Updated September 11, 2020: To ensure the best possible experience for our users, we are delaying some of our deployments to reduce the amount of change flowing into the services. Please see the updated roll-out timeline belowYou will soon be able to create a policy that automatically revokes access for external guests to SharePoint Online (SPO) sites and individual OneDrives after a defined period of time.
This message is associated with Microsoft 365 Roadmap ID 43797.
When will this happen
- We will begin rolling out to targeted release tenants by the end of September and standard release by mid-October.
- We expect to complete the rollout the end of November.
One of the strengths of SharePoint and OneDrive is that it facilitates sharing and collaborating among peers, not only within an organization but also with people outside the organization (guests).
In order to better manage sharing, tenant admins will be able to create a policy to revoke guest access to SPO sites and individual OneDrives after a defined period of time. With this policy, you can limit guest user access; thus guests who are no longer active partners will not retain indefinite access to documents and files.
- This policy is not retroactive; it does not apply to guests who already have access to sites, documents and files.
- The policy applies to a user’s access to a given SPO site or individual OneDrive. When the access period reaches your policy threshold, such as 10 days, then the guest loses access to all content in that site. Guest access expires on a site-by-site basis, determined by when the guest was granted access to each site, whether that is an SPO site or an individual OneDrive.
- After a guest loses access to a site, any user with the ability to share content externally can re-invite the guest to each document or item as needed.
SharePoint site administrators can extend access at any time, up to the limit of the tenant policy. For example, if the tenant policy is 10 days, and today is the 10th of the month, the SharePoint site admin could extend access for an external guest to the 20th of the month. There is no limit on the number of time a site admin can extend access.
SharePoint site administrators will receive e-mail notifications advising of upcoming guest user access expirations.
If you plan to enable this feature, be sure to inform your SharePoint site administrators and users about the new process so that they are prepared to manage guest access as needed.
You can enable this policy, which applies to both SPO and OneDrive, in the SharePoint admin center.
Until you enable the policy, there will be no change in how long new guests may access shared content.
