MC1013464 - Microsoft OneDrive: We will remove the EEEU sharing permission from root web and default document library

Service

OneDrive for Business

Published

Feb 21, 2025

Tag

Major change
User impact
Retirement

Summary

Microsoft OneDrive will remove the EEEU sharing permission from the root web and default document library between April 10, 2025, and September 30, 2025, to prevent inadvertent data oversharing. Users, processes, and apps with direct permissions will retain access. No admin action is required; notify users and update documentation.

More information

EEEU, which stands for Everyone Except External Users, is a permission setting used in Microsoft SharePoint and Microsoft OneDrive to manage access to content. This setting allows all internal users in an organization to access certain content while excluding external users. We discourage use of this setting due to concerns about inadvertent oversharing of user data.

What is changing

Starting April 10, 2025 and ending by September 30, 2025, we will run logic to detect and remove the EEEU permission from the root site of each user’s OneDrive and the default document library in OneDrive.

How this will affect your organization:

Before this retirement, apps, processes, or users may be able to discover and access content from OneDrive because of the inadvertent presence of EEEU in the root web and default document library in OneDrive. After the EEEU permission is removed, these apps, processes, and users will lose access to the content from the affected OneDrive accounts. Users, processes, and apps that were granted direct permissions to specific files and folders of a OneDrive account will not be impacted and will continue to retain their access.

We recommend OneDrive owners and OneDrive admins give explicit permission to individual files and folders in OneDrive to be accessed by one or more users or apps.

What you need to do to prepare:

This change will happen automatically by the specified date. No admin action is required. Please notify your users about this change and update relevant documentation. If you have questions or wish to discuss more, please open a support ticket.

Learn more: The section called Use Microsoft Entra groups and dynamic membership instead of default claims in Grant Everyone claim to external users in Microsoft 365 - Microsoft 365 | Microsoft Learn