How to See Who a OneDrive User Has Shared Files With
Question details
A Microsoft 365 global administrator needs to review OneDrive sharing activity to identify which users have received shared content from a specific account.
- Product
- Microsoft OneDrive / Microsoft 365
- Device & OS
- not provided
- Scenario
- Auditing and managing file access permissions within an organization's Microsoft 365 environment.
- Observed behavior
- The administrator needs to extract reports or access user accounts to see exactly who has access to specific OneDrive files, but may currently lack the direct visibility required.
Ensure you have Global Administrator or specialized Compliance Administrator permissions in Microsoft 365, and verify that audit logging is enabled for your organization.
Use the Microsoft Purview Portal to Audit Sharing Activities
Run an audit log search in the Purview portal to systematically track sharing events across your organization's OneDrive accounts.
The Microsoft Purview portal provides a centralized auditing log where administrators can search for file and page activities, including who generated sharing links and who received them.
Sign in to the Microsoft Purview compliance portal using your Global Administrator or Compliance Administrator credentials.
In the left navigation pane, expand 'Audit' and select 'Search' to access the audit log search tool.
Set the date range, select sharing-related activities (such as 'Shared file, folder, or site'), and enter the specific user's OneDrive URL or username to filter the results.
Run the search and review the returned activities to identify which files were shared and the users they were shared with.
Access the User's OneDrive via the Microsoft 365 Admin Center
Generate an access link to the user's OneDrive to manually inspect file permissions and shared links from their perspective.
Simplify Document Management and Sharing with WPS Office
While Microsoft 365 provides complex enterprise-grade compliance tools for administrators, individuals and small teams often prefer a more streamlined, lightweight approach to document sharing. WPS Office is a highly compatible alternative that offers intuitive cloud sharing features without heavy administrative overhead.
- 1. Download and Install: Get WPS Office from the official website and run the lightweight installer on your PC or Mac.
- 2. Open Your Document: Launch WPS Office and open your existing Word, Excel, or PowerPoint files with perfect formatting.
- 3. Share via Link: Click the 'Share' button in the top right corner to instantly generate a secure, manageable link for collaboration.
Frequently Asked Questions
Can I see exactly what file was shared in the audit log?
Yes, the audit log in the Microsoft Purview portal includes details about the specific file or folder that was shared, the timestamp, and the user ID of the recipient.
Why do I only see user IDs instead of names in the sharing report?
Depending on your organization's directory synchronization and privacy settings, the audit log may record internal users or external guests by their unique Object ID or User ID rather than their display name.
Do I need special permissions to generate a OneDrive access link?
Yes, you must be assigned the Global Administrator or SharePoint Administrator role in Microsoft 365 to generate a link to access another user's OneDrive files via the Active Users panel.
How long are OneDrive audit logs kept?
By default, audit records are retained for 180 days in Microsoft 365, provided that audit logging is enabled. Higher licensing tiers, such as E5, may offer longer retention policies up to one year or more.
