SHARING BEST PRACTICES

Try to manage permissions at the highest level (Group > Site > Library/List > Folder > Item) Avoid breaking Inheritance whenever possible

Limit Sharing Links options and disable the Anyone Link Set “Only People with Existing Access” as the default link type when Copy Link is pressed (see blog) Set up automatic link expiration (only globally enforceable for Anyone) Set default Sharing Links to “View Only” Use Sensitivity Labels to protect containers and content

Only allow Site Owners to share the entire Site - members only files and folders

Disallow Guests from sharing items they don’t own