Sharing files with external users using OneDrive for Business

Here’s a bright shiny new video detailing how to share files with external users from OneDrive for Business. You’ll see how to share with external users via email address and via a direct URL. Nice and easy.

If you wish to share with external users via email (i.e. they have to actually login to view the document), then they’ll need a free Microsoft account which they may already have or can easily set up using their own email address.

If you wish to share the document without the need for a login you can also do that easily via OneDrive for Business.

Sharing your files via OneDrive for Business means that you retain the source and control of the files. It also means there is a single point of truth when it comes to the document. That alone is worth using OneDrive for Business to share personal business documents.

January webinar resources

https://docs.com/d/embed/D25191743-6640-8940-4220-000669904411%7eMd4186d87-61d5-259a-4d26-00a8bd86cfff

Welcome to 2017. The first webinar of the New Year is now done and dusted. You can see the slide above or download directly from:

January 2017 Need to Know Webinar

If you are not a CIAOPS patron you want to view or download a full copy of the video from the session you can do so here:

http://www.ciaopsacademy.com/p/january-2017-need-to-know-webinar/

you can also now get access to all webinars via:

http://ciaops-academy.teachable.com/courses/need-to-know-webinars

for a nominal fee.

Thanks to everyone who attended and I hope to see you again next month.

OneDrive copy to Team Sites arrives

image

If you select a file in your OneDrive for Business and then select the Copy option you’ll find some new abilities.

image

You’ll now see that you get the ability to copy to a SharePoint Online Team Site. You can read more details about this ability at:

Copy files and folders from OneDrive for Business to a SharePoint Site

Note – Scripting must be turned off for personal sites If scripting is turned on for personal sites in your organization, the Copy command is restricted to copying within your OneDrive.

At this point in time the functionality is only available with Copy and not the Move command. Also, at this point in time the ability is not available in Team Sites.

Thus, for the time being, you can now Copy (but not Move) via a browser, files and folders from OneDrive for Business to a Team Site (but not the reverse). Hopefully, the other abilities such as Move and inside Team Sites also is not far away.

Providing admin access to OneDrive for Business

When a new Office 365 user is created they normally get provisioned with their own OneDrive for Business location. This is basically a dedicated SharePoint Site Collection per user into which they can upload and share their own private documents.

Each user is the only Site Collection administrator for their own OneDrive for Business location. This means, by default, even a global administrator doesn’t have access to a users OneDrive for Business location.

Of course, in a business, there can be the need for others to have admin access to a users OneDrive for Business, typically for compliance or even once the user has left the organisation. There are a number of ways of granting this access.

All of these methods will require you to have SharePoint administration rights in your tenant and then navigate to the SharePoint admin center.

image

Probably the easiest way to gain access to any existing user OneDrive for Business is simply to assign the appropriate administration user Secondary Site Collection rights to the site:

http://<tenant name>-my.sharePoint.com

You do that by firstly selecting the appropriate site in your list from the available Site Collections like so:

image

Once you place a check mark to the left of the OneDrive for Business Site Collections you will see a number of buttons become available to you on the Ribbon Menu across the top.

image

Select the Owners button.

image

Then select the Manage Administrators from the menu that appears.

image

As with any SharePoint Site Collection, you’ll see both the Primary Site Collection Administrator as well as any Secondary Site Collection Administrators. Remember, you can only have one Primary but many Secondary Site Collections administrators. So add the desired user in as a Secondary Site Collection Administrator field and then select OK.

The permissions for all the user OneDrive for Business sites will now update and when complete the added user will be able to access all users OneDrive for Business locations (typically by navigating directly to that URL).

Another way to achieve the same result, but for new or deleted users, is to navigate to the user profiles area from the menu on the left hand side of the SharePoint admin center.

image

This will take you to the following screen:

image

Here select Setup My Sites from the My Site Settings group at the bottom of the page.

image

Scroll down the list of options until you find My Site Cleanup

image

Here you can again effectively enter a Secondary Site Collection Administrator but for OneDrive for Business Site Collections where the user has been deleted.

If you continue to scroll down you will find a section called My Site Secondary Admin.

image

Here you can again effectively enable an automatic Secondary Site Collection Administrator to be allocated to a OneDrive for Business location when a new user is created.

Although really a double up from the first option shown is also worthwhile doing as a backup to ensure you cater for all new and any deleted users

The final way is of course to use PowerShell to enable permissions on users OneDrive for Business but I’ll leave that for a future article.

image

Beware that by adding additional Site Collection Administrators to a users OneDrive for Business users may see these additional admins as already having access as shown above when they go to share documents. It is recommended that you communicate this to your users in advance so they are aware of their compliance requirements.

So, in summary, remember that by default only the user has access to their OneDrive for Business location. You can easily assign rights for other users to access a users OneDrive for Business information using the methods outlined above. Once these rights have been assigned you can navigate to these locations using the URL for each users individual OneDrive for Business location.

Creating a new permission level in SharePoint Online

When users are given access to SharePoint Online they are typically given the ‘edit’ permission. The ‘edit’ permission allows users to not only create and edit documents but also to delete them. In some cases it may not be appropriate to do this. Luckily, with SharePoint you can easily create a new permission levels that is exactly like the edit permission, just without the ability to delete. Here’s how to do that.

image

Firstly, visit the location where you wish to create the new permission and select the COG icon in the top right hand corner of the screen.

From the menu that appears select Site settings. If you don’t see this option then you most likely don’t have the appropriate permissions to make these changes.

image

In the Site Settings page under the Users and Permissions section in the top left, select Site Permissions.

image

From the menu that appears across the top of the page select Permission Levels on the right.

image

You should now see a list of all the different existing permission levels available as shown above.

You could select the Add a Permission Level option from the menu across the top but that would require you customising a new permission from scratch. It is much easier to copy and then modify an existing permission to the level that you desire.

image

Since the Edit permission is the closest permissions level to the one we desire, select that to display its current settings as shown above.

image

If you now scroll to the bottom of this screen you will find an option to Copy Permission Level, which you should select.

image

This will now create a new permission level for you but copy over all the existing permissions as shown above. Enter a new name a description for this permission. In this case I will call call it Edit no Delete.

image

Make the desired changes to the permissions listed by simply checking or unchecking the individual permission. in this case I have unchecked the options to Delete Items and Delete Versions as shown above.

Scroll to the bottom of the page and Create the new settings.

image

You should now see the new permission level displayed in the permissions list as shown above, here Edit no Delete. If you need to edit this further, simply select the permission name.

image

Now, when you visit a location and want to set the permissions you will see your custom permission level as shown above that you can select and apply.

SharePoint gives you the ability to create as many custom permission levels as you desire. The trick is that it is easier to copy and modify an existing permission, rather than create a new from scratch. This article has shown you how to do just that.

OneDrive for Business admin console rolling out

image

Microsoft has commenced the roll out of a dedicated OneDrive for Business administration console as you can see above. You can read more details about this here:

New OneDrive Admin Center Preview

image

To access the new console you’ll need to have set your Office 365 tenant to first release and then visit:

http://admin.onedrive.com

As you can see from the screen shots here the console is currently divided into a number of menu options.

The Sharing option allows you control who outside your tenant can receive shared files.

image

I like the option here that allows an administrator to set options such as how long anonymous links remain.

image

The Sync option controls the sync client.

image

The Storage allows you to manage the default storage allocated to each user along with the retention time of deleted user’s OneDrive information.

image

The Device Access tab allows you to control access based on network location as well as controlling OneDrive policies on the mobile devices.

image

At the bottom you’ll also find the option to control how long data is retained when a device is offline.

image

The final tab allows you to control the Compliance of OneDrive for Business.

This new admin center for OneDrive for Business is still in preview but we expect to see more and more options become available with the eventual integration into the existing Office 365 admin center.

If you have Office 365 first release enabled, go and take a look!

December Webinar Resources

https://docs.com/d/embed/D25192052-8876-6203-9880-001902666907%7eMd4186d87-61d5-259a-4d26-00a8bd86cfff

We’re all done now for 2016. Another great turn out for the webinar, the slides from which you can view above or download via:

December 2016 Need to Know Webinar

If you are not a CIAOPS patron you want to view or download a full copy of the video from the session you can do so here:

http://ciaops-academy.teachable.com/p/december-2016-need-to-know-webinar

you can also now get access to all webinars via:

http://ciaops-academy.teachable.com/courses/need-to-know-webinars

for a nominal fee.

Thanks to all attendees in 2016. I’m looking to continue these free monthly webinars in 2017 so stay tuned for the sign up to the next event in January.