| Service | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| SharePoint | Advanced Management | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/advanced-management.md | Previously updated : 10/03/2022 Title: "Microsoft Syntex Advanced Management (Preview) overview" Last updated : 03/01/2023 + Title: "Microsoft Syntex - SharePoint Advanced Management overview" ms.localizationpriority: normal search.appverid: - MET150-description: "Learn about Microsoft Syntex Advanced Management and how you can use it in your organization." +recommendations: false +description: "Learn about Microsoft Syntex - SharePoint Advanced Management and how you can use it in your organization." -# Microsoft Syntex Advanced Management (Preview) overview -<! -> -Microsoft Syntex Advanced Management is a Microsoft 365 add-on that provides a suite of features that can help you: +# Microsoft Syntex - SharePoint Advanced Management overview ++Microsoft Syntex - SharePoint Advanced Management is a Microsoft 365 add-on that provides a suite of features that can help you: - Manage and govern SharePoint and OneDrive - Enhance Microsoft 365 secure collaboration capabilities -<! -Articles that cover features that use Syntex Advanced Management are designated with [!INCLUDE[Advanced Management](includes/advanced-management.md)] at the top. -> +SharePoint Advanced Management features are administered by SharePoint administrators in the SharePoint admin center. Some features can be used by site owners. ++> [!IMPORTANT] +> SharePoint Advanced Management is currently rolling out. Licenses and functionality will become available to organizations throughout March and early April. ++## Advanced access policies for secure content collaboration ++**[Conditional access policy for SharePoint sites and OneDrive](authentication-context-example.md)** - With Azure Active Directory authentication context, you can enforce more stringent access conditions when users access SharePoint sites. Authentication contexts can be directly applied to sites or used with sensitivity labels to connect Azure AD conditional access policies to labeled sites. ++**[Data access governance insights for SharePoint sites](data-access-governance-reports.md)** - These reports help you discover sites that contain potentially overshared or sensitive content. You can use these reports to assess and apply appropriate security and compliance policies. ++**[Restricted access control policy for OneDrive](limit-access.md)** - You can limit OneDrive access to members of a specific security group if you want to allow only certain users to have access. Even if other users outside of these security groups are licensed for OneDrive, they won't have access to their own OneDrive or any shared OneDrive content. ++**[Restricted access control for SharePoint sites](restricted-access-control.md)** - You can restrict the access of a SharePoint site and its content only to the members of Microsoft 365 group connected to the site. Users who are not in the Microsoft 365 group won't have access even if they previously had site access permissions to a file. ++**[Secure SharePoint document libraries](/microsoft-365/compliance/sensitivity-labels-sharepoint-default-label)** - When SharePoint is enabled for sensitivity labels, you can configure a default label for document libraries. Then, any new files uploaded to that library, or existing files edited in the library will have that label applied if they don't already have a sensitivity label, or they have a sensitivity label but with lower priority. ++## Advanced sites content lifecycle management ++**[Block download policy for SharePoint sites and OneDrive](block-download-from-sites.md)** - You can block download of files from SharePoint sites or OneDrive without needing to use Azure Active Directory conditional access policies. Users have browser-only access with no ability to download, print, or sync files. They also won't be able to access content through apps, including the Microsoft Office desktop apps. -## Management and governance +**[Block download of Teams meeting recording files from SharePoint or OneDrive (Preview)](/microsoftteams/block-download-meeting-recording)** - You can restrict the download of Teams meeting recordings stored in OneDrive and SharePoint to members of a security group. This provides additional governance capabilities for meeting recordings. -**[Data access governance reports](data-access-governance-reports.md)** - These reports help you discover sites that contain potentially overshared or sensitive content. You can use these reports to assess and apply appropriate security and compliance policies. +**[Recent SharePoint admin actions](recent-actions-panel.md)** - You can review and export the most recent site-related actions you made in the SharePoint admin center in the last 30 days by using the recent actions panel. Site property changes like site name, site creation and deletion, site URL, sharing settings, and storage quota are listed as actions in the panel. Note that changes made to organization-level settings, and changes made by other admins are not shown in the panel. -**[Limit OneDrive access by security group](limit-access.md)** - You can limit OneDrive access to members of a specific security group if you want to allow only certain users to have access. Even if other users outside of these security groups are licensed for OneDrive, they won't have access to their own OneDrive or any shared OneDrive content. +## Licensing -**[Review recent SharePoint site actions](recent-actions-panel.md)** - You can review and export the most recent site-related actions you made in the SharePoint admin center in the last 30 days by using the recent actions panel. Site property changes like site name, site creation and deletion, site URL, sharing settings, and storage quota are listed as actions in the panel. Note that changes made to organization-level settings, and changes made by other admins are not shown in the panel. +SharePoint Advanced Management is a per-user license. To use SharePoint Advanced Management, you must have a license for each user in your organization. (It's not required for frontline workers with F licenses or for guests.) Users must also be licensed for SharePoint K, P1, or P2 via standalone or a Microsoft 365 suite. -## Secure collaboration +You can purchase the *SharePoint Advanced Management Plan 1* add-on in the Microsoft 365 admin center, through a Cloud Solution Provider (CSP), or through volume licensing enrollment. Contact your Microsoft account manager for further information. -**[Manage site access based on sensitivity label](authentication-context-example.md)** - With Azure Active Directory authentication context, you can enforce more stringent access conditions when users access SharePoint sites. Authentication contexts can be directly applied to sites or used with sensitivity labels to connect Azure AD conditional access policies to labeled sites. +SharePoint Advanced Management is available for Commercial, WW Commercial Public Sector, Education, Charity, and US GCC, GCC-High, and DoD customers. -**[Configure a default sensitivity label for a SharePoint document library](/microsoft-365/compliance/sensitivity-labels-sharepoint-default-label)** - When SharePoint is enabled for sensitivity labels, you can configure a default label for document libraries. Then, any new files uploaded to that library, or existing files edited in the library will have that label applied if they don't already have a sensitivity label, or they have a sensitivity label but with lower priority. +SharePoint Advanced Management is $3 per user per month for commercial customers. -**[Restricted Access Control for SharePoint sites](restricted-access-control.md)** - You can restrict the access of a SharePoint site and its content only to the members of Microsoft 365 group connected to the site. Users who are not in the Microsoft 365 group won't have access even if they previously had site access permissions to a file. +Articles that cover features that use SharePoint Advanced Management are designated with [!INCLUDE[Advanced Management](includes/advanced-management.md)] at the top. -**[Block the download of files from a SharePoint site or OneDrive](block-download-from-sites.md)** - You can block download of files from SharePoint sites or OneDrive without needing to use Azure Active Directory conditional access policies. Users have browser-only access with no ability to download, print, or sync files. They also won't be able to access content through apps, including the Microsoft Office desktop apps. +## Related topics +[Microsoft Syntex documentation](/microsoft-365/syntex) |
| SharePoint | Authentication Context Example | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/authentication-context-example.md | Previously updated : 06/07/2021 Title: "Conditional access policies for SharePoint sites" Last updated : 03/01/2023 + Title: "Conditional access policy for SharePoint sites and OneDrive" search.appverid: description: "Learn about how to use Azure Active Directory conditional access and authentication context with SharePoint sites and sensitivity labels." -# Conditional access policies for SharePoint sites +# Conditional access policy for SharePoint sites and OneDrive + With [Azure Active Directory authentication context](/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#configure-authentication-contexts), you can enforce more stringent access conditions when users access SharePoint sites. You can use authentication contexts to connect an [Azure AD conditional access p Note that this capability can't be applied to the root site in SharePoint (for example, https://contoso.sharepoint.com). -## Requirements and limitations +## Requirements Using authentication context with SharePoint sites requires one of the following licenses:++- Microsoft Syntex - SharePoint Advanced Management - Microsoft 365 E5-- Microsoft 365 E5 Compliance-- Microsoft 365 E5 Information Protection and Governance++## Limitations Some apps don't work with authentication contexts. We recommend testing apps on a site with authentication context enabled before broadly deploying this feature. To create a conditional access policy 1. Choose if you want to enable the policy, and then click **Create**. +### Apply the authentication context directly to a site ++You can directly apply an authentication context to a SharePoint site by using the [Set-SPOSite](/powershell/module/sharepoint-online/set-sposite) PowerShell cmdlet. ++In the following example, we apply the authentication context we created above to a site called "research." ++```powershell +Set-SPOSite -Identity https://contoso.sharepoint.com/sites/research -ConditionalAccessPolicy AuthenticationContext -AuthenticationContextName "Sensitive information - guest terms of use" +``` + ### Set a sensitivity label to apply the authentication context to labeled sites If you want to use a sensitivity label to apply the authentication context, update a sensitivity label (or create a new one) to use the authentication context. To update a sensitivity label Once the label has been updated, guests accessing a SharePoint site (or the **Files** tab in a team) with that label will be required to agree to the terms of use before gaining access to that site. -### Apply the authentication context directly to a site --You can directly apply an authentication context to a SharePoint site by using the [Set-SPOSite](/powershell/module/sharepoint-online/set-sposite) PowerShell cmdlet. --In the following example, we apply the authentication context we created above to a site called "research." --```powershell -Set-SPOSite -Identity https://contoso.sharepoint.com/sites/research -ConditionalAccessPolicy AuthenticationContext -AuthenticationContextName "Sensitive information - guest terms of use" -``` - ## See also [Use sensitivity labels to protect content in Microsoft Teams, Microsoft 365 groups, and SharePoint sites](/microsoft-365/compliance/sensitivity-labels-teams-groups-sites) |
| SharePoint | Block Download From Sites | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/block-download-from-sites.md | Previously updated : 10/14/2022 Title: Block the download of files from a SharePoint site or OneDrive (preview) Last updated : 03/01/2023 + Title: Block download policy for SharePoint sites and OneDrive search.appverid: description: Learn how administrators can block download of files from a SharePoint and OneDrive without using conditional access policies. -# Block the download of files from a SharePoint site or OneDrive (preview) +# Block download policy for SharePoint sites and OneDrive [!INCLUDE[Advanced Management](includes/advanced-management.md)] As a SharePoint Administrator or Global Administrator in Microsoft 365, you can Blocking download of files allows users to remain productive while addressing the risk of accidental data loss. Users have browser-only access with no ability to download, print, or sync files. They also won't be able to access content through apps, including the Microsoft Office desktop apps. When web access is limited, users will see this message at the top of sites, "Your organization doesn't allow you to download, print, or sync from this site. For help contact your It department." +Note that you can block the download of Teams meeting recording files specifically if you need to. For more information, see [Block the download of Teams meeting recording files from SharePoint or OneDrive](/microsoftteams/block-download-meeting-recording). ++## Requirements ++This feature requires a Microsoft Syntex - SharePoint Advanced Management license. + ## How to set this policy for a SharePoint site 1. To use PowerShell: [Download the latest SharePoint Online Management Shell](https://go.microsoft.com/fwlink/p/?LinkId=255251). |
| SharePoint | Change Default Sharing Link | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/change-default-sharing-link.md | For info about the changing this setting at the organization level, see [File an 2. In the left column, click to select a site. -3. Select **Sharing**. +3. Select **Sharing** on the command bar. 4. Under **Default sharing link type**, clear the **Same as organization-level setting** checkbox. |
| SharePoint | Change External Sharing Site | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/change-external-sharing-site.md | To change the external sharing setting: 2. In the left column, select a site. -3. Select **Sharing**. +3. Select **Sharing** on the command bar. 4. Select an external sharing option (see the table in the next section).  -5. If you want to limit the sharing of this site by domain, select the **Limit sharing by domain** check box, and add the domains that you want to allow or block. +5. If you want to limit the sharing of this site by domain, select the **Limit sharing by domain** check box by expanding **Advanced settings for external sharing**, and add the domains that you want to allow or block. 6. If you want to change the default sharing link type or permissions for this site, clear the **Same as organization-level setting** check boxes and set the values that you want to use for this site. For more info, see [Change the default sharing link for a site](change-default-sharing-link.md). |
| SharePoint | Change Site Address | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/change-site-address.md | Before you change the address of a site, it's important to communicate the chang > [!NOTE] > If you have Office 365 operated by 21Vianet (China), [sign in to the Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=850627), then browse to the SharePoint admin center and open the Active sites page. -2. To open the details pane, select the site name. +2. To open the details panel, select the site name. -3. On the **General** tab, under URL, select **Edit**. +3. On the **General** tab, under **Site address**, select **Edit**.  |
| SharePoint | Control Access From Unmanaged Devices | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/control-access-from-unmanaged-devices.md | Using a policy that affects all Microsoft 365 services can lead to better securi 1. Go to <a href="https://go.microsoft.com/fwlink/?linkid=2185071" target="_blank">**Access control** in the new SharePoint admin center</a>, and sign in with an account that has [admin permissions](./sharepoint-admin-role.md) for your organization. >[!NOTE]- >If you have Office 365 operated by 21Vianet (China), [sign in to the Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=850627), then browse to the SharePoint admin center and open the Active sites page. + >If you have Office 365 operated by 21Vianet (China), [sign in to the Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=850627), then browse to the SharePoint admin center and select **Policies** to expand, then select **Access Control**. 2. Select **Unmanaged devices**. |
| SharePoint | Create Hub Site | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/create-hub-site.md | If you're a Global Administrator or SharePoint Administrator in Microsoft 365, y >[!NOTE] >If you have Office 365 operated by 21Vianet (China), [sign in to the Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=850627), then browse to the SharePoint admin center and open the Active sites page. -2. Select the site, select **Hub**, and then select **Register as hub site**. +2. Select the site, select **Hub** on the command bar, and then select **Register as hub site**.  If you're a Global Administrator or SharePoint Administrator in Microsoft 365, y  - > [!IMPORTANT] > If you leave the **People who can associate sites with this hub** box empty, any user can associate their site with the hub.<br>If you later want to change the hub site display name or the list of people who can associate sites with the hub, you need to use PowerShell or go to hub site settings on the hub site. |
| SharePoint | Customize Admin Center Site List | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/customize-admin-center-site-list.md | Sorting and filtering the site list is just like sorting and filtering other lis ## Switch views and create custom views <a name="views"> </a> -The <a href="https://go.microsoft.com/fwlink/?linkid=2185219" target="_blank">SharePoint admin center</a> comes with a few built-in views: **All sites**, **Sites connected to Teams**, **Microsoft 365 Group sites**, **Sites without a group**, **Classic sites**, **Largest sites**, **Least active sites**, and **Most popular shared sites**. +The <a href="https://go.microsoft.com/fwlink/?linkid=2185219" target="_blank">SharePoint admin center</a> comes with a few standard views: **All sites**, **Sites connected to Teams**, **Microsoft 365 Group sites**, **Sites without a group**, **Classic sites**, **Largest sites**, **Least active sites**, and **Most popular shared sites**. To select a different view: To create and save a custom view: When you select a built-in or custom view, you can add a card to your home page that shows the number of sites in the view and summarizes info about the set of sites. 1. Select the **Change view** arrow, and then select the view you want to track.-2. Select **Track view**. +2. Select **Track view** on the command bar. 3. Select **Add card**. 4. Go to your home page to see the card for the tracked view. You can search for a site by name, URL, primary admin, or template. To do this, ## Export to CSV <a name="export"> </a> -To export the site list you're viewing as a .csv file that you can work with in Excel, select **Export**. +To export the site list you're viewing as a .csv file that you can work with in Excel, go to **Active sites** page and select **Export** on the command bar. > [!NOTE] > The .csv file lists the hub as a GUID and the template as an ID (for example, STS#0). |
| SharePoint | Data Access Governance Reports | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/data-access-governance-reports.md | Previously updated : 10/19/2021 Title: "Data access governance reports" Last updated : 03/01/2023 + Title: "Data access governance insights for SharePoint sites" search.appverid: MET150 description: "In this article, you'll learn about reports that can help you govern access to data in SharePoint." -# Data access governance reports +# Data access governance insights for SharePoint sites [!INCLUDE[Advanced Management](includes/advanced-management.md)] After you run a report, select it to download the data. The report includes: - These reports work only if you have non-pseudonymized report data selected for your organization. To change this setting, you must be Global Administrator. Go to the [Reports setting in the Microsoft 365 admin center](https://admin.microsoft.com/#/Settings/Services/:/Settings/L1/Reports) and clear **Display concealed user, group, and site names in all reports**. - Data in these reports might be delayed by up to 48 hours. In new tenants, it might take a few days for data to be available and for these reports to be generated successfully.----- |
| SharePoint | Home Site | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/home-site.md | Previously updated : 10/07/2019 Last updated : 3/1/2023 Title: "Set a site as your home site" To perform this task by using PowerShell, run `Remove-SPOHomeSite`. The site will continue to be an organization news site. To remove it as an organization news site, see [Create an organization news site](organization-news-site.md). -## Choose the default landing experience for Viva Connections desktop -If your organization is using [Viva Connections](/viva/connections/viva-connections-overview), and you already has a SharePoint home site that you want to keep as the landing experience for Viva Connections desktop, use the PowerShell command. [Get more guidance on how to set the default desktop experience for Viva Connections](/viva/connections/edit-viva-home). +## Add a home site after youΓÇÖve set up Viva Connections +If your organization is already using [Viva Connections](/viva/connections/viva-connections-overview), you can add a home site at any time. If you add a home site after youΓÇÖve set up content in the Viva Connections dashboard and navigation in Microsoft Teams, you may need to copy some content to the home site in some cases. ++**To add a home site after setting up Viva Connections:** +1. Go to **Settings** in the [SharePoint admin center](https://go.microsoft.com/fwlink/?linkid=2185072), and sign in with an account that has admin permissions for your organization. +2. Select **Home site**. +3. Add the URL for the communication site that you want to be a home site. +4. The new home site will automatically be in draft mode, which allows you to copy content from Teams to the home site if you've already customized content in the dashboard and in navigation (if needed). While in draft mode, the Viva Connections experience will continue to source content from Teams. +5. Confirm that the home site is in draft mode, then select **Save**. +6. Copy content from the [Viva Connections dashboard](/viva/connections/create-dashboard) and navigation in Teams to the dashboard and [global navigation](/viva/connections/sharepoint-app-bar) that can be found in the home site **Settings**. + - To edit the dashboard from the home site, select **Manage Viva Connections > Create dashboard**. + - To edit navigation from the home site, select **Settings > Global navigation**. +7. Once content has been copied, turn **Draft mode** to **Off** and select Save. Once draft mode has been turned off, Viva Connections content will be sources from the home site and Viva Connections content can be edited from Teams too. + +**Add a home site after setting up Viva Connections using PowerShell:** +1. [Download the latest SharePoint Online Management Shell](https://go.microsoft.com/fwlink/p/?LinkId=255251). ++> [!NOTE] +> If you installed a previous version of the SharePoint Online Management Shell, go to Add or remove programs and uninstall "SharePoint Online Management Shell." +2. Connect to SharePoint as a [Global Administrator or SharePoint administrator](sharepoint-admin-role.md). To learn how, see [Getting started with SharePoint Online Management Shell](/powershell/sharepoint/sharepoint-online/connect-sharepoint-online). +3. Run `set-spohomesite` ++++## Choose the default landing experience for Viva Connections desktop +If your organization is using [Viva Connections](/viva/connections/viva-connections-overview), and you already have a SharePoint home site that you want to keep as the landing experience for Viva Connections desktop, use the PowerShell command. [Get more guidance on how to set the default desktop experience for Viva Connections](/viva/connections/edit-viva-home). |
| SharePoint | Hub To Hub Association | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/hub-to-hub-association.md | The following diagram illustrates how hub sites can be associated to other hubs  1. Go to <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** in the SharePoint admin center</a>, and sign in with an account that has [admin permissions](./sharepoint-admin-role.md) for your organization.-2. Select the hub site that you'd like to make an association to, then select **Hub settings** in the command bar to open to hub settings panel. +2. Select the hub site that you'd like to make an association. Then select **Hub** on the command bar and select **Edit hub site settings** to open to hub settings panel. 3. Next, select a hub to associate to in the **Parent hub association** field. Hubs that are available for association will appear here. 4. To confirm which hubs have already been associated with your hub site, select **View child hubs associated to this hub**. 5. Select **Save**. |
| SharePoint | Advanced Management | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/includes/advanced-management.md | - **This feature is in preview and will require a [Microsoft Syntex Advanced Management](/sharepoint/advanced-management) license when the feature becomes generally available (GA)** + **Some features in this article require [Microsoft Syntex - SharePoint Advanced Management](/sharepoint/advanced-management)** |
| SharePoint | Information Barriers | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/information-barriers.md | The Segments column lists the first segment associated with the site and shows w  -To view the complete list of segments associated with a site, select the site, and then select the **Policies** tab. -- +To view the complete list of segments associated with a site, select the site name to open the details panel, and then select the **Settings** tab. To edit the segments associated with the site, select **Edit**, add or remove segments, and then select **Save**. |
| SharePoint | Limit Access | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/limit-access.md | Previously updated : 12/02/2021 Title: "Limit access" Last updated : 03/01/2023 + Title: "Restrict OneDrive access by security group" ms.assetid: - admindeeplinkSPO - onedrive-toc-description: "In this article, you'll learn how to all only users in specified security groups to access OneDrive." +description: "In this article, you'll learn how to allow only users in specified security groups to access OneDrive." -# Limit OneDrive access by security group +# Restrict OneDrive access by security group [!INCLUDE[Advanced Management](includes/advanced-management.md)] -Use this setting if you want to allow only users in specified security groups to access OneDrive. Even if other users outside of these security groups are licensed for OneDrive, they wonΓÇÖt have access to their own OneDrive or any shared OneDrive content. +You can use the restricted access control policy for OneDrive to allow only users in specified security groups to access OneDrive. Even if other users outside of these security groups are licensed for OneDrive, they wonΓÇÖt have access to their own OneDrive or any shared OneDrive content. ++You can use this to prevent oversharing of OneDrive content. For example, you can restrict OneDrive access to your users, preventing guests from accessing any OneDrive content even if it's shared with them. ## Requirements -To access and use this feature, your organization must have one of the following subscriptions: +To access and use this feature, your organization must have one of the following subscriptions: -- Office 365 E5/A5 -- Microsoft 365 E5/A5 +- Microsoft Syntex - SharePoint Advanced Management +- Office 365 E5/A5 +- Microsoft 365 E5/A5 ## Enablement To enable this feature:  -4. Add the security groups you want to be able to use OneDrive. +4. Add the security groups (maximum of 10) you want to be able to use OneDrive. 5. Select **Save**. > [!NOTE] > Users who aren't included in the security groups you added will lose access to their own OneDrive and any shared OneDrive content. +## Audit events ++[Audit events](/microsoft-365/compliance/audit-log-activities) are available in Microsoft Purview compliance portal to help you monitor restricted access control activities. Audit events are logged for the following activities: ++- Enabled Restricted OneDrive access and sharing +- Disabled Restricted OneDrive access and sharing + |
| SharePoint | Manage Site Collection Administrators | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/manage-site-collection-administrators.md | By using the new<a href="https://go.microsoft.com/fwlink/?linkid=2185219" target 2. In the left column, select a site. -3. Select **Permissions**. For a group-connected team site, you can add and remove group owners and additional site admins. For other sites, you can add and remove site admins and change the primary admin. Note that if you remove a person as a primary admin, they will still be listed as an additional admin. For info about each role, see [About site permissions](site-permissions.md). +3. Select **Membership** on the command bar to open the details panel. For a group-connected team site, you can add and remove group owners and additional site admins. For other sites, you can add and remove site admins and change the primary admin. Note that if you remove a person as a primary admin, they will still be listed as an additional admin. For info about each role, see [About site permissions](site-permissions.md).  +4. In the details panel, you can add or remove the owners, members, site admins, site owners, site members, and site visitors. ++ |
| SharePoint | Manage Site Collection Storage Limits | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/manage-site-collection-storage-limits.md | Follow these steps to specify individual site storage limits when your storage m >[!NOTE] > If you have Office 365 operated by 21Vianet (China), [sign in to the Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=850627), then browse to the SharePoint admin center and open the Active sites page. -2. Click a site, or for a channel site, select the link in the **Channel sites** column. +2. In the left column, select the site, or for a channel site, select the link in the **Channel sites** column. -3. Under **Storage limit**, select **Edit**. +3. Select **Storage** on the command bar to open edit storage limit panel.  |
| SharePoint | Manage Site Redirects | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/manage-site-redirects.md | In some cases, you might want to free up the old URL to use it for a new site. T To confirm that the redirect has been deleted, browse to the URL. It should return a 404 error. You can also run `Get-SPOSite -Identity https://contoso.sharepoint.com/sites/OldSiteName`. It will return that we cannot get the site. > [!NOTE]-> You might need to clear the history in your browser before browsing to the URL. +> You might need to clear your browser history and cache before browsing to the URL. Otherwise, it may take longer for the redirect site deletion to reflect, depending on individual browser settings. ## To get a list of all redirect sites |
| SharePoint | Manage Sites In New Admin Center | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/manage-sites-in-new-admin-center.md | For all site types except channel sites, you can add or remove site admins and c 2. In the left column, select a site. -3. Select **Permissions**. +3. Select **Membership** on the command bar to open the details panel to update the permissions of the members. + :::image type="content" source="media/membership-details-panel.png" alt-text="Screenshot of membership tab in details panel"::: -4. Select **Manage** for the permissions that you want to update. --5. Add or remove people or change their role, and then select **Save**. +4. Add or remove people or change their role, and then select **Save**. ## Change a site's hub association <a name="hubsite"> </a> For all site types except channel sites, you can add or remove site admins and c 2. In the left column, select a site. -3. Select **Hub**. The options that appear depend on whether the site you selected is registered as a hub site, or associated with a hub. The Hub menu lets you register a site as a hub site, associate it with a hub, change its hub association, and unregister it as a hub site. For more information, see [More info about hubs](planning-hub-sites.md). +3. Select **Hub** on the command bar. The options that appear depend on whether the site you selected is registered as a hub site, or associated with a hub. The Hub menu lets you register a site as a hub site, associate it with a hub, change its hub association, and unregister it as a hub site. For more information, see [More info about hubs](planning-hub-sites.md). ## View site details <a name="viewsitedetails"> </a> -For more info about a site, select the site name to open the details panel or for channel sites select the link in the **Channel sites** column and then select the site name. +For more info about a site, select the site name or click anywhere on the site row except on the URL column to open the details panel or for channel sites select the link in the **Channel sites** column and then select the site name.  To view site activity including the number of files stored and storage usage, select the **Activity** tab. Activity information is not available for US Government GCC High and DoD customers. -To view site admins, owners, members, and visitors, select the **Permissions** tab. +To view site admins, owners, members, and visitors, select the **Membership** tab. - For info about the roles in this panel, see [About site permissions](site-permissions.md). |
| SharePoint | Modern Root Site | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/modern-root-site.md | We recommend replacing the root site at a time when site usage is low. 4. Select the root site (https<i></i>://contoso.<i></i>sharepoint.com). -5. Select **Replace site**. +5. Select **Replace site** on the command bar.  |
| SharePoint | Recent Actions Panel | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/recent-actions-panel.md | Previously updated : 09/29/2022 Last updated : 03/01/2023 Title: "Review recent SharePoint site actions" description: "Learn how to review recent actions in SharePoint admin center." [!INCLUDE[Advanced Management](includes/advanced-management.md)] -> [!NOTE] -> This feature is currently in private preview. If you would like to participate in the preview, contact your Microsoft account manager. - With the recent actions panel, you can make changes to SharePoint site properties and review your most recent 30 actions in the [SharePoint admin center](/sharepoint/get-started-new-admin-center). Changes to site properties like site name, site deletion and storage quota, show as recent actions. The panel shows the previous and current values of site properties, which can be useful when tracking changes. The recent actions panel only shows changes you made in the last 30 days. Change You can also download a .csv file of all your changes made in the last 30 days. +## Requirements ++To access and use this feature, your organization must have the following subscription: ++- [Microsoft Syntex - SharePoint Advanced Management](advanced-management.md) + ## View recent actions of a site 1. In the SharePoint admin center, expand **Sites** and select **Active sites**. HereΓÇÖs an example of how bulk edits are grouped as one action in the recent ac You deleted 4 SharePoint sites on May 21 at 6:15 PM. The bulk edit will show as one item named Deleted 4 sites on the recent actions panel. Select the Deleted 4 sites action and the list of deleted SharePoint sites appears. +## Related articles ++[Microsoft Syntex Advanced Management overview](advanced-management.md) |
| SharePoint | Redirect Known Folders | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/redirect-known-folders.md | The following policies control the Known Folder Move feature: Use this setting to give the users a call to action to move their Windows known folders. - :::image type="content" source="media/kfm-prompt-windows.png" alt-text="Screenshot of the dialog that prompts users to back up their important folders."::: + :::image type="content" source="media/kfm-prompt-windows-1.png" alt-text="Screenshot of the dialog that prompts users to back up their important folders."::: If users dismiss the prompt, a reminder notification will appear in the activity center until they move all known folders or an error occurs with the move, in which case the reminder notification will be dismissed. |
| SharePoint | Remove Hub Site | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/remove-hub-site.md | If you're a Global Administrator or SharePoint Administrator in Microsoft 365, y >[!NOTE] >If you have Office 365 operated by 21Vianet (China), [sign in to the Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=850627), then browse to the SharePoint admin center and open the Active sites page. -2. Select the site, select **Hub**, and then select **Unregister as hub site**. +2. Select the site, select **Hub** on the command bar, and then select **Unregister as hub site**.  |
| SharePoint | Request App Installation Permissions | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/request-app-installation-permissions.md | To add site collection admins to the Apps site: 1. Go to the [Active sites page of the new SharePoint admin center](https://admin.microsoft.com/sharepoint?page=siteManagement&modern=true), and sign in with an account that has [admin permissions](/sharepoint/sharepoint-admin-role) for your organization. -1. Select the Apps site, and then choose **Manage admins** from the **Permissions** dropdown menu. --1. Type and select the name of the person who you want to manage apps, and then select **Save**. +1. Select the Apps site, and then select **Membership** on the command bar to open the details panel. +1. Make the appropriate selection based on the type of member and provide input and select the name of the person who you want to manage apps, and then select **Save**. |
| SharePoint | Restricted Access Control | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/restricted-access-control.md | Previously updated : 10/11/2022 Title: "Restrict site access to members of a Microsoft 365 group" Last updated : 03/01/2023 + Title: "Restrict access control for SharePoint sites" recommendations: true -description: "Learn how to restrict site access to members of Microsoft 365 group." +description: "Learn how to enable restricted access control for SharePoint sites." -# Restrict site access to members of a Microsoft 365 group +# Restrict access control for SharePoint sites [!INCLUDE[Advanced Management](includes/advanced-management.md)] -> [!NOTE] -> This feature is currently in private preview. If you would like to participate in the preview, contact your Microsoft account manager. --With restricted access control (preview), you can manage the access of a SharePoint site and its content. As a [SharePoint administrator](sharepoint-admin-role.md), you can grant access to users of the Microsoft 365 group associated with a SharePoint site. Users who are not added to the group membership wonΓÇÖt have access even if they previously had site access permissions to a file. Restricted access control policy also applies to Microsoft 365 group memberships associated with Microsoft Teams. +With restricted access control, you can manage the access of a SharePoint site and its content. As a [SharePoint administrator](sharepoint-admin-role.md), you'll grant access to users of the Microsoft 365 group associated with a SharePoint site. Users who aren't added to the group membership can't access even if they previously had site access permissions to a file. Restricted access control policy also applies to Microsoft 365 group memberships associated with Microsoft Teams. -Restricting access to sites based on group membership lets you reduce the risk of oversharing within your organization and provides an additional layer of security to safeguard site content. By enabling restricted site access, you apply a policy that stops sharing content with people who aren't a member of the Microsoft 365 group. Use and consult [data access governance reports](data-access-governance-reports.md) to see how data is currently being shared. +Restricting site access based on group membership reduces the risk of oversharing within your organization. Restricted access control provides an extra layer of security to safeguard site content. By enabling restricted site access, you apply a policy that stops sharing content with people who aren't a member of the Microsoft 365 group. Use and consult [data access governance reports](data-access-governance-reports.md) to see how data is currently being shared. -For example, the research department has a Microsoft 365 group that contains all of their department members. They donΓÇÖt want anyone outside of the department to have access to the research department site or its contents. As their SharePoint admin, you can restrict site access to only members of the Microsoft 365 group by enabling restricted access control in PowerShell. +For example, the research department has a Microsoft 365 group containing all of their department members. They donΓÇÖt want anyone outside of the department to have access to the research department site or its contents. To restrict site access to the research department's Microsoft 365 group, you enable restricted access control using PowerShell. [PowerShell](/powershell/sharepoint/sharepoint-online/introduction-sharepoint-online-management-shell) is required to enable restricted access control. +## Requirements ++To access and use this feature, your organization must have the following subscription: ++- [Microsoft Syntex - SharePoint Advanced Management](advanced-management.md) + ## Enable restricted access control for your organization To enable restricted access control in SharePoint, run the following command: Set-SPOSite -Identity <siteurl> -RestrictedAccessControl $false `Set-SPOSite -Identity https://contoso.sharepoint.com/sites/ResearchTeamSite -RestrictedAccessControl $false` -## Related topics +## Auditing ++Audit events are available in Microsoft Purview compliance portal to help you monitor restricted access control activities. Audit events are logged for the following activities: ++1. Applying Restricted Access Control for site +2. Removing Restricted Access Control for site ++## Related articles ++[Microsoft Syntex Advanced Management overview](advanced-management.md) [Manage site access based on sensitivity label](authentication-context-example.md) [Data Access Governance reports](data-access-governance-reports.md)- |
| SharePoint | Restricted Domains Sharing | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/restricted-domains-sharing.md | You can also limit domains at the site collection level. Note the following cons >[!NOTE] >If you have Office 365 operated by 21Vianet (China), [sign in to the Microsoft 365 admin center](https://go.microsoft.com/fwlink/p/?linkid=850627), then browse to the SharePoint admin center and open the More features page. -2. Select the site that you want to restrict domains on. +2. Select the site name that you want to restrict domains to open the details panel. -3. On the **Policies** tab, under **External sharing**, select **Edit**. +3. On the panel, select the **Settings** tab and select **More sharing settings** under **External file sharing**. -2. Under **Advanced settings for external sharing**, select the **Limit external sharing by domain** check box, and then select **Add domains**. +4. Under **Advanced settings for external sharing**, select the **Limit external sharing by domain** check box, and then select **Add domains**. -3. Select **Allow only specific domains** to create an allowlist (most restrictive), or to block only the domains you specify, select **Block specific domains**. +5. Select **Allow only specific domains** to create an allowlist (most restrictive), or to block only the domains you specify, select **Block specific domains**. -4. List the domains (maximum of 500) in the box provided, using the format *domain.com.* If listing more than one domain, enter each domain on a new line. +6. List the domains (maximum of 500) in the box provided, using the format *domain.com.* If listing more than one domain, enter each domain on a new line. > [!NOTE] > Wildcards are not supported for domain entries. -5. Select **Save**, and then select **Save** again. +7. Select **Save**, and then select **Save** again. > [!NOTE] > To configure the site collection setting for site collections that do not appear in this list (such as Group-connected sites or individual OneDrive site collections), you must use the [Set-SPOSite](/powershell/module/sharepoint-online/Set-SPOSite) PowerShell cmdlet. After you limit sharing by domain, here's what you'll see when you share a docum  -- **Sharing OneDrive files with guests on domains that aren't allowed.** If a users tries to share a OneDrive file with a guest whose email domain isn't allowed, an error message will display and sharing will not be allowed.+- **Sharing OneDrive files with guests on domains that aren't allowed.** If a user tries to share a OneDrive file with a guest whose email domain isn't allowed, an error message will display and sharing will not be allowed.  |
| SharePoint | Site Collections Page | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/site-collections-page.md | This article covers all the features on the classic site collections page and wh ## New (create a new private site collection) -To create a site collection in the new SharePoint admin center, go to <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites**</a>, and then select **Create**. To create a classic site, select **Other options**. +To create a site collection in the new SharePoint admin center, go to <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites**</a>, and then select **Create** on the command bar. To create a classic site, select **Other options**. <br/> On the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank" ## Properties -The columns on the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a> show most of this information, so you don't even need to select a site to see details. To see the properties for an individual site, select anywhere in the site row, except in the URL column. +The columns on the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a> show most of this information, so you don't even need to select a site to see details. To see the properties for an individual site, select anywhere in the site row to open the details panel, except in the URL column. <br/> The columns on the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" tar |Title|Site name column| |Complete Web Site Address link|URL column shows the path after the domain. You can copy the link to save the full URL to the Clipboard.| |Primary Administrator|Primary admin column.|-|Other Administrators|For any sites that aren't connected to a Microsoft 365 group, select the site, and on the command bar, select **Permissions**, and then select **Manage admins**. (For group-connected sites, you have options for managing group owners and additional admins.)| +|Other Administrators|For any sites that aren't connected to a Microsoft 365 group, select the site, and on the command bar, select **Membership** to open the details panel. (For group-connected sites, you have options for managing group owners and additional admins.)| |Number of subsites|Not available| |Storage Usage|Storage used (GB) column.| |Resource Usage, Server Resource Quota, Resource Usage Warning Level|These settings have had no effect for more than a year.| ## Owners -To change the owners for any site that isn't connected to a Microsoft 365 group, go to the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>, select the site, select **Permissions** on the command bar, and then select **Manage admins**. +To change the owners for any site that isn't connected to a Microsoft 365 group, go to the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>, select the site, select **Membership** on the command bar to open the details panel from where you can edit the membership information. <br/> This information is no longer displayed because you shouldn't need to worry abou  -Most of the sites that were listed in the classic SharePoint admin center are included on the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>. A few are hidden because they're system sites that you shouldn't need to change. The Active sites page contains all the new team sites and communication sites that didn't appear in the classic SharePoint admin center. To see the site list as it appeared in the classic SharePoint admin center, from the **Built-in views** menu, select **Classic sites**. +Most of the sites that were listed in the classic SharePoint admin center are included on the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>. A few are hidden because they're system sites that you shouldn't need to change. The Active sites page contains all the new team sites and communication sites that didn't appear in the classic SharePoint admin center. To see the site list as it appeared in the classic SharePoint admin center, from the **Standard views** menu, select **Classic sites**. In both the classic and new admin centers, you can select multiple sites and bulk edit the sharing or storage settings, or delete the sites. |
| SharePoint | Site Permissions | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/site-permissions.md | description: "Learn about site permissions that you can configure in the SharePo # Admin center site permissions reference -On the **Permissions** tab, you can manage permissions for the site and also for any associated Microsoft 365 group or Microsoft Teams team. These roles are specific to the selected site or group and don't give users access to the <a href="https://go.microsoft.com/fwlink/?linkid=2185219" target="_blank">SharePoint admin center</a>. +On the **Membership** tab, you can manage permissions for the site and also for any associated Microsoft 365 group or Microsoft Teams team. These roles are specific to the selected site or group and don't give users access to the <a href="https://go.microsoft.com/fwlink/?linkid=2185219" target="_blank">SharePoint admin center</a>. ## Site admins |
| SharePoint | Viva Connections Desktop | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/viva-connections-desktop.md | |
| SharePoint | What S New In Admin Center | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/what-s-new-in-admin-center.md | You can also create a card by [tracking a view](customize-admin-center-site-list  -- **Redesigned details panel**. On the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>, the details panel that appears when you select a site has been redesigned to divide the information among multiple tabs. [Learn more about managing sites](manage-sites-in-new-admin-center.md).+- **Redesigned details panel**. On the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>, the details panel that appears when you select a site name has been redesigned to divide the information among multiple tabs. [Learn more about managing sites](manage-sites-in-new-admin-center.md).  -- **Additional site-level sharing settings**. On the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>, when you select a site and then select **Sharing**, you can [change the default sharing link type and default link permissions for the site](change-external-sharing-site.md). +- **Additional site-level sharing settings**. On the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>, when you select a site and then select **Sharing** on the command bar, you can [change the default sharing link type and default link permissions for the site](change-external-sharing-site.md).  -- **Site permission details**. On the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>, a new experience lets you manage all site admins in one panel, view site members and visitors, and add site admins to sites that belong to Microsoft 365 groups. [Learn more about managing site permissions](site-permissions.md) +- **Site permission details**. On the <a href="https://go.microsoft.com/fwlink/?linkid=2185220" target="_blank">**Active sites** page</a>, a new experience lets you manage all site admins in one details panel, such as view site members and visitors, and add site admins to sites that belong to Microsoft 365 groups. [Learn more about managing site permissions](site-permissions.md) -  +  - **Redesigned Settings page**. The <a href="https://go.microsoft.com/fwlink/?linkid=2185072" target="_blank">**Settings** page</a>) has been redesigned to let you see the value for each setting without selecting each one for more info. |