%20I%20would%20deploy%20Conditional%20Access%20with%20Session%20Control%20and%20block%20downloads.%20You%20can%20block%20whoever%20you%20want%20individually.%20To%20implement%20this%2C%20you'll%20need%20Premium%20P1.%20If%20your%20users%20have%20Business%20Premium%2C%20that%20will%20do.%20Check%20here%20details%2C%20and%20youtube%20video%20is%20on%20how%20it%20looks%20like%20to%20deploy%20and%20on%20users%20side%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fdefender-cloud-apps%2Fproxy-intro-aad%23supported-apps-and-clients%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EProtect%20with%20Microsoft%20Defender%20for%20Cloud%20Apps%20Conditional%20Access%20App%20Control%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20see%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3D9NIcw5jghyA%26amp%3Bt%3D49s%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3ERestrict%20user%20file%20downloads%20in%20SharePoint%20-%20YouTube%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EIt's%20important%20to%20note%20that%20when%20it%20comes%20to%20SharePoint%20permissions%2C%20you%20can%20grant%20Site%20permissions%20read%20access%2C%20but%20library%20permissions%20can%20be%20set%20to%20Restricted%20view.%20Also%20when%20doing%20this%2C%20it's%20important%20to%20remove%20targeted%20user%20from%20SharePoint%20site%20membership%2C%20because%20you%20are%20going%20to%20assign%20individual%20permissions.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20At%20site%20level%2C%20you%20assign%20read%20permission%20to%20targeted%20user.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Adin_Calkic_0-1651535682140.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F368694iB5B7F20E518C9A2F%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Adin_Calkic_0-1651535682140.png%22%20alt%3D%22Adin_Calkic_0-1651535682140.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Adin_Calkic_1-1651535689473.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F368695iF464F9DB57539900%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Adin_Calkic_1-1651535689473.png%22%20alt%3D%22Adin_Calkic_1-1651535689473.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E2.%20Now%20select%20Document%20library%20(where%20your%20documents%20are)%20to%20go%20Settings%20%26gt%3B%20Library%20settings.%20Click%20on%20Permissions%20for%20this%20Document%20library.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Adin_Calkic_2-1651535827481.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F368696i652D6C6A1F0E1BB0%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Adin_Calkic_2-1651535827481.png%22%20alt%3D%22Adin_Calkic_2-1651535827481.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Adin_Calkic_3-1651535884341.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F368697i1CD4BBB132E8C25D%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Adin_Calkic_3-1651535884341.png%22%20alt%3D%22Adin_Calkic_3-1651535884341.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EClick%20on%20Grant%20permissions%20and%20assign%20permissions.%20Make%20sure%20that%20you%20remove%20inherited%20permissions%20for%20your%20targeted%20users%20from%20the%20site%20level.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThat%20should%20do%20the%20trick%2C%20but%20the%20best%20option%20is%20to%20use%20CA%20policy.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EGood%20luck.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3300275%22%20slang%3D%22en-US%22%3ERe%3A%20Block%20downloading%20sharepoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3300275%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1370919%22%20target%3D%22_blank%22%3E%40Adin_Calkic%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20constructed%20web%26nbsp%3B%20page%20like%20this%20.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22aravind_c_2-1651498352399.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F368414iD022CB10DF6E5CD9%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22aravind_c_2-1651498352399.png%22%20alt%3D%22aravind_c_2-1651498352399.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20click%20inside%20product%26nbsp%3B%20(%20say%20example)%20%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22aravind_c_1-1651498144474.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F368413iA9D2C343558E8301%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22aravind_c_1-1651498144474.png%22%20alt%3D%22aravind_c_1-1651498144474.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20I%20provide%20the%26nbsp%3B%20Read%20option%20%2C%20it%26nbsp%3B%20is%20allowing%26nbsp%3B%20%26nbsp%3Bto%20access%20all%20the%20pages%26nbsp%3B%20%2B%20also%20downloading%26nbsp%3B%20the%20ppt%20..%26nbsp%3B%20But%20for%20some%20users%2C%20I%20need%20to%20restrict%20them%20from%20down%20loading%26nbsp%3B%20the%20ppt%20or%20any%20other%20file%26nbsp%3B%20but%20they%20need%20to%20view%26nbsp%3B%20all%20the%20contents%20%26amp%3B%20pages%20..How%20do%20I%20do%20this%20through%20permission%20level%26nbsp%3B%20for%20some%20users%20.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3300261%22%20slang%3D%22en-US%22%3ERe%3A%20Block%20downloading%20sharepoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3300261%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1378748%22%20target%3D%22_blank%22%3E%40aravind_c%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20have%20a%20question%20for%20you%20-%20Would%20you%20like%20to%20download%20only%20one%20file%3F%20Or%20just%20the%20site%3F%20Or%20for%20the%20entire%20SharePoint%20site%20in%20your%20tenant%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

We  built outlook 365 share point portal  wherein we need block downloading ( ppt) where as the Read access allows to download . Restricted view is not allowing to access the site and it ask for access . How do i block the download through front end rather preventing from the remote setting. Pl suggest how do i control through permission level shown below to prevent the downloading ?

 

aravind_c_0-1651494536366.png

 

3 Replies

Hi @aravind_c ,

 

I have a question for you - Would you like to download only one file? Or just the site? Or for the entire SharePoint site in your tenant?

Hello @Adin_Calkic 

We have constructed web  page like this .

 

aravind_c_2-1651498352399.png

 

 

If you click inside product  ( say example) , 

 

aravind_c_1-1651498144474.png

 

When I provide the  Read option , it  is allowing   to access all the pages  + also downloading  the ppt ..  But for some users, I need to restrict them from down loading  the ppt or any other file  but they need to view  all the contents & pages ..How do I do this through permission level  for some users .

 

Hi @aravind_c ,

 

In your case, I would deploy Conditional Access with Session Control and block downloads. You can block whoever you want individually. To implement this, you'll need Premium P1. If your users have Business Premium, that will do. Check here details, and youtube video is on how it looks like to deploy and on users side: Protect with Microsoft Defender for Cloud Apps Conditional Access App Control | Microsoft Docs

 

Please see here: Restrict user file downloads in SharePoint - YouTube 

 

It's important to note that when it comes to SharePoint permissions, you can grant Site permissions read access, but library permissions can be set to Restricted view. Also when doing this, it's important to remove targeted user from SharePoint site membership, because you are going to assign individual permissions.

 

1. At site level, you assign read permission to targeted user.

Adin_Calkic_0-1651535682140.png

Adin_Calkic_1-1651535689473.png

2. Now select Document library (where your documents are) to go Settings > Library settings. Click on Permissions for this Document library.

 

Adin_Calkic_2-1651535827481.png

Adin_Calkic_3-1651535884341.png

Click on Grant permissions and assign permissions. Make sure that you remove inherited permissions for your targeted users from the site level.

 

That should do the trick, but the best option is to use CA policy.

 

Good luck.