Learn how to protect files accessed and shared through company Microsoft 365 and how to activate such protection. Control to whom your files are shared via Microsoft 365 and protect your company from possible data loss.
✍️Before you can activate SharePoint protection, you must add your Microsoft 365 tenant to Safetica.
In this article, you will learn about:
- Introduction
- How to activate SharePoint protection in Safetica console
- How to configure SharePoint protection in Microsoft Purview
- How to access records related to Microsoft 365 file activity
- How to deactivate SharePoint protection
Introduction
SharePoint protection offers:
For company-managed devices (with installed Safetica Client):
- File activity audit & protection: Audit and protect file activity across
SharePoint, OneDrive for Business, and Teams. - Controlled sharing: Cancel sharing that violates your
company policies (files and folders), both internally and externally.
For BYOD devices (without Safetica Client):
- Audit file sharing and other file movements: Audit sharing, download, and upload to and from Microsoft 365.
- Control sharing for files with existing classification: Cancel the sharing of files classified by third-party classification in SharePoint, OneDrive for Business, and Teams.
✍️File uploads to Microsoft 365 can only be blocked by devices with installed Safetica Client. Uploads from devices without Safetica Client are only audited.
How to activate SharePoint protection in Safetica console
1. In Safetica console, go to Cloud services, and click your M365 tenant.
2. Click the Activate SharePoint protection button.
3. Read the displayed steps you must perform in the Microsoft Purview to enable Safetica to audit and protect your valuable company data.
4. Check the box and click Finish. Then proceed to Microsoft Purview.
❗Completing the configuration in Microsoft Purview is a crucial prerequisite for the correct operation of this feature.
How to configure SharePoint protection in Microsoft Purview
-
Access Microsoft Purview using a Microsoft account with Global Admin role.
-
Click Solutions on the left and select Audit.
- Click the thin wide button Start recording user and admin activity and wait for it to complete. If you can't see this button, it means the auditing feature is already turned on. In such a case, you can leave the portal.
- After this step, the file audit of your Microsoft 365 data (i.e. files on OneDrive for Business, SharePoint, and Teams) will be activated.
How to configure policies for Microsoft 365 file sharing
- After you finish the activation in Microsoft Purview, policies configured for the M365 file sharing destination type will start applying to file-sharing operations performed by users in your Microsoft 365 tenant.
How to access records related to Microsoft 365 file activity
- After you finish activation, you will find records related to SharePoint, OneDrive for Business, and Teams file activity in the Data section of Safetica console.
❗It might take up to 48 hours to see the records of Microsoft 365 file activity.
- To only see records from Microsoft 365, set the Application filter to SharePoint Online and Microsoft Teams.
How to deactivate SharePoint protection
To deactivate SharePoint protection:
- Open Safetica console, go to Cloud services > your M365 tenant, and deactivate SharePoint protection.
Read next
SharePoint protection: How to protect file sharing
Outlook protection: How to activate and deactivate it
Outlook protection: Block (with override) in Outlook