Permission & Access Issues

How to Fix SharePoint Restricted View Still Allowing File Downloads

Khadija Khan Sep 25, 2026 870 views

Question details

Users report that applying Restricted View permissions or custom permission levels in SharePoint Online fails to prevent file downloads, compromising the security of confidential and legal documents.

Fix SharePoint Restricted View Still Allowing File Downloads

Product: SharePoint Online
Device & OS: not provided
Scenario: Administrators are trying to restrict file access to view-only to ensure the secure sharing of sensitive documents without allowing local downloads.
Observed behavior: Users assigned to the Restricted View permission level are still able to download files from the SharePoint sites and folders.

Before you start

Ensure you have Site Owner or SharePoint Administrator privileges before modifying permission levels. It is highly recommended to test permission changes on a sample folder with dummy files before applying them to critical confidential documents.

Solution 1Recommended

Verify User Access and Create a Strict Custom Permission Level

Sometimes users inherit hidden download permissions from other groups. Creating a strict custom permission level from scratch helps isolate and resolve the issue.

SharePoint permissions can be complex, and users often belong to multiple groups. If a user is in a group that allows downloads, it will override the Restricted View settings.

Check Existing Inherited Permissions

Navigate to your SharePoint site settings, click on 'Site permissions', and then select 'Advanced permissions settings'. Use the 'Check Permissions' tool in the ribbon, enter the affected user's name, and review all groups they belong to.

Create a New Custom Permission Level

In the 'Advanced permissions settings' menu, click on 'Permission Levels' and then 'Add a Permission Level'. Name the new level (e.g., 'Strict View Only').

Configure Explicit Restrictions

Select only the 'View Items' and 'View Pages' checkboxes. Ensure that 'Open Items' (which allows users to open files in client applications and download them) is completely unchecked, then save the permission level.

Apply and Test Access

Assign this new custom permission level to the target users or groups. Test access using a completely different user account and different file types, like Word or Excel documents, to confirm the download button is disabled.

Verify User Access and Create a Strict Custom Permission Level

Testing Multiple Environments: Make sure to test this custom permission setting across different sites and folders, as unique folder-level permissions can sometimes break site-wide inheritance.

Solution 2

Escalate the Issue via Microsoft 365 Admin Center

If custom permissions fail across multiple sites and folders, the issue is likely a backend tenant configuration error that requires Microsoft Support to investigate.

Free Microsoft Office alternative

Try WPS Office for Secure and Lightweight Document Management

While waiting for complex SharePoint permission issues to be resolved, you may need a reliable and simpler alternative for daily document management. WPS Office is a highly compatible, free, and lightweight office suite that seamlessly supports Word, Excel, and PowerPoint files while offering robust built-in security features.

1. Download and Install WPS Office: Visit the official WPS Office website to download the free installation package tailored for your operating system.
2. Open and Edit Your Documents: Launch WPS Office and directly open your existing Microsoft Office files with perfect formatting retention.
3. Secure Files Locally: Use the built-in document encryption feature under the 'Menu' > 'Document Encryption' tab to set strong passwords for your sensitive files before sharing them manually.

Fully compatible with all major Microsoft Office formats (DOCX, XLSX, PPTX).Built-in robust PDF editing and document encryption tools for securing confidential files.Free and lightweight, avoiding the complex configurations of heavy enterprise systems.Familiar, easy-to-use interface that ensures a seamless team migration.

microsoft office alternative - wps office

Frequently Asked Questions

Why can users still download files when Restricted View is applied?

This typically happens if users inherit higher permission levels (like 'Read' or 'Contribute') from other SharePoint groups they belong to. It can also occur due to backend tenant synchronization issues in SharePoint Online.

Does Restricted View block printing as well as downloading?

Yes, in a properly functioning SharePoint environment, Restricted View is designed to prevent users from downloading, printing, or syncing the documents locally.

How can I double-check exactly what permissions a specific user has on a SharePoint site?

Navigate to 'Site settings', click on 'Site permissions', then choose 'Advanced permissions settings'. Use the 'Check Permissions' button in the top ribbon and enter the user's name to view all their assigned permission levels.

Will fixing the site permission level affect files that users have already downloaded?

No. Changing permissions only restricts future access to files hosted on SharePoint. It cannot retroactively delete, lock, or track files that users have already successfully downloaded to their local drives.

Document & File Issues