How to Restrict an External User to One SharePoint Document Library
Question details
The user needs to grant an external user access to a single SharePoint document library without exposing other libraries or site content.

- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- Sharing a specific SharePoint document library with an external account on a new site.
- Observed behavior
- After sharing one specific library, the external account can still access other libraries on the site due to site-level permissions or inheritance.
Ensure you have Site Owner or Full Control permissions for the SharePoint site before attempting to modify access levels and break permission inheritance.
Remove Site-Level Access and Break Library Inheritance
To restrict access strictly to one library, you must first remove the external user from site-level groups, then stop the target library from inheriting site permissions.
SharePoint libraries inherit permissions from the parent site by default. If an external user has been added to a site-level group (like Site Members or Site Visitors), they will automatically gain access to all inherited libraries, regardless of specific library-level sharing.
Click the Gear icon (Settings) > 'Site permissions' > 'Advanced permissions settings'. Click 'Check Permissions' in the ribbon, enter the external user's email, and click 'Check Now'. Remove them from any site-level groups listed.
Go to the specific document library you want to share. Click the Gear icon (Settings) > 'Library settings' > 'More library settings'.
Under 'Permissions and Management', click 'Permissions for this document library'. In the ribbon, click 'Stop Inheriting Permissions' and confirm the prompt.
In the same permissions window, click 'Grant Permissions'. Enter the external user's email address, click 'Show options', select the appropriate permission level (e.g., Contribute), and click 'Share'.

Generate a Permissions Report to Audit Access
If the external user still has access to other areas after breaking inheritance, run a permissions report to identify and remove hidden sharing links or direct access entries.
Manage Your Documents Effectively with WPS Office
While managing complex SharePoint permissions requires specific Microsoft 365 configurations, WPS Office provides a free, lightweight, and highly compatible alternative for creating, editing, and locally managing your daily documents without a steep learning curve.
- 1. Download and Install: Visit the official WPS Office website and download the free version for your operating system.
- 2. Open Your Documents: Launch WPS Office and open your existing Microsoft Office formats (.docx, .xlsx, .pptx) with zero compatibility issues.
- 3. Edit and Share: Use the built-in tools to edit your files and easily share them with external users via standard file formats or PDFs.

Frequently Asked Questions
Why can an external user see other libraries when I only shared one?
This occurs because the external user was likely granted site-level permissions (e.g., added to the Site Members or Visitors group) or they were given access to the parent site previously. Because other libraries inherit permissions from the parent site, the user can see them.
Does sharing a specific SharePoint library automatically break permission inheritance?
Sharing a library can grant direct access, but it does not automatically stop the library from inheriting site-level permissions, nor does it remove the user's existing site-level access. You must manually click 'Stop Inheriting Permissions' in the library settings to isolate it.
How do I check if my SharePoint site has been shared previously?
You can check site-level sharing by navigating to Settings (Gear icon) > Site permissions. Here, you will see all site owners, members, and visitors. To see specific individuals, click 'Advanced permissions settings' and review the user groups.




