OneDrive permissions

[steven_layton_sl]

Just had an odd instance where if I was on my OneDrive, and clicked the Discover link, I could see all of the Deputy Headteachers documents. Chatting to him, he checked and all his folders were shared with me and the head of post 16. He is tech savvy, didn't set this on purpose, but doesn't know how it ended up like this. When he was poking about, trying to work it out, he sent to "Tools>site settings>site permissions", from OneDrive and saw that myself and the head of post 16 had permission to access everything on 'my site' for some reason.

 

When I check this setting on my own OneDrive, I see the below. Is this normal? What is it actually giving "Everyone Except external users" Read access to?

 

Confused, and slightly worried....

[NicholasEsping]

Are you by chance a secondary Site Collection Administrator for your users?

[steven_layton_sl]

@NicholasEsping Errrrrrm. Not sure. While I'm the O365 admin, and have been for a while, I'm not that sure on some of the terminology and many of the features of it, sorry. What is that?

[NicholasEsping]

In the sharepoint admin center if you go to user profiles under My Site settings if you click on Setup My Sites and scroll down a ways there is My Site Secondary Admin if you have that enabled and you are the secondary admin everyone's files will be shared with you. Which would explain why you could see all of the headteachers documents. As for your other question I was looking at my settings and I also have the Everyone except external users with read access not sure what its for but I would assume it is normal.

[steven_layton_sl]

@NicholasEsping Nope, that option is not ticked, so I'm not a secondary admin, so it wasn't that. I just wonder if he made a mistake with his sharing of his OneDrive somehow. I'm gonna try work out what the Everyone except external users with read access is for. Thanks.

[apearce]

Have seen this kind of issue too. As Global or SharePoint Admins you cannot access another users OneDrive unless you give yourself permission through the mehtod already mentioed. There are 4 ways a user can see another users documents in OneDrive.

 

Sharing the file

Sharing the Folder

Sharing their document library

Being a Site Collection Admin.

 

I've seen it before that (some how and i dont know how this happens) that they have shared their Documents Library for the OneDrive so anything does into the doclib can be see by that user or group. Double check the permissions on this level too and you might find the issue there.