File and Folder Sharing Model Update in Microsoft 365
Share on LinkedIn!
#RegoConsulting #SimpleSharepoint #SharePoint #OneDrive #Microsoft365 #ExternalSharing #DataGovernance #InformationSecurity #ChangeManagement #GuestAccess
Mutable Hero Links and Enterprise Access Governance
Microsoft is updating file and folder sharing in Microsoft 365 to simplify link creation and access management across enterprise apps.
Rolling out globally from August through October 2026, file and folder sharing shifts to a single “hero link” model. Consequently, users no longer need distinct links for different recipient types. Instead, users change who an existing link works for after sending it, without generating a new URL or asking recipients to switch links. This update reaches SharePoint, OneDrive, Word, Excel, and PowerPoint across web, desktop, and mobile clients.
Security Implications and Governance Shifts
While mutable hero links streamline collaboration, they alter how IT teams manage permissions and access reviews:
- Changing link scope: A URL shared previously can quietly resolve to a broader audience if modified later by the item owner.
- Higher default link impact: Your tenant’s default link audience setting becomes critical because every new item defaults to this mutable URL structure.
- Documentation gaps: Microsoft Learn documents currently highlight only the older Anyone, Organization, and Specific People link models, which can leave admins unprepared.
Recommended Steps for Tenant Administrators
To ensure smooth alignment with the updated sharing model, IT leads should execute two core preparation steps:
- Audit tenant link defaults: Review and set your default link audience before the rollout window opens so new behavior aligns with corporate security policies.
- Establish recurring access reviews: Implement regular audits of external and organization-wide links to monitor audience adjustments over time.
How the SimpleSharepoint team helps you get this done:
- Sharing defaults review: We work with you to set the default link audience before the rollout window opens. The new behavior then starts from a position you chose.
- Ongoing access review: We run a recurring check on external and organization-wide links. That matters more once one link can change audience quietly.
Working out how to explain these file and folder sharing changes to your users this fall? We are happy to compare notes and optimize your tenant defaults.



