sharing-auditor

You can audit external sharing by running tenant-wide scans and site-level permission reviews to inventory guest access and risky configurations across SharePoint Online and OneDrive. The process surfaces anonymous links and guest user permissions for remediation.

The best way to discover anonymous or guest access is to enumerate sites and drive item permissions using Graph API and PowerShell scanning. This approach inventories external sharing configurations to identify risky access points across the tenant.

Yes, you can use Graph API to perform tenant-wide scanning and assess sharing settings. This integration allows scalable, automated reporting of external sharing configurations and guest user permissions across SharePoint and OneDrive.

You can remediate risky permissions by generating safe remediation tasks that require owner approvals before revoking access. This workflow ensures that changes to external sharing configurations are validated and logged for audit compliance.

Yes, this approach supports both SharePoint Online and OneDrive for Business. It applies tenant-level audits and site-level permission discovery to investigate guest users and surface risky external sharing configurations across both platforms.

A key limitation is ensuring safe remediation workflows do not disrupt legitimate business access. Automated PowerShell scanning must be paired with owner notifications and audit logging to validate that revoked guest permissions do not impact valid collaboration.