SharePoint site collection is owned by external users
AI summary
When external users own SharePoint site collections, it creates security risks and strategic data exposure. This policy identifies site collections with external owners so you can audit and reassign ownership roles. Rencore Governance continuously monitors for external ownership and alerts you when it is detected.
What it detects
Identifies SharePoint site collectionsSite collectionA site collection is the top-level SharePoint container that holds a root site, its subsites, lists, libraries and files.Read more where external usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more are in ownership roles, increasing security risks.
Why it matters
Allowing external users to own SharePoint sites can lead to strategic data exposure risks. Organizations should restrict external ownership and enforce strict permission policies. Rencore Governance can continuously monitor and alert admins of such instances. Regular audits should be performed to identify unauthorized external owners, and ownership roles should be reassigned where necessary.
The rule
Every Site Collection that has any SharePoint Site Collection Owners where Is External is true
In Rencore Governance
Details
| Applies to | Site collection |
|---|---|
| Connector | SharePoint |
| Severity | High |
| Category | Security |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Site collection objects:
- Confidential site referenced in Copilot agent (High)
- Unused classic sites (Low)
- SharePoint extranet sites (Information)
- Classic sites (Information)
- SharePoint site is inactive for more than 90 days (Medium)
- Site collections with subsites (Information)
- SharePoint site collection lacks sensitivity label (Medium)
- SharePoint site collections near storage limit (High)
- SharePoint site collections with disabled owners accounts (Low)
- SharePoint site collections with less than 2 site owners (Medium)
- SharePoint site collections without any owners (Medium)
- SharePoint site collection contains more than 10 agents (Medium)
- Site collection is unused with more than 1 GB (Medium)
- Sites that have no hubsite configured (Information)
- Site collection is near subsite limit (Low)
- Site collection is near the list/library limit (Low)
- Site collections has reached the list/library limit (Medium)
- Site collection has reached the subsite limit (Medium)
Frequently asked questions
What does the SharePoint site collection is owned by external users policy detect?
What does the SharePoint site collection is owned by external users policy detect?The SharePoint site collection is owned by external users policy identifies SharePoint site collections where external users are in ownership roles, increasing security risks.
Which objects does the SharePoint site collection is owned by external users policy check?
Which objects does the SharePoint site collection is owned by external users policy check?The SharePoint site collection is owned by external users policy checks Site collection objects from the SharePoint inventory and reports each one that matches its rule as a violation.
How severe is a violation of the SharePoint site collection is owned by external users policy?
How severe is a violation of the SharePoint site collection is owned by external users policy?Violations of the SharePoint site collection is owned by external users policy have High severity. The policy is in the Security category.
Which module includes the SharePoint site collection is owned by external users policy?
Which module includes the SharePoint site collection is owned by external users policy?The SharePoint site collection is owned by external users policy comes with the SharePoint connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?