"Share" and "Copy Link" Default Setting
The "Share" and "Copy Link" functionality, as designed, in SharePoint Online and OneDrive is so dangerous and detrimental, I am writing an entire advisory warning employees of the exposure these could open and the support nightmare they will generate.
While it will take me some time to write up all the suggested changes to this here, I wanted to get this one out now.
"People with existing access" needs to be a "Default Link Type" option in the SharePoint Admin “Sharing” settings and should be the default for all new tenants.
I think there shouldn’t be any other default option allowed, but I will settle for a choice.
End-Users (and even unfamiliar administrators) just think they are sending a link to someone to share an object. They don't realize they are setting unique permissions on an object AND giving access to more than those they are providing a link to.
Managing and removing these shares is also so convoluted, I'm still working on how to explain it.
While this may be an inconvenient default for Power Users, I think protecting the company from exposure and support issues by unfamiliar users is far more important.
I agree. We just are moving to modern libraries and found this out. Please make a default or set the default of at least the copy link to anyone with current access. That one is dangerous and should definitely not have a default to change the security on a file.