|
| 1 | +--- |
| 2 | +plugin: add-to-gallery |
| 3 | +--- |
| 4 | + |
| 5 | +# Deletes company-wide and anonymous sharing links |
| 6 | + |
| 7 | +## Summary |
| 8 | + |
| 9 | +Sharing links can lead to oversharing, especially when default site sharing settings haven’t been updated to ‘People with existing access’. If default sharing options are not updated in the tenant or site, end users can easily create a company wide or anonymous sharing links with a single click. End users can make a conscious decision to create sharing links with specific "people you choose" which limits the audience having access to the data. This script can help delete those company-wide and anonymous sharing links at folder, file, and item levels. This approach can help mitigate oversharing issues during the M365 Copilot rollout. |
| 10 | + |
| 11 | + |
| 12 | + |
| 13 | +### Prerequisites |
| 14 | + |
| 15 | +- The user account that runs the script must have at least site owner role to the SharePoint Online site. |
| 16 | + |
| 17 | +# [PnP PowerShell](#tab/pnpps) |
| 18 | + |
| 19 | +```powershell |
| 20 | +param( |
| 21 | + [Parameter(Mandatory)] |
| 22 | + [ValidateSet('Yes','No')] |
| 23 | + [string]$ExcludeDirectSharingLink,#anonymous and company wide links are included by default and this provides an option to include the "People You choose" links in the deletio process. |
| 24 | + [Parameter(Mandatory)] |
| 25 | + [ValidateSet('Yes','No')] |
| 26 | + [string]$DeleteSharingink, |
| 27 | + [Parameter(Mandatory)] |
| 28 | + [string]$SiteUrl |
| 29 | +) |
| 30 | + |
| 31 | +#Parameters |
| 32 | +$dateTime = (Get-Date).toString("dd-MM-yyyy-hh-ss") |
| 33 | +$invocation = (Get-Variable MyInvocation).Value |
| 34 | +$directorypath = Split-Path $invocation.MyCommand.Path |
| 35 | +$fileName = "SharedLinksDeletion-" + $dateTime + ".csv" |
| 36 | +$ReportOutput = $directorypath + "\Logs\"+ $fileName |
| 37 | + |
| 38 | +$global:Results = @(); |
| 39 | +
|
| 40 | +$siteUrl = if ($siteUrl[-1] -ne '/') { $siteUrl + '/' } else { $siteUrl } |
| 41 | +function getSharingLink($_object,$_type,$_siteUrl,$_listUrl) |
| 42 | +{ |
| 43 | + $relativeUrl = $_object.FileRef |
| 44 | + $SharingLinks = if ($_type -eq 0 ) { |
| 45 | + Get-PnPFileSharingLink -Identity $relativeUrl |
| 46 | + } elseif ($_type -eq 1) { |
| 47 | + Get-PnPFolderSharingLink -Folder $relativeUrl |
| 48 | + } |
| 49 | + |
| 50 | + ForEach($ShareLink in $SharingLinks) |
| 51 | + { |
| 52 | + if(($ExcludeDirectSharingLink -eq 'Yes' -and $ShareLink.Link.Scope -ne 'Users') -or $ExcludeDirectSharingLink -eq 'No') |
| 53 | + { |
| 54 | + $result = New-Object PSObject -property $([ordered]@{ |
| 55 | + SiteUrl = $_SiteURL |
| 56 | + listUrl = $_listUrl |
| 57 | + Name = $_object.FileLeafRef |
| 58 | + RelativeURL = $_object.FileRef |
| 59 | + ObjectType = $_Type -eq 1 ? 'Folder':'File' |
| 60 | + ShareId = $ShareLink.Id |
| 61 | + RoleList = $ShareLink.Roles -join "|" |
| 62 | + Users = $ShareLink.GrantedToIdentitiesV2.User.Email -join "|" |
| 63 | + ShareLinkUrl = $ShareLink.Link.WebUrl |
| 64 | + ShareLinkType = $ShareLink.Link.Type |
| 65 | + ShareLinkScope = $ShareLink.Link.Scope |
| 66 | + Expiration = $ShareLink.ExpirationDateTime |
| 67 | + BlocksDownload = $ShareLink.Link.PreventsDowload |
| 68 | + RequiresPassword = $ShareLink.HasPassword |
| 69 | + }) |
| 70 | + |
| 71 | + $global:Results +=$result; |
| 72 | + |
| 73 | + if($DeleteSharingink -eq 'Yes'){ |
| 74 | + if ($_type -eq 0 ) { |
| 75 | + Remove-PnPFileSharingLink -FileUrl $relativeUrl -Identity $ShareLink.Id -Force |
| 76 | + } elseif ($_type -eq 1) { |
| 77 | + Remove-PnPFolderSharingLink -Folder $relativeUrl -Identity $ShareLink.Id -Force |
| 78 | + } |
| 79 | + } |
| 80 | + } |
| 81 | + } |
| 82 | +} |
| 83 | +#Exclude certain libraries/lists |
| 84 | +$ExcludedLists = @("Access Requests", "App Packages", "appdata", "appfiles","Apps for SharePoint" ,"Apps in Testing", "Cache Profiles", "Composed Looks", "Content and Structure Reports", "Content type publishing error log", "Converted Forms", |
| 85 | + "Device Channels", "Form Templates", "fpdatasources", "Get started with Apps for Office and SharePoint", "List Template Gallery", "Long Running Operation Status", "Maintenance Log Library", "Images", "site collection images" |
| 86 | + , "Master Docs", "Master Page Gallery", "MicroFeed", "NintexFormXml", "Quick Deploy Items", "Relationships List", "Reusable Content", "Reporting Metadata", "Reporting Templates", "Search Config List", "Site Assets", "Preservation Hold Library", |
| 87 | + "Site Pages", "Solution Gallery", "Style Library", "Suggested Content Browser Locations", "Theme Gallery", "TaxonomyHiddenList", "User Information List", "Web Part Gallery", "wfpub", "wfsvc", "Workflow History", "Workflow Tasks", "Pages") |
| 88 | + |
| 89 | +Connect-PnPOnline -Url $siteUrl -Interactive |
| 90 | + |
| 91 | +Write-Host "Processing site $siteUrl" -Foregroundcolor "Red"; |
| 92 | +$ll = Get-PnPList -Includes BaseType, Hidden, Title,HasUniqueRoleAssignments,RootFolder | Where-Object {$_.Hidden -eq $False -and $_.Title -notin $ExcludedLists } #$_.BaseType -eq "DocumentLibrary" |
| 93 | + Write-Host "Number of lists $($ll.Count)"; |
| 94 | + |
| 95 | + foreach($list in $ll) |
| 96 | + { |
| 97 | + $listUrl = $list.RootFolder.ServerRelativeUrl; |
| 98 | + |
| 99 | + $selectFields = "ID,HasUniqueRoleAssignments,FileRef,FileLeafRef,FileSystemObjectType" |
| 100 | + |
| 101 | + $Url = $siteUrl + '_api/web/lists/getbytitle(''' + $($list.Title) + ''')/items?$select=' + $($selectFields) |
| 102 | + $nextLink = $Url |
| 103 | + $ListItems = @() |
| 104 | + while($nextLink){ |
| 105 | + $response = invoke-pnpsprestmethod -Url $nextLink -Method Get |
| 106 | + |
| 107 | + $ListItems += $response.value | where-object{$_.HasUniqueRoleAssignments -eq $true} |
| 108 | + if($response.'odata.nextlink'){ |
| 109 | + $nextLink = $response.'odata.nextlink' -replace "$siteUrl/_api/","" |
| 110 | + } else{ |
| 111 | + $nextLink = $null |
| 112 | + } |
| 113 | + } |
| 114 | + ForEach($item in $ListItems) |
| 115 | + { |
| 116 | + if($list.BaseType -eq "DocumentLibrary") |
| 117 | + { |
| 118 | + $type= $item.FileSystemObjectType; |
| 119 | + } |
| 120 | + |
| 121 | + getSharingLink $item $type $siteUrl $listUrl; |
| 122 | + } |
| 123 | +} |
| 124 | + |
| 125 | +$global:Results | Export-CSV $ReportOutput -NoTypeInformation |
| 126 | +Write-host -f Green "Sharing Links Report Generated Successfully! to $ReportOutput" |
| 127 | +``` |
| 128 | + |
| 129 | +[!INCLUDE [More about PnP PowerShell](../../docfx/includes/MORE-PNPPS.md)] |
| 130 | + |
| 131 | +*** |
| 132 | + |
| 133 | +## Source Credit |
| 134 | + |
| 135 | +Sample first appeared on [Deletion of company-wide and anonymous sharing links with PowerShell](https://reshmeeauckloo.com/posts/powershell-delete-nondirectlink//) |
| 136 | + |
| 137 | +## Contributors |
| 138 | + |
| 139 | +| Author(s) | |
| 140 | +|-----------| |
| 141 | +| [Reshmee Auckloo](https://github.com/reshmee011) | |
| 142 | + |
| 143 | + |
| 144 | +[!INCLUDE [DISCLAIMER](../../docfx/includes/DISCLAIMER.md)] |
| 145 | +<img src="https://m365-visitor-stats.azurewebsites.net/script-samples/scripts/spo-delete-companywide-anonymous-sharinglink" aria-hidden="true" /> |
0 commit comments