406554 – SharePoint: New enhancements to Restricted access control using Microsoft 365 and Microsoft Entra security groups

Product:

Entra, OneDrive, SharePoint

Platform:

Online, US Instances, Web, World tenant

Status:

Rolling out

Change type:

Links:

Details:

Restricted access control (RAC) is a premium security policy that lets admins restrict access to SharePoint and OneDrive resources to a specific set of users configured using Microsoft 365 or Entra Security groups. As part of this change, new capabilities will be added to review the impact of RAC application using insights reports and additional options to configure the policy will be made available. Also, policy enforcement visibility will be extended to Site owners via SharePoint sites.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-07-13

updated:
2024-08-27

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Direct effects for Operations**

- Impact on IT Operations
- Increased complexity in managing access controls
- Role: IT Administrators
- Dependency: Existing access control systems and policies may need to be reviewed and updated to align with new RAC capabilities.
- Reference: Microsoft documentation on SharePoint access control changes (https://docs.microsoft.com/en-us/sharepoint/dev/security/sharepoint-security-best-practices)

- Potential for temporary service disruptions during implementation
- Role: IT Operations Team
- Dependency: Coordination with other IT services (e.g., network, authentication services) to ensure smooth deployment.
- Reference: Change management best practices (https://www.itil.org/en/ITIL-4-Foundation-ITIL-4-Foundation-ITIL-4-Foundation)

- Impact on IT Services
- Changes in user access management processes
- Role: Service Desk and Support Teams
- Dependency: Integration with Microsoft 365 and Entra services for user provisioning and de-provisioning.
- Reference: Microsoft Entra documentation on security group management (https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups/groups-overview)

- Enhanced reporting capabilities may require training for site owners and administrators
- Role: Site Owners and IT Trainers
- Dependency: Existing training materials and user documentation may need updates to reflect new reporting features.
- Reference: SharePoint training resources (https://support.microsoft.com/en-us/sharepoint)

- Impact on IT Users
- Changes in access to SharePoint and OneDrive resources
- Role: End Users
- Dependency: User experience may vary based on the new access policies, potentially leading to confusion or access issues.
- Reference: User feedback on access control changes (https://techcommunity.microsoft.com/t5/sharepoint-developer/bd-p/SharePointDev)

- Increased visibility of access policies may lead to user inquiries and support requests
- Role: Service Desk and Support Teams
- Dependency: Anticipated increase in support tickets related to access issues and policy understanding.
- Reference: IT support ticket trends analysis (https://www.zendesk.com/resources/guide-to-support-tickets/)

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only