SharePoint, Teams & OneDrive
Access Audits for Microsoft 365
Entra ID · SharePoint · Teams · OneDrive
- Zero-trust ready
- Cloud-based
- Fast time-to-value
What Is a Microsoft 365 Access Audit?
A Microsoft 365 access audit is a regular check of who can reach your files in SharePoint, Teams and OneDrive, and whether they still should. YouAttest audits access at the site, library and file-sharing level, sends reviewers a campaign to certify or revoke each user, and exports PDF or CSV evidence for your auditors.
How YouAttest Connects to Microsoft 365
YouAttest connects to Microsoft Entra ID with SAML single sign-on, typically in about 15 minutes. SharePoint audits (sites, libraries and file sharing) add a one-time setup: an admin creates a certificate, uploads it to an app registration in your Entra tenant, and enters the thumbprint and SharePoint domain in YouAttest. SharePoint audits are available for Microsoft Entra ID tenants, for admin accounts with the SharePoint feature enabled.
The Challenge
Why This Is Harder Than It Looks
Most organizations don’t have a clear picture of who can access what inside Microsoft 365. By the time compliance asks for an access report, the data is a mess. YouAttest pulls that picture together — with the ability to revoke access directly from the same screen.
Files shared in a hurry
Permissions get granted in the moment and never revisited.
Lingering guest accounts
Guests stick around long after their projects have ended.
Live anonymous links
Links created months ago are still open with no expiry.
Messy compliance data
Access reports arrive scattered and impossible to trust.
Full Coverage
Where YouAttest Connects in M365
One review workflow across your entire Microsoft 365 stack — nothing slips through the cracks.
Entra ID
Where YouAttest starts. It reads your directory data to confirm every user with file access is still an active employee, contractor, or approved guest — not a ghost account.
SharePoint
Target individual sites or run a broad campaign across your entire environment. Library-level and file-level permissions are both fully covered.
Teams
Files shared in Teams channels don't always follow SharePoint's rules. YouAttest audits those too, so nothing slips through in a busy workspace.
OneDrive
Personal business links from OneDrive are easy to forget and hard to track manually. YouAttest brings them into the same review workflow as everything else.
Sharepoint
SharePoint Library Audits
When you run a Library Access audit, YouAttest works through your SharePoint environment at three levels — no opening folders, no spreadsheets.
Site-level reviews
See who has access at the library root across every site, all at once.
File-level overrides
Find files where permissions were manually changed so they no longer inherit — usually the riskiest ones.
External & anonymous links
Flag any links that allow outside access — especially those with no expiration date set.
Sharing Risk
File Sharing Audits
Shared links are a slow-burn risk. Someone shares a file for a vendor review, the project ends, and the link sits there indefinitely. YouAttest finds them.
Time-based filtering
See which links have no expiration or have already blown past your policy limit.
Sharing type breakdown
Internal, external, and anonymous access are separated out so reviewers can prioritize.
The Workflow
How It Works: Audit to Revocation
Admin accounts with M365 / SharePoint integration enabled can create and execute audits — the full lifecycle, from campaign creation to access removal.
Create Audit
Name it, connect your API source, set target sites & a due date.
Assign Reviewers
Reviewers certify or revoke each item from a single screen.
Mark Complete
Campaign locks; the Execute action unlocks automatically.
Execute
Admin confirms revocation after a required confirmation step.
Access Governance for SharePoint, Teams and OneDrive
The Problem With M365 Permissions Over Time
| Platform | What YouAttest Does | ||
|---|---|---|---|
|
SharePoint sprawl |
Repositories keep growing. Without regular reviews, no one knows who still needs what. |
||
|
Teams over-sharing |
Channels pile up with permissions that were set once and never revisited. |
||
|
OneDrive link leakage |
Personal shared links bypass the controls that apply to shared drives. |
||
|
Entra ID misalignment
|
Permissions stick around long after someone leaves a team, a project, or the company. |
||
One Workflow
How YouAttest Covers the Full M365 Stack
| Platform | What YouAttest Does | ||
|---|---|---|---|
|
Microsoft Entra ID |
Reads from your directory first, so every audit reflects who’s actually active — not who was active when the permissions were first set. |
||
|
SharePoint |
Site access, library access, and file sharing are all covered. Scope an audit to one site or run it across your entire tenant. |
||
|
Teams |
Files attached to Teams channels get audited alongside everything else. Old collaboration data doesn’t stay visible to people who no longer need it. |
||
|
OneDrive
|
Employee cloud drives are included in the same review workflow. No separate process, no gaps. |
||
Getting Started
Setting Up an Audit: Step by Step
Open the audit section
SharePoint Audit → File Sharing Audits → Create Audit.
Select SharePoint
Choose SharePoint as your audit type from the configuration screen.
Name & connect
Name the campaign, connect your API source, and set a compliance due date.
Choose & done
Pick the specific sites or file paths you want reviewed, then click Done.
Enforcement
What Happens After the Review
Execute unlocks automatically
It only appears once the audit is marked complete — no accidental early action.
Revocation is comprehensive
Internal users, external vendors, anonymous links — all cut in the same operation.
There's a confirmation step
You'll see a dialog before removal, so no one makes an irreversible mistake under pressure.
Microsoft 365 Access Audit FAQ
What does YouAttest audit in Microsoft 365?
Entra ID users, SharePoint sites and libraries, file sharing (internal, external and anonymous links), and the files in Teams and OneDrive. Reviewers see who has access and can certify or revoke it from one screen.
How does YouAttest connect to Microsoft 365?
YouAttest connects to Entra ID with SAML single sign-on. SharePoint audits add a one-time setup in which an admin uploads a certificate to an app registration in your Entra tenant and enters the thumbprint and SharePoint domain in YouAttest. The YouAttest SharePoint user guide covers each step.
Which Microsoft tenants does it work with?
SharePoint audits are available for Microsoft Entra (Azure) tenants, for admin accounts with the SharePoint feature enabled.
How does revocation work?
Once reviewers finish, an admin marks the audit complete and the Execute action unlocks. A confirmation dialog appears before anything is removed, and access is then revoked for every flagged user, whether the access was internal, external or through an anonymous link.
How is YouAttest different from Entra ID access reviews alone?
Entra ID reviews center on group membership and roles. YouAttest audits at the site, library and file-sharing level, delegates reviews to the people who own the content, and produces consolidated reports that link users, permissions, review decisions and attestations. It extends Entra ID rather than replacing it.
Can YouAttest find old or anonymous sharing links?
Yes. File sharing audits show which files are shared internally, externally or through anonymous links, whether each link has an expiration date, and whether that date runs past your policy. You can audit the whole tenant or specific users and export the results to CSV.
What can reviewers do?
For each user, reviewers can certify, revoke or delegate access. Admins can auto-delegate reviews to managers, mark the audit complete, and download PDF or CSV reports.
Can we review apps outside Microsoft 365 in the same campaign?
Yes. Upload a CSV of entitlements from other apps and review them alongside your Microsoft 365 users. YouAttest's AI-based Identity Trust Score™ and change triggers are available too.