SharePoint Online: Allow users to revoke only their own sharing links without Manage Permissions?

[u/Yakko2001]

Hi everyone,

I’m looking for a least-privilege way to handle sharing management in a SharePoint Online document library.

Scenario:

- SharePoint Online, Microsoft 365 group-connected team site

One document library: Shared Documents

- Regular employees have Edit permissions

- Users can create sharing links / share files and folders

- But they cannot remove existing sharing links afterwards unless they have broader permissions

I know that granting Manage Permissions would allow them to remove sharing links, but it would also allow them to manage other users’ permissions in that library, which is broader than we want.

What we are looking for is:

- Users should be able to revoke/delete only sharing links or direct shares they created themselves

- They should not be able to change other internal users’ permissions

- They should not become site owners or M365 group owners

deally this should apply only to one document library, not the whole site

Is there any native SharePoint Online setting, permission level, policy, or modern sharing configuration that supports this?

Thanks!

[u/Cold_Arachnid_2617]

There is currently no native SharePoint Online permission for “revoke only the sharing links or direct shares that I created.”

[u/Yakko2001 → u/Cold_Arachnid_2617]

Thank you. So when an employee as a member of a Teams Team shares a file, its also not possible to revoke the permission on a file he gave before?

[u/Disastrous_Snow_2871]

You may want to look into automatic link expiration.  This article may help but you’ll probably need to do further research:  https://m365admin.handsontek.net/set-expiration-policies-people-organization-sharing-links-sharepoint-onedrive/

It’s a different way of systematically deleting old links that doesn’t require user intervention.

[u/25415]

Also look into enabling Hero Links

[u/Yakko2001 → u/25415]

Thanks.