SharePoint Online: Permissions & Security 🔒

Microsoft SharePoint Online · Curated Video Lessons

SharePoint permissions control who can see, edit, and manage your sites, libraries, lists, and individual items. Getting permissions right is one of the most important — and most commonly misunderstood — aspects of SharePoint administration. SharePoint uses a group-based permission model with three default permission levels (Owner, Member, Visitor) built on top of a granular permission system that can be configured at the site, library, folder, or item level. This guide covers the full permissions system, external sharing controls, and best practices for keeping your SharePoint environment secure.

Permissions Explained

🔐 SharePoint Online Permissions Explained

A foundational tutorial explaining how SharePoint Online permissions work — covering the SharePoint permission model from the ground up: how permission levels (Full Control, Design, Edit, Contribute, Read, View Only) define what users can do; how SharePoint groups bundle users together for easier management; how site permissions, library permissions, and item-level permissions interact through permission inheritance; and the key concepts of permission inheritance and unique permissions. This is the essential starting point for anyone who needs to manage or understand SharePoint permissions.

• Permission Levels
• SharePoint Groups
• Inheritance
• Unique Permissions

Source: SharePoint Permissions Series

Managing Permissions

👥 How to Manage SharePoint Permissions

A step-by-step tutorial on how to manage SharePoint site permissions in practice — covering how to access the site permissions panel, add and remove users and groups from site permission levels, change a user's permission level, break permission inheritance on a library or list to set unique permissions, restore inherited permissions, and view the effective permissions for any user to understand exactly what they can and cannot access. Managing permissions effectively is critical for keeping your SharePoint sites secure while still enabling collaboration.

• Add/Remove Users
• Break Inheritance
• Effective Permissions
• Permission Levels

Source: SharePoint Permissions Management Series

External Sharing

🌐 SharePoint External Sharing Settings Explained

A thorough explanation of SharePoint's external sharing settings — covering the four sharing levels available at the tenant and site level (Anyone, New and Existing Guests, Existing Guests Only, Only People in Your Organisation), how to configure sharing settings in the SharePoint Admin Center, how to share individual files and folders with external users using shareable links, how to set link expiration dates and password protection on sharing links, and how to revoke external access when it's no longer needed. External sharing is one of the most important security settings to get right in any SharePoint tenant.

• Sharing Levels
• Guest Access
• Link Expiration
• Password Protection

Source: SharePoint External Sharing Series

Sharing Best Practices

🛡️ SharePoint Sharing Settings – Best Practices

A best practices guide to SharePoint sharing settings — covering how to configure sharing settings at the right level (tenant vs site), when to use "Anyone" links vs guest accounts vs internal sharing, how to enforce conditional access policies that require multi-factor authentication for external users, how to use sensitivity labels to automatically apply sharing restrictions to confidential documents, and how to audit sharing activity using the Microsoft 365 audit log to identify and remediate oversharing. These practices help organisations balance collaboration with security in their SharePoint environments.

• Conditional Access
• Sensitivity Labels
• Audit Log
• Oversharing Prevention

Source: SharePoint Security Best Practices Series

Security Best Practices

🏆 SharePoint Online Security Best Practices

A comprehensive overview of SharePoint Online security best practices — covering the full security posture for a well-governed SharePoint tenant: using Microsoft 365 Groups and Teams-connected sites for consistent permission management, applying information barriers to prevent users from different business units from accessing each other's content, using SharePoint site access reviews to periodically review who has access to sensitive sites, configuring data loss prevention (DLP) policies to prevent sensitive data from leaving SharePoint, and using Microsoft Defender for Cloud Apps to monitor and control SharePoint activity. An essential reference for SharePoint administrators responsible for information security.

• Information Barriers
• Access Reviews
• DLP Policies
• Defender for Cloud Apps

Source: SharePoint Online Security Series

Microsoft SharePoint Online · Permissions & Security · Video Guide