MC1242772 - Set expiration policies for "People in your organization" sharing links in SharePoint and OneDrive

Introduction

To help organizations reduce the risk of unintended long-term access to internal content, Microsoft is introducing expiration policies for “People in your organization” sharing links in SharePoint and OneDrive. This update enables administrators to automatically expire these sharing links after a defined period, supporting stronger data governance and minimizing exposure from stale links. Admins can configure maximum and recommended expiration timeframes separately for SharePoint sites and OneDrive, aligning link behavior with organizational security and compliance requirements.

This message is associated with Microsoft 365 Roadmap ID 553220.

When this will happen

• General Availability (Worldwide): We will begin rolling out on mid-March 2026 and expect to complete by late May 2026.
• General Availability (GCC, GCC High, DoD): We will begin rolling out on mid-March 2026 and expect to complete by late June 2026.

How this affects your organization

Who is affected:

• SharePoint and OneDrive administrators
• Users who create “People in your organization” sharing links

What will happen:

• By default, no behavior changes occur. “People in your organization” links continue to have no expiration unless an admin configures a policy.
• Admins can set tenant-wide maximum expiration periods for these links, separately for:
  • SharePoint sites
  • OneDrive
• Admins can also set recommended expiration values that appear as the default suggestion when users create sharing links.
• Site-level overrides allow different expiration settings for specific SharePoint sites or OneDrive accounts when needed.
• Only links created after the policy is applied will automatically expire based on the configured timeframe.
• Existing links are not retroactively modified, though expiration will be applied on these links when a user uses them after the policy rolls out.

What you can do to prepare

No action is required if you want to keep the current behavior.

If you plan to use this feature, consider the following steps:

• Review governance requirements and determine appropriate expiration timeframes (for example, 30, 90, or 180 days).
• Configure tenant-wide maximum expiration values using the SharePoint Online Management Shell:
  • Set-SPOTenant -CoreOrganizationSharingLinkMaxExpirationInDays <days> (SharePoint sites)
  • Set-SPOTenant -OneDriveOrganizationSharingLinkMaxExpirationInDays <days> (OneDrive)
• Configure recommended expiration values that appear as default suggestions for users:
  • Set-SPOTenant -CoreOrganizationSharingLinkRecommendedExpirationInDays <days> (SharePoint sites)
  • Set-SPOTenant -OneDriveOrganizationSharingLinkRecommendedExpirationInDays <days> (OneDrive)
• Override tenant policies for specific sites or OneDrive accounts, if required:
  • Set-SPOSite -Identity <URL> -OverrideTenantOrganizationSharingLinkExpirationPolicy $true
  • Then set:
  • OrganizationSharingLinkMaxExpirationInDays <days>
  • OrganizationSharingLinkRecommendedExpirationInDays <days>
• Communicate the change to users and helpdesk teams so they understand why internal sharing links may stop working after a set period.
• Update internal documentation related to sharing and access governance.

Learn more

• Set-SPOTenant (Microsoft.Online.SharePoint.PowerShell) (will be updated before rollout)
• Set-SPOSite (Microsoft.Online.SharePoint.PowerShell) (will be updated before rollout)

Compliance considerations