SharePoint can now lock sites to specific groups even if people have old links
Reviewed by Helen Jones
Microsoft’s docs now detail Restricted Access Control for SharePoint sites. Admins can tie a site to up to 10 Microsoft 365 or Entra security groups so only members of those control groups who also hold site or content permissions can open the site, use its files, or see it in organisation-wide search and Copilot. People outside the control group are blocked even if they still have old permissions or sharing links. Tenant-wide enablement is in the SharePoint admin center under Policies, Access control, or via Set-SPOTenant. Per-site setup is available in Active sites or PowerShell. The feature needs SharePoint Advanced Management. It works on group-connected, Teams-connected, and standalone sites. Shared and private channel sites need their own configuration. Insights cover protected sites and access denials, with audit events in Purview.
Before this control was practical to rely on, oversharing fixes meant chasing direct permissions, guest access, and stale sharing links site by site. A forgotten link or broken inheritance could still hand content to the wrong colleague, and Copilot made those quiet mistakes easier to surface in search-style answers. What changed is a second gate at the site boundary. Membership in the control group becomes mandatory on top of normal permissions, so “someone shared it years ago” stops being enough. For small admin teams, that is less about perfect governance theory and more about putting a hard fence around HR, finance, legal, and exec sites without rewriting every permission first.
Analysis
Treat this as a targeted Copilot-readiness control, not a tenant-wide sprawl fix. Confirm SharePoint Advanced Management is available, enable RAC at tenant level, then apply it only to a short list of high-sensitivity sites with control groups that already match real owners, and review the denial insights after a week before you expand.
Source note
Pulse published by Collab365 Spaces, reviewed by Helen Jones on . Cite as "SharePoint can now lock sites to specific groups even if people have old links", Collab365 Spaces. 2 sources referenced.