Connector
SharePoint
Pages about the SharePoint connector.
126 pages · All tags
Everything Rencore Governance covers for SharePoint is on the SharePoint connector page.
Getting started 1
- Getting startedAfter your first scan
After the first scan, check the inventory, turn on a first set of policies, fix one violation and add a first automation and dashboard.
Guides 13
- Guides › AutomationArchive inactive SharePoint sites
Find SharePoint sites nobody has used for months, ask the owners if they still need them, and set the unused ones to read-only or archive them.
- Guides › AutomationClean up after a leaver
Find accounts of people who left, with the licenses, workspaces and OneDrive content they still hold, and remove their access with actions or an automation.
- Guides › AutomationClean up redundant, obsolete and trivial content
Find old, unused and trivial files in SharePoint and OneDrive before a Copilot rollout, then archive the files or the Teams and sites that hold them.
- Guides › PoliciesFind agents nobody owns
Find Copilot Studio agents without an active owner or with no use for months, then give them a new owner, quarantine them or delete them.
- Guides › PoliciesFind and fix oversharing
Find files, sites and Teams that are shared beyond their audience with a report and policies, then remove the sharing or let the owners clean it up.
- Guides › PoliciesFind and remove inactive guests
Find guest accounts that have not signed in for months or never accepted their invitation, then disable them or remove them from your workspaces.
- Guides › PoliciesFind sites and groups with missing sensitivity labels
Find SharePoint sites, Teams and Microsoft 365 groups with a missing or wrong sensitivity label, and set the right label on Microsoft 365 groups.
- Guides › PoliciesFind sites close to their storage quota
See SharePoint and OneDrive storage against quota, get a violation before a site or OneDrive is full, and warn the owners or change the quota.
- Guides › PoliciesFix Workspaces without owners
Find Teams, groups and SharePoint sites with no owner, one owner or only disabled owners, then add an owner or ask someone to take over the workspace.
- Guides › Automation › ActionsRemove SharePoint file versions
An automation action that deletes older versions of a SharePoint file, keeping the current version plus the number of major and minor versions you choose.
- Guides › ReportsSee who last changed a file
Build a report that shows who last changed each SharePoint or OneDrive file and when, as of the last scan, for a site, a library or a person.
- Guides › Troubleshooting › Scan errorsSharePoint: forbidden, access denied to resource
A SharePoint scan could not read a site icon because policies or configuration on the tenant deny access to it.
- Guides › Troubleshooting › Scan errorsSharePoint: too many subsites
A Microsoft Graph bug stops the scan of a SharePoint site collection with more than 12 subsites. How to fix it by moving subsites.
Concepts 1
- Concepts › NotificationsSharePoint and OneDrive scanning performance
Rencore Governance splits SharePoint and OneDrive scans into base jobs and files and folders jobs, and adds a new app for OneDrive files.
Use cases 13
- Use cases › What do you want to do?Archive or delete inactive workspaces
Find Teams, sites and communities nobody uses anymore, ask the owners whether they are still needed, and archive or delete the rest.
- Use cases › What do you want to do?Clean up after leavers
Find what people who left still own or hold, such as Teams, sites, OneDrives and licenses, and hand it over or remove it.
- Use cases › What do you want to do?Connect governance to your ticket system
Open a ticket in ServiceNow or another ticket system, or start a Power Automate flow, when a policy finds a violation or an automation runs.
- Use cases › What do you want to do?Delegate governance by country or subsidiary
Give a country, subsidiary or business unit its own view of the tenant, with admins who see and act only inside their scope.
- Use cases › What do you want to do?Find and fix oversharing
Find files, sites and Teams that are shared more widely than they should be, and remove the sharing or ask the owners to clean it up.
- Use cases › What do you want to do?Govern AI agents
Know every Copilot Studio and SharePoint agent, find the ones without an owner, the stale ones and the ones that answer from public websites, and clean them up.
- Use cases › What do you want to do?Govern guests and external users
See every guest in your tenant, find the ones who are inactive or never accepted their invitation, and remove their access.
- Use cases › What do you want to do?Keep every workspace owned
Find Teams, sites and groups with no owner, one owner or only disabled owners, and get a second owner in place.
- Use cases › What do you want to do?Manage storage and file versions
See storage use against quota for every site and OneDrive, get warned before a quota is full, and trim old file versions.
- Use cases › What do you want to do?Prepare your content for Copilot
Before you roll out Copilot, find the sites and files that are shared too widely, have no sensitivity label, or are old and unused.
- Use cases › What do you want to do?Provision governed workspaces
Let users request new Teams and sites from approved templates, with naming rules, business metadata and an approval step.
- Use cases › What do you want to do?Recertify access with reviews
Ask workspace owners on a schedule to confirm who still needs access, and remove the people who do not.
- Use cases › What do you want to do?Report and prove compliance
Show auditors and management what is in your tenant and how well it follows your policies, with reports, dashboards and exports.
Reference 83
- Reference › Review templatesAccess review for site collections
A review of every Site Collection. The SharePoint review template "Access review for site collections" in Rencore Governance.
- Reference › TeamsAll services
The inventory objects that members of the built-in All services team can see in Rencore Governance, grouped by connector.
- Reference › Segments › SharePointApproved SharePoint agents
Identifies SharePoint agents which have been approved. The SharePoint segment "Approved SharePoint agents" in Rencore Governance.
- Reference › Automation actionsAutomation actions for SharePoint
The 41 actions Rencore Governance automations can run on SharePoint, with a description and category for each.
- Reference › AutomationsAutomations for SharePoint
The 9 automation templates Rencore Governance provides for SharePoint, with what each one does and the objects it applies to.
- Reference › ActionsBuilt-in actions for SharePoint
The 19 built-in actions you can run on SharePoint objects in Rencore Governance, with what each one does and the objects it applies to.
- Reference › Policies › SharePointClassic sites
Shows classic SharePoint sites. The built-in SharePoint policy "Classic sites": what it detects and the rule behind it.
- Reference › Reports › SharePointClassic sites
All Site Collections using classic site templates. The SharePoint report "Classic sites" in Rencore Governance.
- Reference › Segments › SharePointClassic sites
All Site Collections using classic site templates. The SharePoint segment "Classic sites" in Rencore Governance.
- Reference › Provisioning templatesCommunication site
The Communication site provisioning template for SharePoint in Rencore Governance.
- Reference › Inventories › SharePointDeleted site collection
All deleted SharePoint site collections. Properties, relations and actions of the Deleted site collection object in the SharePoint inventory.
- Reference › Segments › SharePointExpired SharePoint file sharings
Shows SharePoint File Sharings file sharings which have reached their expiration date. SharePoint segment.
- Reference › Segments › SharePointExternal access
Selects every User that has SharePoint Site Collection Owners. The SharePoint segment "External access" in Rencore Governance.
- Reference › Inventories › SharePointFile
All SharePoint files stored in a library of a SharePoint site. Properties, relations and actions of the File object in the SharePoint inventory.
- Reference › Inventories › SharePointFile sharing
All shared SharePoint files with their sharing information. Properties, relations and actions of the File sharing object in the SharePoint inventory.
- Reference › Inventories › SharePointFolder
All SharePoint folders stored in a library of a SharePoint site. Properties, relations and actions of the Folder object in the SharePoint inventory.
- Reference › Reports › SharePointGroup sites
All sites that are connected to an Microsoft 365 Group. The SharePoint report "Group sites" in Rencore Governance.
- Reference › Segments › SharePointGroup sites
All sites that are connected to an Microsoft 365 Group. The SharePoint segment "Group sites" in Rencore Governance.
- Reference › Reports › SharePointLarge SharePoint lists
Large lists with many files can slow down scan duration and may require an add-on. The SharePoint report "Large SharePoint lists" in Rencore Governance.
- Reference › Inventories › SharePointList/library
All SharePoint lists and libraries. Properties, relations and actions of the List/library object in the SharePoint inventory.
- Reference › Inventories › SharePointLocked site collection
All locked SharePoint site collections. Properties, relations and actions of the Locked site collection object in the SharePoint inventory.
- Reference › Segments › SharePointMy membership
Selects every User that has any SharePoint Site Collection Members. The SharePoint segment "My membership" in Rencore Governance.
- Reference › Segments › SharePointMy ownership
Selects every User that has any SharePoint Site Collection Owners. The SharePoint segment "My ownership" in Rencore Governance.
- Reference › Inventories › SharePointPnP template
Properties, relations, segments and actions of the PnP template object in the SharePoint inventory of Rencore Governance.
- Reference › PoliciesPolicies for SharePoint
The 32 built-in policies Rencore Governance provides for SharePoint, with what each one checks, its severity and its category.
- Reference › Inventories › SharePointRedirected site collection
All SharePoint Site Collections with renamed urls. Properties, relations and actions of the Redirected site collection object in the SharePoint inventory.
- Reference › ReportsReports for SharePoint
The 9 report templates Rencore Governance provides for SharePoint, with the filter, chart type and object of each one.
- Reference › SegmentsSegments for SharePoint
The 14 segments that come with SharePoint in Rencore Governance, with the rule and the object each one selects.
- Reference › InventoriesSharePoint
The 14 object types Rencore Governance collects for SharePoint, with what each one holds and how many properties it has.
- Reference › TeamsSharePoint
The inventory objects that members of the built-in SharePoint team can see in Rencore Governance, grouped by connector.
Show all 83 pages
- Reference › ConnectorsSharePoint
What Rencore Governance covers for SharePoint: 14 object types, 32 policies, 9 automations and 19 built-in actions, grouped by product area.
- Reference › Inventories › SharePointSharePoint agent
SharePoint agents inside a list. Properties, relations and actions of the SharePoint agent object in the SharePoint inventory.
- Reference › Policies › SharePointSharePoint agent is not approved
Identifies SharePoint agents that have not been reviewed or approved before use, posing security risks. The "SharePoint agent is not approved" policy.
- Reference › Policies › SharePointSharePoint agent references confidential site without approval
What the built-in SharePoint policy "SharePoint agent references confidential site without approval" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › SharePointSharePoint agent references more than two site collections
What the built-in SharePoint policy "SharePoint agent references more than two site collections" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › SharePointSharePoint agent uses outdated list
Detects SharePoint agents relying on lists that have not been updated in over a year, affecting AI accuracy. The "SharePoint agent uses outdated list" policy.
- Reference › Policies › SharePointSharePoint agent uses outdated site collection
What the built-in SharePoint policy "SharePoint agent uses outdated site collection" in Rencore Governance detects, and the rule behind it.
- Reference › Segments › SharePointSharepoint default
Selects every User that has any SharePoint Site Collection Members or any SharePoint Site Collection Owners. SharePoint segment.
- Reference › Policies › SharePointSharePoint extranet sites
Sites without MS Teams where External Sharing is active. The built-in SharePoint policy "SharePoint extranet sites": what it detects and the rule behind it.
- Reference › Policies › SharePointSharePoint file is older than 5 years
Detects SharePoint files that have not been modified in over five years and may be outdated. Built-in SharePoint policy "SharePoint file is older than 5 years".
- Reference › Policies › SharePointSharePoint file is shared with external users
Detects SharePoint files that have been shared externally, potentially exposing sensitive data. The "SharePoint file is shared with external users" policy.
- Reference › Policies › SharePointSharePoint file is shared with inactive external user
What the built-in SharePoint policy "SharePoint file is shared with inactive external user" in Rencore Governance detects, and the rule behind it.
- Reference › Inventories › SharePointSharePoint group
Properties, relations, segments and actions of the SharePoint group object in the SharePoint inventory of Rencore Governance.
- Reference › Policies › SharePointSharePoint libraries with disabled search
Shows SharePoint Libraries where search has been disabled. Built-in SharePoint policy "SharePoint libraries with disabled search".
- Reference › Policies › SharePointSharePoint lists/libraries with more than 5000 items/documents
Shows SharePoint lists or libraries with more than 5000 items or documents. The "SharePoint lists/libraries with more than 5000 items/documents" policy.
- Reference › Policies › SharePointSharePoint site collection contains more than 10 agents
What the built-in SharePoint policy "SharePoint site collection contains more than 10 agents" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › SharePointSharePoint site collection is owned by external users
What the built-in SharePoint policy "SharePoint site collection is owned by external users" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › SharePointSharePoint site collection lacks sensitivity label
Detects SharePoint site collections missing sensitivity labels, increasing data security risks. The "SharePoint site collection lacks sensitivity label" policy.
- Reference › Policies › SharePointSharePoint site collections near storage limit
Shows SharePoint Site Collections using more than 90% of their available storage space. The "SharePoint site collections near storage limit" policy.
- Reference › Policies › SharePointSharePoint site collections with disabled owners accounts
Shows SharePoint site collections that have any site owner account currently disabled. The "SharePoint site collections with disabled owners accounts" policy.
- Reference › Policies › SharePointSharePoint site collections with less than 2 site owners
Shows SharePoint site collections that have less than 2 site owners. Built-in SharePoint policy "SharePoint site collections with less than 2 site owners".
- Reference › Policies › SharePointSharePoint site collections without any owners
Shows SharePoint site collections that have no site owner. Built-in SharePoint policy "SharePoint site collections without any owners".
- Reference › Policies › SharePointSharePoint site has broken permission inheritance
Detects SharePoint sites where permission inheritance is broken, increasing security risks. The "SharePoint site has broken permission inheritance" policy.
- Reference › Policies › SharePointSharePoint site is inactive for more than 90 days
What the built-in SharePoint policy "SharePoint site is inactive for more than 90 days" in Rencore Governance detects, and the rule behind it.
- Reference › Inventories › SharePointSharePoint site template
Properties, relations, segments and actions of the SharePoint site template object in the SharePoint inventory of Rencore Governance.
- Reference › Inventories › SharePointSharePoint special group
This is a special group for SharePoint which is used to give access to content in SharePoint to special group of users. SharePoint special group object.
- Reference › Policies › SharePointSharePoint subsite has unique permissions
Detects SharePoint subsites that have unique permissions, making security management complex. The "SharePoint subsite has unique permissions" policy.
- Reference › Inventories › SharePointSite
All root site and subsites of a SharePoint site collection. Properties, relations and actions of the Site object in the SharePoint inventory.
- Reference › Inventories › SharePointSite collection
All SharePoint site collections in your tenant. Properties, relations and actions of the Site collection object in the SharePoint inventory.
- Reference › Policies › SharePointSite collection has reached the subsite limit
Shows Site Collections that have reached the Subsite limit of 2000 sites per Site Collection. The "Site collection has reached the subsite limit" policy.
- Reference › Policies › SharePointSite collection is near subsite limit
Shows Site Collections that have nearly reached the Subsite limit of 2000 sites per Site Collection. The "Site collection is near subsite limit" policy.
- Reference › Policies › SharePointSite collection is near the list/library limit
What the built-in SharePoint policy "Site collection is near the list/library limit" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › SharePointSite collection is unused with more than 1 GB
Shows sites which have not been used in last 90 days and are larger than 1 GB. Built-in SharePoint policy "Site collection is unused with more than 1 GB".
- Reference › Policies › SharePointSite collections has reached the list/library limit
What the built-in SharePoint policy "Site collections has reached the list/library limit" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › SharePointSite collections with subsites
Shows all Site Collections that have more subsites than the root site. Built-in SharePoint policy "Site collections with subsites".
- Reference › Segments › SharePointSite with SharePoint agents
Identifies SharePoint site collections which contain SharePoint agents. The SharePoint segment "Site with SharePoint agents" in Rencore Governance.
- Reference › Policies › SharePointSites that have no hubsite configured
What the built-in SharePoint policy "Sites that have no hubsite configured" in Rencore Governance detects, and the rule behind it.
- Reference › Policies › SharePointSites with disabled search
Shows SharePoint Sites where search has been disabled. The built-in SharePoint policy "Sites with disabled search": what it detects and the rule behind it.
- Reference › Reports › SharePointSites with external sharing enabled
All sites that have external sharing enabled. The SharePoint report "Sites with external sharing enabled" in Rencore Governance.
- Reference › Segments › SharePointSites with external sharing enabled
All sites that have external sharing enabled. The SharePoint segment "Sites with external sharing enabled" in Rencore Governance.
- Reference › Reports › SharePointSites with more than 50GB
All sites that host more than 50 GB of data. The SharePoint report "Sites with more than 50GB" in Rencore Governance.
- Reference › Segments › SharePointSites with more than 50GB
All sites that host more than 50 GB of data. The SharePoint segment "Sites with more than 50GB" in Rencore Governance.
- Reference › Reports › SharePointSites without hub sites
All sites that do not have a hub site assigned. The SharePoint report "Sites without hub sites" in Rencore Governance.
- Reference › Segments › SharePointSites without hub sites
All sites that do not have a hub site assigned. The SharePoint segment "Sites without hub sites" in Rencore Governance.
- Reference › Provisioning templatesTeam site
The Team site provisioning template for SharePoint in Rencore Governance.
- Reference › Provisioning templatesTeam site (no Microsoft 365 group)
The Team site (no Microsoft 365 group) provisioning template for SharePoint in Rencore Governance.
- Reference › Reports › SharePointTotal number of SharePoint files
Total number of SharePoint Files. The SharePoint report "Total number of SharePoint files" in Rencore Governance.
- Reference › Segments › SharePointUnapproved SharePoint agents
Identifies SharePoint agents which have not been approved. The SharePoint segment "Unapproved SharePoint agents" in Rencore Governance.
- Reference › Policies › SharePointUnused classic sites
Shows classic SharePoint sites. The built-in SharePoint policy "Unused classic sites": what it detects and the rule behind it.
- Reference › Policies › SharePointUnused SharePoint files
Shows SharePoint files that are older than 5 years. The built-in SharePoint policy "Unused SharePoint files": what it detects and the rule behind it.
- Reference › Reports › SharePointUnused SharePoint site collections with more than 1 GB
Shows sites which have not been used in last 90 days and are larger than 1 GB. SharePoint report.
- Reference › Reports › SharePointUnused sites
Sites that haven't been used for more than 90 days. The SharePoint report "Unused sites" in Rencore Governance.
- Reference › Segments › SharePointUnused sites
Sites that haven't been used for more than 90 days. The SharePoint segment "Unused sites" in Rencore Governance.
FAQ 2
- FAQWhat are the template codes shown for SharePoint sites?
SharePoint site template codes are created by Microsoft, which publishes no official list of them. You can look up which template a site uses and what its code…
- FAQWhy does Rencore Governance not show a SharePoint site collection as locked when archiving a team?
Archiving a team has no relation to the lock state of the related SharePoint Site Collection, so Rencore Governance does not show it as locked.
Glossary 13
- GlossaryClassic site
A classic site is a SharePoint site built on the older classic experience, with classic pages and lists instead of modern ones.
- GlossaryDeleted object
When you delete a user or a Microsoft 365 group, Microsoft Entra ID keeps it soft-deleted for 30 days. In that time you can restore it with its memberships.
- GlossaryFiles & Folders add-on
Files & Folders is an add-on that adds metadata for all SharePoint, OneDrive and Loop files and folders to the inventory. It is included in the Enterprise Plan…
- GlossaryPermission inheritance
SharePoint sites, lists, folders and files inherit their permissions from their parent by default. When inheritance is broken, the item gets unique permissions…
- GlossaryPermission level
A permission level is a named set of SharePoint permissions, such as Full Control, Edit or Read, that you grant to a user or a SharePoint group.
- GlossarySharePoint
SharePoint is the Microsoft 365 service for intranet sites, document libraries and file sharing. Rencore Governance covers it with the SharePoint connector…
- GlossarySharePoint agent
A SharePoint agent is an AI agent that helps users find information and insights on SharePoint sites and document libraries. It answers each user from the…
- GlossarySharePoint group
A SharePoint group is a set of users defined in a SharePoint site and given a permission level, such as the Owners, Members or Visitors group of the site.
- GlossarySharing link
A sharing link is a link in SharePoint or OneDrive that grants access to a file or folder, sometimes to people outside your organization.
- GlossarySite collection
A site collection is the top-level SharePoint container that holds a root site, its subsites, lists, libraries and files. In Rencore Governance it is a root…
- GlossaryStorage limit
A storage limit, or quota, caps how much space a SharePoint site or a OneDrive can use from the storage of your tenant.
- GlossarySubsite
A subsite is a site created under another SharePoint site in the same site collection. It is the older way to structure SharePoint, before flat sites joined by…
- GlossaryVersion history
Version history keeps earlier versions of each file in a SharePoint or OneDrive library. Every stored version counts against the storage limit of the site.