SharePoint Permissions Audit & Cleanup for Sydney Businesses
If Your SharePoint Permissions Are a Mess. We Can Help Sort Them Out.
Management of SharePoint permissions often falls behind. Files shared with “anyone with the link.” Former employees who still show up in site permissions. A SharePoint site someone created for a project in 2022 that's now accessible to half the company for no reason.
Nobody set out to create this mess. It accumulated. Every time someone clicked “share” and picked the easiest option, or every time a new starter was added to the wrong group, or every time a guest account was created for a one-off collaboration and never removed.
We go through your SharePoint and OneDrive, find every overshared file, every stale permission, every open sharing link. Then we can help you fix it by providing a permissions discovery report, as well as doing it with/for you.
Common Problems We Find
“Anyone with the link” files
No authentication required. Created years ago. Still active. Found on almost every tenant we audit.
Former employee access
Names still in SharePoint groups, OneDrive shares, and site permissions long after they left.
Stale guest accounts
External accountants, contractors, and clients with access that was never revoked.
Broken inheritance
Individual files with completely different permissions from the folder they sit in. Nobody can explain why.
Every tenant we audit has these problems. They accumulate naturally over time. The fix is systematic, not heroic.
It Becomes a Real Problem
For years, messy SharePoint permissions were just an annoyance, and someone quietly fixed it, or turned a blind eye. Not sustainable.
Copilot
If you've enabled Microsoft 365 Copilot, or if you're planning to, note: Copilot sees everything each user can see. It uses the same permissions your staff already have. It just searches faster and more thoroughly than any human would.
So when a staff member asks Copilot to find information about a client, and Copilot pulls up a salary spreadsheet, a board paper, or a confidential contract from a SharePoint site they technically had access to but never would have found by browsing — that's your permissions problem becoming visible in the worst possible way.
A file with overly broad access used to sit unnoticed in a library. Now Copilot can find it, summarise it, and serve it up in seconds. That changes the stakes of every permission you've left too open.
We also offer a broader Copilot readiness engagement that includes permissions cleanup plus identity controls, content hygiene, and Copilot configuration.
Compliance
If your business holds client data — financial records, tax file numbers, health information, legal documents — the Privacy Act requires you to take reasonable steps to protect it from unauthorised access. “Everyone in the organisation” having access to a SharePoint site full of client files doesn't meet that test.
Cyber insurance
Insurers are asking more specific questions about data access controls, file sharing policies, and who can see what. A documented permissions audit is a strong answer to those questions.
What the M365 SharePoint/OneDrive Cleanup Covers
We work through your SharePoint Online and OneDrive environment systematically. Every site, library, and every sharing configuration. Here's what we look at and fix.
Sharing Links
This is usually where the worst problems live.
- “Anyone” links that let anyone with the URL access the file, no authentication required.
- “People in your organisation” links that give every employee access to files that should be restricted to specific teams.
- Links with no expiry that were created for a specific purpose two years ago and are still active.
- External sharing links sent to people outside your organisation. Some legitimate. Many created for a one-off collaboration and never cleaned up.
We identify all of them, review them with you, and remove the ones that shouldn't exist. For the ones that should, we set appropriate expiry dates and permission levels.
Site and Library Permissions
SharePoint permissions are built on inheritance. Site permissions flow down to libraries, libraries to folders, folders to files.
A SharePoint audit involves:
- Site-level permissions across all your SharePoint sites. Who are the owners, members, and visitors? Do those groups still make sense?
- Broken inheritance. Where has someone overridden folder or file permissions, and is it still needed?
- Microsoft 365 Group memberships.
- Direct user permissions.
Guest and External Users
Guest accounts accumulate. We find every guest account, check what they have access to, and flag the ones that should be removed.
OneDrive Sharing
We review OneDrive sharing across all users and clean up external shares, broad internal shares, and orphaned sharing links.
Former Employees
We cross-reference your current user list against your SharePoint and OneDrive permissions and clean out anyone who shouldn't be there.
Tenant-Level Sharing Policies
After cleaning up the individual sites and files, we configure your tenant-level settings.
What You Receive
- Complete permissions audit report
- All agreed remediation completed
- Tenant-level sharing policy summary
- Recommendations for your decision
- Sharing best practices orientation
Who This Service Fits
- You're preparing for Copilot and don't trust your permissions.
- You've had a scare.
- Your compliance advisor asked about data access controls.
- You know it's bad but you don't know how bad.
- You've just switched IT providers and want a clean start.
Why Us
Daily Practice
SharePoint and M365 admin is our daily work. We manage M365 tenants for a living.
Audit + Fix
You get a report and optionally engage Internacious to do the SharePoint/OneDrive permissions remediation.
No Surprises
Every change is reviewed with you first.
Frequently Asked Questions
- How long does this take?
- Will my staff notice anything?
- What about Teams? Are those permissions included?
- Do we need to be on a specific M365 plan?
- Can you do this remotely?
- Is this a one-off or do we need to do it regularly?
- Does this help with Copilot?
- Do we need to be an existing client?
Ready to Sort Out Your SharePoint?
You've been meaning to do this for a while. We can have it done in a couple of weeks.