OneDrive Personal vs. Business: Security, Sharing & Custom Permissions
Question details
The user wants to understand the security and external sharing differences between OneDrive Personal and OneDrive for Business, specifically how to grant external users permission to upload and download files without allowing them to rename or delete them.
- Product
- OneDrive
- Device & OS
- not provided
- Scenario
- Setting up secure folder sharing for external collaborators where they can add files but cannot alter or remove existing ones.
- Observed behavior
- The user needs to assign modified 'Contribute' privileges that exclude delete and rename capabilities, and is unsure if this works in the Personal version or how to configure it in the Business version using SharePoint groups.
Verify whether you are using OneDrive Personal or a Microsoft 365 Business account, as the granular custom permissions required for this setup are only available in OneDrive for Business (SharePoint Online).
Configure Custom Permissions in OneDrive for Business
Use the SharePoint backend of OneDrive for Business to create a custom permission level that permits uploading and downloading but strictly disables deleting or renaming files.
Because OneDrive for Business is built on SharePoint Online, it supports granular access controls. You can create a custom permission level by modifying the standard 'Contribute' or 'Edit' rights to meet strict compliance and security requirements for external sharing.
Log into your Microsoft 365 account and open your OneDrive for Business. Click the gear icon (Settings) in the top right corner, select 'OneDrive settings', then 'More Settings', and click on 'Return to the old Site settings page'. From there, click 'Site permissions'.
In the Site Permissions menu, click 'Permission Levels' on the ribbon. Click on the 'Contribute' permission level, scroll to the bottom, and click 'Copy Permission Level'. Give it a new name (e.g., 'Contribute No Delete').
In your newly created permission level, carefully uncheck the boxes for 'Delete Items' and 'Delete Versions'. Click 'Create' or 'Save' to finalize the custom permission level.
Navigate to the folder you want to share. Click the three dots (ellipsis) next to it, select 'Manage Access', and go to 'Advanced'. Click 'Stop Inheriting Permissions', then click 'Grant Permissions'. Enter the external user's email or your SharePoint group, and assign them your new 'Contribute No Delete' permission level.
Use OneDrive Personal for Basic Storage and Sharing
Understand the limitations of OneDrive Personal when it comes to advanced sharing scenarios so you can set correct expectations for your workflows.
Seamlessly Edit Your Cloud Documents with WPS Office
While advanced folder permission configurations require OneDrive for Business or SharePoint, editing the actual files doesn't require an expensive Microsoft Office subscription. WPS Office provides a free, lightweight, and highly compatible alternative to edit all your cloud-stored documents.
- 1. Download and Install: Get WPS Office for free from the official website and install it on your PC, Mac, or mobile device.
- 2. Connect Your Cloud Storage: Open WPS Office, navigate to the 'Open' menu, and select 'Add Cloud Storage' to sign in to your OneDrive account.
- 3. Edit and Collaborate: Open your shared OneDrive documents directly within WPS Office. All edits will automatically sync back to the cloud.

Frequently Asked Questions
Can I prevent users from deleting files in OneDrive Personal?
No. OneDrive Personal only offers basic 'Can view' or 'Can edit' permissions. If a user has edit access, they can rename or delete the files. You need OneDrive for Business to set up custom permission levels.
Do SharePoint permission groups apply to OneDrive for Business?
Yes. Because OneDrive for Business is fundamentally built on a SharePoint Online backend, you can utilize SharePoint groups and custom permission levels to manage access to your OneDrive files.
What advanced security features does OneDrive for Business have over Personal?
In addition to basic encryption, OneDrive for Business provides enterprise-grade compliance controls, Data Loss Prevention (DLP), eDiscovery, advanced link expiration, identity verification, and highly granular site permissions.
Can external users be added to SharePoint groups?
Yes, external users can be invited as guests to your Microsoft 365 environment and subsequently added to SharePoint groups, allowing them to inherit the custom permissions (like upload-only access) assigned to that group.




