A water utility needs tools that reveal broadly shared links on a planning SharePoint site so oversharing can be fixed. What should administrators look for?

Water-utility administrators who need to reveal broadly shared links on a planning SharePoint site should use oversharing troubleshooting tools that surface broadly shared links and excessive access on SharePoint content. Those tools exist to find “anyone” or overly wide sharing so owners can tighten permissions and stop unintended exposure of planning documents.

Site sharing defaults that restrict broadly shared links by setting default link types for new SharePoint content control what sharing behavior applies going forward on new content; they do not surface the broadly shared links that already exist on the planning site today, which is what administrators need to find and fix. Access reviews that surface broadly shared links by asking owners to confirm continued need for excessive access are a periodic attestation process for group or team membership; they do not surface broadly shared links or excessive access on SharePoint content the way oversharing troubleshooting tools do. Sensitivity label policies that surface broadly shared links by applying encryption to confidential SharePoint content protect content once it is labeled, but applying encryption does not discover which links and permissions on the planning site are already overly broad—labeling restricts future access, it does not surface existing oversharing for administrators to review.

Exam caveat: Oversharing troubleshooting is about discovering excessive sharing and broad links; it complements—not replaces—site sharing defaults, access reviews, and sensitivity label policies. AB-900 associates surprising exposure with fixing oversharing first, not with setting default link types for new content, owner attestation of continued need, or automatic encryption.

Operational check: On the planning site, run the oversharing / sharing report or troubleshooting experience available to SharePoint admins, list links shared with Anyone or large groups, notify site owners, remove or reshape broad links, and re-check that planning folders no longer show excessive access before enabling wider Copilot use on that site.