File sharing

Last updated Oct 17, 2026 Inventory

AI summary

The File Sharing object contains information about all OneDrive file shares in your organization, with 41 properties organized across eight categories covering identification, sharing access, dates, and risk scores. This data helps you identify sharing risks such as external access or expired shares through policies and automations.

All shared OneDrives items with their sharing information

Part of the OneDrive inventory.

In Rencore Governance

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Default	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	No

Properties

41 properties in 8 groups. Open a group to see its properties.

Name and identity 8

Property	Type	Description	Automation placeholder
Display Name	String		`{{FileSharing.DisplayName}}`
Drive Item Folder Name	String	name of the shared drive item folder	`{{FileSharing.DriveItemFolderName}}`
Drive Item Name	String	Name of the shared drive item	`{{FileSharing.DriveItemName}}`
Drive Name	String	Display name shown for the OneDrive. This is usually the combination of the user's first name, middle initial and last name.	`{{FileSharing.DriveName}}`
Item Id	String		`{{FileSharing.ItemId}}`
OneDrive List Id	String	Specifies the GUID that uniquely identifies the list/document library containing the file.	`{{FileSharing.ListId}}`
OneDrive Site Id	String	Specifies the GUID that identifies the site collection containing the file.	`{{FileSharing.SiteId}}`
OneDrive Web Id	String	Specifies the GUID for the site containing the file.	`{{FileSharing.WebId}}`

Organization and location 1

Property	Type	Description	Automation placeholder
Site Url	String	Specifies the site URL of the sharing.	`{{FileSharing.SiteUrl}}`

Activity and usage 2

Property	Type	Description	Automation placeholder
Is Active	Boolean	Indicates whether the sharing is active.	`{{FileSharing.IsActive}}`
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	`{{FileSharing.LastModifiedTime}}`

Dates and scanning 2

Property	Type	Description	Automation placeholder
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	`{{FileSharing.CreatedTime}}`
Expiration	DateTime	A date/time string for which the format conforms to the ISO 8601:2004(E) complete representation for calendar date and time of day and which represents the time and date of expiry for the sharing.	`{{FileSharing.Expiration}}`

Property	Type	Description	Automation placeholder
Created By	String	Shared files created by user	`{{FileSharing.CreatedByUser}}`
Created By Name	String	Related user the sharing was created by.	`{{FileSharing.CreatedByUserName}}`
Direct Access	Boolean	Indicates that the file was shared with the user directly, without a link.	`{{FileSharing.DirectAccess}}`
Shared File Id	String		`{{FileSharing.DocId}}`
Invitation Expiration	DateTime	A date/time string for which the format conforms to the ISO 8601:2004(E) complete representation for calendar date and time of day and which represents the time and date of expiry for the sharing. A null value indicates no expiry.	`{{FileSharing.InvitationExpiration}}`
Invited User/Group Email	String	Specifies the e-mail address of the user	`{{FileSharing.InvitedUserEmail}}`
Modified By	String	Shared files modified by the user	`{{FileSharing.LastModifiedByUser}}`
Modified By Name	String	Related user the sharing was last modified by.	`{{FileSharing.LastModifiedByUserName}}`
Share Url	String	Specifies the URL of the sharing.	`{{FileSharing.LinkWebUrl}}`
Sharing Creation Date	DateTime	The UTC date/time string with complete representation for calendar date and time of day which represents the time and date of creation of the sharing.	`{{FileSharing.ShareCreatedDate}}`
Id	String	The unique share identifier.	`{{FileSharing.ShareId}}`
Share List Id	String		`{{FileSharing.ShareListId}}`
Sharing Last Modified Date	DateTime	The UTC date/time string with complete representation for calendar date and time of day which represents the time and date of the last update of the settings for the sharing.	`{{FileSharing.ShareModifiedDate}}`
Shared anonymously	Boolean	True when shared with anonymous link	`{{FileSharing.SharedAnonymously}}`
External user	Boolean	True when shared with external user	`{{FileSharing.SharedWithExternalUser}}`
Shared with Group	String	Files shared with the group	`{{FileSharing.SharedWithGroup}}`
Shared with Group Name	String	Specifies the name of the group.	`{{FileSharing.SharedWithGroupName}}`
Shared with User	String	Files shared with the user	`{{FileSharing.SharedWithUser}}`
Shared with User Name	String	Specifies the display name of the user.	`{{FileSharing.SharedWithUserName}}`

Security and compliance 3

Property	Type	Description	Automation placeholder
Risk Score	Int32	Stores risk score	`{{FileSharing.RiskScore}}`
Risk Score Update	DateTime	Stores risk score update	`{{FileSharing.RiskScoreLastUpdate}}`
Risk Score Value	String	Stores risk score value like Low_Low	`{{FileSharing.RiskScoreValue}}`

Settings 2

Property	Type	Description	Automation placeholder
Is Default	Boolean	Indicates whether a document sharing location is the user's default sharing location.	`{{FileSharing.IsDefault}}`
Is Folder	Boolean	Indicates whether the current selection is a folder.	`{{FileSharing.IsFolder}}`

Other properties 4

Property	Type	Description	Automation placeholder
Drive	OneDrive	Sharings of files in this drive	`{{FileSharing.Drive}}`
Drive Item	File	Sharings of a file	`{{FileSharing.DriveItem}}`
Drive Item Folder	Folder	Sharings of a folder	`{{FileSharing.DriveItemFolder}}`
Link Kind	String	Specifies the kind of sharing. Allowed values: Anyone in the tenant with the link can edit, Anyone in the tenant with the link can view, Anyone with the link can edit, Anyone with the link can view, Specific people with the link can edit, Specific people with the link can view, Uninitialized.	`{{FileSharing.LinkKind}}`

Relations

Relation	Connector	Description
Group	Microsoft 365	Group which the file sharing is shared with
Sensitivity label	Microsoft 365	Sensitivity label of the OneDrive Shared File
User	Microsoft 365	User who created file sharing
User	Microsoft 365	User who modified file sharing
User	Microsoft 365	User with whom the file sharing is shared (direct or via security group)
OneDrive	OneDrive	All of your users OneDrives in your tenant
File	OneDrive	All OneDrive files stored in a library of a OneDrive
Folder	OneDrive	All OneDrive folders stored in a library of a OneDrive

Segments

Segment	Description
Expired OneDrive file sharings	Shows OneDrive File Sharings file sharings which have reached their expiration date

Actions

Remove document sharing

Policy	Severity	Description
OneDrive file is shared with external users	Medium	Identifies OneDrive files that have been shared externally, increasing the risk of data leakage.

Frequently asked questions

What is the file sharing object in Rencore Governance?

All shared OneDrives items with their sharing information. File sharing is an object type in the OneDrive inventory of Rencore Governance.

Which properties does Rencore Governance collect for file sharing?

Rencore Governance collects 41 properties for File sharing, such as Created By, Created By Name, Initially Scanned and 38 more.

Which policies check file sharing objects?

1 built-in policy checks File sharing objects, such as OneDrive file is shared with external users.

How often is file sharing scanned?

You can change the scan interval of File sharing objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which actions can I run on file sharing objects?

The built-in actions for File sharing objects are Remove document sharing.

Was this page helpful?