What it decides
- Rule
SPO-SHARE-002- Applies to
sharepoint·site- Default severity
- medium
- Basis
- documented-guidance
On what authority
Microsoft's recommendation is explicit and is the reason that page exists: "you might want to enable users to send 'Anyone' links, but you might not want this type of link to be the default when users select to share files and folders. Set the default type of link to something more restrictive, while still allowing users to select other types of links as needed." It is guidance rather than a requirement: the product permits the alternative, the setting exists to be chosen, and an organisation whose work is genuinely public may reasonably choose it.
What it needs to decide
sharing.capabilitysharing.effective_default_link_type
Without these facts the rule answers unknown, which is not a pass and is not a failure: it is the rule saying the evidence could not settle the question.
Where the evidence comes from
sharing: what one site permits, and its default link · live-validated
What a pass does not establish
A default of Specific people means nothing about what people actually choose. Somebody who selects the Anyone link every time produces the same result on a site that passes this rule as on one that fails it, and the rule reads only the default.
- A site that sets no default of its own follows the tenant, and this rule returns unknown rather than reading the absence as a safe value. The tenant setting is a separate fact this collection does not gather.
- The default applies to libraries using the modern experience. Microsoft states it does not affect Outlook on the web, Outlook 2016, or Office clients before 2016, so sharing done through those paths is outside what this rule describes.
Source
The rule as the Engine holds it, at the revision this page was generated from: 1.0.0b6@b4bf9c325233.
Generated from capability-manifest/1.0.0 at1.0.0b6@b4bf9c325233, contract1.0.0b6. Every fact on this page is the Engine's; this site publishes it and does not maintain it.