Reset compromised SharePoint Hero Links before they remain overshared
Diesen Beitrag auf Deutsch lesen
SharePoint Hero Links cannot be deleted directly. Resetting an Anyone link invalidates the old URL, creates a restricted replacement and can remove access.
TL;DR
SharePoint Hero Links cannot be deleted like traditional sharing links. The Reset link option invalidates the current URL, creates a new link for Only people added, and removes access for people who relied only on the old link. A PnP.PowerShell script finds unique-permission items with Anyone links and exports old and new details to CSV.
Original on Blog about anything related to my learnings. Read the original
This is our own summary, not a republication or full translation.
Governance takeaway
- Admins/CoE: Review the target site and expected access impact before resetting an Anyone Hero Link, because the old URL is invalidated and link-only users lose access.
- Security/Compliance: Treat an overshared Hero Link as a revocation case, and retain the script CSV containing old and new link details for review.
Frequently asked questions
How do I revoke an overshared SharePoint Hero Link?
Use SharePoint's Reset link option for the file or folder. It invalidates the current Hero Link and creates a replacement with Only people added access.
What happens to users after resetting a SharePoint Hero Link?
People who had access only through the old URL lose access. Resetting does not restore their access to the item.
How can PnP.PowerShell reset SharePoint Hero Links across a site?
The script checks items with unique permissions, identifies main links whose audience is Anyone, resets them, and exports old and new details to CSV.