Detections
Analytics

MS.SHAREPOINT.2.2v1 - File and folder default sharing permissions SHALL be set to view only.

Information

Edit access to files and folders could allow a user to make unauthorized changes. By restricting default permissions to **View** only, administrators prevent unintended or malicious modification.

Solution

1. Sign in to the SharePoint admin center.

2. Select Policies \> Sharing.

3. Under File and folder links, set the permission that is selected by default for sharing links to View.

4. Select Save.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6

Plugin: microsoft_azure

Control ID: 311625bd825712a9061b24830e17780a29c454525c3d45c593e145950866ac05