SharePoint file is shared with inactive external user
AI summary
Rencore Governance detects when SharePoint files are shared with external users who have not signed in for over six months. You can use this to revoke access for inactive accounts and reduce security risks.
What it detects
Highlights SharePoint files shared with external usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more who have been inactive for over six months.
Why it matters
Inactive external users retaining access to SharePoint files present security risks. Organizations should use Rencore Governance to regularly audit external sharingSharing linkA sharing link is a link in SharePoint or OneDrive that grants access to a file or folder, sometimes to people outside your organization.Read more permissions and revoke access for inactive accounts.
The rule
Every File Sharing where Is External is true and Expiration is default or Expiration is past 1 days ago that has any Sp File Sharing Information Invited Users where Last Sign-In is not default and Last Sign-In is more than 6 months ago and Is External is true
In Rencore Governance
Details
| Applies to | File sharing |
|---|---|
| Connector | SharePoint |
| Severity | Medium |
| Category | External Access |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check File sharing objects:
Frequently asked questions
What does the SharePoint file is shared with inactive external user policy detect?
What does the SharePoint file is shared with inactive external user policy detect?The SharePoint file is shared with inactive external user policy highlights SharePoint files shared with external users who have been inactive for over six months.
Which objects does the SharePoint file is shared with inactive external user policy check?
Which objects does the SharePoint file is shared with inactive external user policy check?The SharePoint file is shared with inactive external user policy checks File sharing objects from the SharePoint inventory and reports each one that matches its rule as a violation.
How severe is a violation of the SharePoint file is shared with inactive external user policy?
How severe is a violation of the SharePoint file is shared with inactive external user policy?Violations of the SharePoint file is shared with inactive external user policy have Medium severity. The policy is in the External Access category.
Which module includes the SharePoint file is shared with inactive external user policy?
Which module includes the SharePoint file is shared with inactive external user policy?The SharePoint file is shared with inactive external user policy comes with the SharePoint connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?