When you own a SharePoint site, you may need to let people outside your organization access specific files or folders. The default sharing settings for your whole tenant might be too restrictive or too open for a single site. This article explains how to set external sharing for one SharePoint site without changing the global tenant policy. You will learn the exact steps to adjust sharing levels, manage guest links, and avoid common security mistakes.
Key Takeaways: External Sharing for One SharePoint Site
- SharePoint admin center > Active sites > Policies > External sharing: Controls sharing level for a single site without affecting tenant-wide settings.
- Site-level sharing setting “Anyone” (guest links): Allows sharing with anyone, including people outside your organization, without requiring sign-in.
- Site-level sharing setting “Existing guests”: Only allows sharing with people who already have guest accounts in your Microsoft 365 directory.
Understanding Site-Level External Sharing in SharePoint
Every SharePoint site inherits its external sharing setting from the tenant-level policy. However, site owners can override this for a specific site. The tenant admin must first allow external sharing at the tenant level. If the tenant setting is set to “Only people in your organization,” you cannot enable external sharing for any site. The tenant must be set to “Anyone” or “New and existing guests” for site-level overrides to work.
SharePoint offers four sharing levels for a site:
- Anyone: Users can share links that work for anyone, even people without a Microsoft account. No sign-in required.
- New and existing guests: Users can share with people outside your organization. New guests receive an invitation and must sign in with a Microsoft account or a one-time passcode.
- Existing guests: Only people who already have guest accounts in your Microsoft 365 directory can access shared content.
- Only people in your organization: No external sharing allowed.
When you set the site-level sharing option, it cannot be more permissive than the tenant setting. For example, if the tenant is set to “New and existing guests,” you cannot select “Anyone” for a site. The site setting must be equal to or more restrictive than the tenant setting.
Steps to Set External Sharing for One SharePoint Site
Follow these steps to change the external sharing setting for a single site. You need SharePoint admin permissions or site owner permissions.
- Open the SharePoint admin center
Sign in to Microsoft 365 with an account that has global admin or SharePoint admin role. Select the app launcher in the top-left corner, then select Admin. In the admin center, choose SharePoint from the left navigation. - Navigate to Active sites
In the SharePoint admin center, select Active sites under the Sites section. A list of all SharePoint sites in your tenant appears. - Select the target site
Find the site you want to change. Click the site name to open its details panel. - Open the Policies tab
In the site details panel, select the Policies tab. You see the current external sharing setting. - Change the external sharing level
Under External sharing, choose the desired level from the dropdown menu. Options are: Anyone, New and existing guests, Existing guests, or Only people in your organization. - Save the setting
Click Save at the bottom of the panel. The new sharing level applies immediately to that site.
What to Check After Changing Sharing for a Single Site
After you set the external sharing level, verify that the change works as expected. Here are the key checks:
- Test with an external user
Share a document using the “Anyone” link or a guest link. Open the link in a private browser window or ask a colleague outside your organization to test access. - Review sharing links
Go to the site and open any document library. Select a file and choose Share. Check the link type dropdown to see which options are available. The available options should match the site-level setting. - Check guest expiration
If you set the site to “New and existing guests,” guest access may expire after a set number of days. The tenant admin configures this expiration policy. Review the expiration date in the Microsoft Entra admin center under External Identities > External collaboration settings. - Verify site-level override is active
In the SharePoint admin center, open the site details panel again. Confirm the Policies tab shows the setting you selected. If the setting reverts to the tenant default, a tenant policy may be blocking the change.
Common Mistakes When Setting External Sharing for One Site
The “Anyone” option is grayed out
If the “Anyone” option is not available, the tenant-level sharing setting is not set to “Anyone.” Go to SharePoint admin center > Policies > Sharing and change the tenant setting to “Anyone” first. After that, the site-level “Anyone” option becomes available.
External users receive an “Access Denied” message
This usually happens when the site-level setting is correct but the shared item has unique permissions. Check the item’s permission settings. If the item inherits permissions from the site, ensure the external sharing setting applies to the entire site. If the item has unique permissions, you must share it directly using the Share button.
Guest invitations expire before the user accepts
The tenant admin sets the guest invitation expiration period. By default, invitations expire after 30 days. If your external users do not accept the invitation quickly, they may need a new one. You can resend the invitation from the site by sharing the item again or by asking the admin to extend the expiration period.
External users are asked to sign in repeatedly
When a site is set to “New and existing guests,” external users must sign in with a Microsoft account or a one-time passcode. If they use a one-time passcode, they may need to request a new code each time they access the site. To avoid this, share the site using an “Anyone” link if security policies allow it.
| Setting | External Users | Sign-In Required |
|---|---|---|
| Anyone | Anyone with the link | No |
| New and existing guests | New guests invited via email; existing guests in directory | Yes |
| Existing guests | Only guests already in directory | Yes |
| Only people in organization | No external users | N/A |
Now you can set external sharing for one SharePoint site without changing the whole tenant. Use the site-level setting to match your security needs. After adjusting the setting, test with an external user to confirm access works. For advanced control, consider using sharing policies that restrict specific domains or require multi-factor authentication for guests.