County IT shared services explains restricted access control as a SharePoint Advanced Management-related governance feature. What should staff understand?

County IT shared-services staff should understand that restricted access control helps limit access to specified SharePoint sites as part of Advanced Management governance. It is a deliberate control to shrink who may enter sensitive site collections, supporting least-privilege collaboration rather than open municipal defaults on every site.

Restricted access control does not help block access to specified OneDrive content as part of Advanced Management governance—that OneDrive scoping is handled by restricted access control for OneDrive, not by this SharePoint sites access-control feature. It does not help restrict sharing links to specified SharePoint sites; sharing-link restrictions are handled by separate site sharing policies, while restricted access control restricts entry to specified sites. It does not help limit access to specified SharePoint libraries; library-level access is separate, whereas restricted access control limits which users can enter specified sites. Each wrong option fails by assigning the feature a destructive, trivial, or inverted behavior.

Exam caveat: Restricted access control = limit access to specified sites under SharePoint Advanced Management governance. Distinguish it from blocking access to specified OneDrive content, restricting sharing links to specified SharePoint sites, and limiting access to specified SharePoint libraries. AB-900 tests that definitional clarity.

Operational check: Pick a high-sensitivity shared-services site, apply restricted access control, validate allowed security groups, attempt access with an out-of-scope county account and confirm denial, confirm it does not help limit access to specified SharePoint libraries, and record the change in the change-management log with rollback notes.