Change the sharing settings for a site

You must be a global or SharePoint admin in Microsoft 365 to change the sharing settings for a site (previously called a "site collection"). Site owners aren't allowed to change these settings.

The steps in this article apply to team sites, communication sites, and classic sites. To learn how to change the external sharing setting for a user's OneDrive, see Change the external sharing setting for a user's OneDrive. For info about changing your organization-level settings, see Manage sharing settings. To change the settings for Teams private or shared channel sites, you must use Set-SPOSite.

For detailed information about how to set up guest access for a site, see Collaborate with guests in a site.

To change the external sharing setting:

  1. Go to Active sites in the new SharePoint admin center, and sign in with an account that has admin permissions for your organization.

    Note

    If you have Office 365 operated by 21Vianet (China), sign in to the Microsoft 365 admin center, then browse to the SharePoint admin center and open the Active sites page.

  2. In the left column, select a site.

  3. Select Sharing.

  4. Select an external sharing option (see the table in the next section).

    Changing the external sharing setting for a site

  5. If you want to limit the sharing of this site by domain, select the Limit sharing by domain check box, and add the domains that you want to allow or block.

  6. If you want to change the default sharing link type or permissions for this site, clear the Same as organization-level setting check boxes and set the values that you want to use for this site. For more info, see Change the default sharing link for a site.

    Changing the default sharing link settings

  7. Select Save.

Which option to select...

Select this option: If you want to:
Anyone Allow site owners and others with full control permission to share the site with people who authenticate. Allow site users to decide when sharing files and folders to require authentication or allow unauthenticated people to access the item. Anyone links to files and folders can be freely forwarded.
New and existing guests Allow site owners and others with full control permission to share the site with people outside the organization. These people will need to sign in and will be added to the directory. Allow site users to share files and folders with people who aren't in the organization's directory.
Existing guests Allow sharing with only people already in your directory. These users may exist in your directory because they previously accepted sharing invitations or because they were manually added. (These users have #EXT# in their user name.)
Only people in your organization Prevent all site users from sharing any site content externally. (This is the default setting for new classic sites.)

The settings available are dependent on your organization-level setting. If you enable external sharing for a site and it's later turned off for your organization, external sharing will become unavailable at the site level and any shared links will stop working. If it's turned back on for the organization, the site sharing setting will return to what it was before and the shared links will resume working.

Note

You might have site content shared with a Microsoft 365 group that has guest members, and the group settings prevent guest members from accessing group resources. In this case, even if you turn on external sharing for the site, guests of the group may not be able to access site content. To enable or disable Microsoft 365 Group guest member access, see Manage guest access in Microsoft 365 Groups.

Default site sharing settings

The table below shows the default sharing setting for each site type.

Site type Default sharing setting
Classic Only people in your organization
OneDrive Anyone
Group-connected sites (including Teams) New and existing guests if the Microsoft 365 Groups setting Let group owners add people outside the organization to groups is On; otherwise Existing guests only
Communication Only people in your organization
Modern sites with no group (#STS3 TeamSite) Only people in your organization

Note

The root communication site (tenant-name.sharepoint.com) has a default sharing setting of Anyone.

Best practices for sharing files and folders with unauthenticated users

Create a secure guest sharing environment

File collaboration in SharePoint with Microsoft 365

Stop sharing files or folders or change permissions