OneDrive Assessment
OneDrive assessment is the central place to manage risks existing in your OneDrive. Refer to the sections below to see how you can manage risks in the risky items, sharing links, and external users perspectives.
*Note: This section is only available if your administrator has enabled your OneDrive assessment.
Risky Items
Risky items display items in your OneDrive that are identified as high or medium risk by Insights. You can manage access to these items if necessary.
If your OneDrive contains high risk items that are shared with external users, a message appears above the table. Click Resolve to access and manage these items.
*Note: High risk items are those that match the sensitivity and exposure definitions specified in Insights. We recommend you confirm and remove access to these items from others.
The following actions are available in this tab:
- Open in browser – Click an item name to open the item or file location.
- View risk details – To view the risk details for an item, such as the sensitivity level, sensitive info type, exposure level, exposure rule, click the risk level in the **Risk level** column.
- Manage access – Select the risky item that you want to manage access and click **Manage access** above the table. The **Manage access** window appears. In the window, users and groups who have permissions to the item, and their user type and permission are listed. You can perform the following actions.
- Remove access – Select one or more users and groups and click **Remove access** to remove their access to the item.
- Edit permission – Select a user or group and click **Edit permission**. In the **Edit permission** window, select the permissions you want to grant to the user or group and click **Save**.
- Apply sensitivity label – Select an item and click **Apply sensitivity label**. In the **Apply sensitivity label** window, select a sensitivity label from the drop-down list and click **Save**.
> ***Note**: You can only apply sensitivity labels to files of the following types: .pdf, .docx, .ppt, .xlsx.
Sharing Links
Sharing links display sharing links that give access to objects in your OneDrive. You can manage permissions shared by the links or stop sharing if necessary.
If there are anyone links found in your OneDrive or specific links being shared externally, the messages appear above the table. Click **Resolve** to access and manage these links.
The following actions are available in this tab:
- Open in browser – Click an item name to open the item or file location.
- Stop sharing – Select one or more links in the table and click **Stop sharing**. Once the sharing is stopped, the links that give access to the items will be removed from Microsoft 365 and will not work for anyone anymore.
- Set expiration date – Select an anyone link and click **Set expiration date**. In the **Set expiration date** window, select a date on which the anyone link will expire and click **Save**.
- Edit permission – Select a specific link and click **Edit permission**. In the **Edit permission** window, select the permission you want to grant to sharers via the specific link and click **Save**.
- Remove user/group view link access – In the **Shared with** column, the number of users and groups with whom the item is shared or the specific user or group name if only one user or group with whom the item is shared is displayed.
Click the number/name link to view the user/group list in the **Users with link access** window.
To remove users’ and groups’ access to the item that is shared via the link, select one or more users and groups and click **Remove access**.
> ***Note**: This action is only available for specific links.
External Users
External users display external users who have access to items in your OneDrive. You can drill down to the specific items they have access to and the specific permissions and remove their access if necessary.
In the table, external users found in your OneDrive and the items they have direct access are listed. You can click the number/item name link in the **Items with direct access** column to view the specific items, the external user’s permissions, the item sensitivity, and by whom the items are shared to the external user in the **Item with direct access** window.
To remove external users’ access to all listed items. Select one or more external users and click **Remove access**.
