Guest users cannot share items they do not own

​

What this check verifies

Microsoft 365 SharePoint tenant sharing settings evaluate whether guest resharing is disabled (resharingEnabled=false). Focus is the org-level option that blocks guests from sharing items they don’t own.

​

Risk

Allowing guest resharing threatens confidentiality and integrity:

• External users can extend access beyond oversight
• Edit permissions enable unauthorized changes or deletion
• Link sprawl reduces accountability and control

Sensitive data can spread across sites, hindering revocation and response.

​

Recommendation

Disable guest resharing and apply least privilege so only owners or designated roles can share. Limit external sharing scope, require authenticated Specific people links with expirations, review guest access regularly, and monitor sharing activity to enforce defense in depth.

​

Remediation

​

References

• https://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off
• https://learn.microsoft.com/en-us/sharepoint/external-sharing-overview

​

Where this check fires

This check runs on every scheduled scan against your Microsoft 365 account. Findings appear at Cloud Security → Findings filterable by Check ID = sharepoint_guest_sharing_restricted. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

---

← Back to Microsoft 365 checks