How to Restrict SharePoint Downloads and Set Delete Alerts
Question details
An administrator wants to block document downloads and sharing while allowing desktop Office editing, restrict daily file deletions, and receive alerts when files are modified, deleted, or moved.

- Product
- SharePoint Online
- Device & OS
- not provided
- Scenario
- Configuring enterprise file access policies, governance controls, and automated activity monitoring in a SharePoint environment.
- Observed behavior
- The administrator needs to enforce specific security policies where users can edit files using desktop apps without saving local copies, alongside tracking document deletions and moves.
Ensure you have SharePoint Site Administrator privileges and access to Microsoft Power Automate to configure advanced file tracking workflows and permission levels.
Address the Limitation Between Desktop Editing and Download Restrictions
Understand how SharePoint handles desktop application permissions and adjust your web-editing policies to prevent unauthorized local saves.
SharePoint cannot reliably block file downloads if users are permitted to open and edit those files in native desktop Office applications. When a file is opened in a desktop app, it is temporarily downloaded to the device's cache, and users can use the 'Save As' function to create a local copy, effectively bypassing any SharePoint download restriction.
To strictly prevent downloads, you must restrict editing entirely to the web-based versions of Office applications where local saving is disabled.
Open your SharePoint Site settings and click on 'Site permissions' to review the current access levels assigned to your user groups.
Assign the 'Restricted View' permission level to users. This allows them to view documents in the web browser but removes the ability to download, print, or sync the files.
Go to Library Settings > Advanced Settings, and under 'Opening Documents in the Browser', select 'Open in the browser' to prevent files from launching in local desktop applications by default.

Set Up File Deletion and Modification Alerts Using Power Automate
Create automated workflows to send email notifications whenever a file in your SharePoint library is deleted, renamed, or moved.
Use a Managed File Server with Group Policy Objects (GPO)
Implement network-level restrictions if allowing desktop editing without local saving is a strict requirement for your organization.
Try WPS Office for Seamless Document Management
If you are exploring cost-effective document management and editing solutions outside of strict enterprise environments, WPS Office offers a lightweight, highly compatible alternative to Microsoft Office. It provides robust editing tools, excellent format compatibility, and a familiar interface without steep licensing costs.
- 1. Download the Installer: Visit the official WPS website and download the free WPS Office installer for your operating system.
- 2. Install WPS Office: Run the setup file and follow the on-screen instructions to complete the quick installation process.
- 3. Open Your Documents: Launch WPS Office and open your existing .docx, .xlsx, or .pptx files to start editing immediately.

Frequently Asked Questions
Can I block downloading but still allow web viewing in SharePoint?
Yes. You can assign the 'Restricted View' permission level to users or groups in SharePoint. This allows them to read documents in their web browser but removes the options to download, print, or sync the files locally.
How can I set a daily file deletion limit in SharePoint?
SharePoint does not offer out-of-the-box daily deletion limits for standard users. To achieve this, you would need to rely on custom third-party governance tools or create complex custom Power Automate flows that temporarily revoke user delete permissions once a certain threshold is reached.
Why doesn't SharePoint prevent 'Save As' in desktop apps?
When a file is opened in a native desktop application (like Word or Excel), the application processes the file locally. Desktop apps inherently have their own saving mechanisms that are independent of SharePoint's web-based download restrictions, allowing users to save a new copy to their local hard drive.
Does Power Automate notify me instantly when a file is deleted?
Power Automate can send automated notifications when a file is deleted, but there may be a slight delay (typically a few minutes) depending on the flow trigger polling interval and server load.




