Which Microsoft 365 Role Can Change Sway External Sharing Settings?
Question details
The user needs to restrict external sharing of Microsoft Sway content and wants to identify the correct administrator role that controls this organization-wide setting.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Managing organization-wide security and sharing policies to prevent data leakage via Microsoft Sway.
- Observed behavior
- The user is unable to find the sharing controls for Sway with standard administrative permissions and needs to know which specific role is required to implement the change.
Ensure you have access to the Microsoft 365 admin center or know who your organization's Global Administrator is, as tenant-wide policy changes require elevated privileges.
Use the Global Administrator Role to Modify Sway Settings
The Global Administrator role is required to access and change organization-wide Sway settings, including the ability to disable external sharing.
Other administrative roles, such as the SharePoint Administrator, do not have the necessary permissions to control Sway settings directly. You must either possess Global Administrator credentials or request assistance from someone who does.
Using a Global Administrator account, navigate to the Microsoft 365 admin center at admin.microsoft.com.
On the left-hand navigation menu, expand the 'Settings' section and click on 'Org settings'.
Under the 'Services' tab, scroll down the list of applications and select 'Sway' to open its configuration panel.
Uncheck the option that says 'Let people in your organization share their Sways with external people', then click 'Save' to apply the policy tenant-wide.
Request Temporary Access via Privileged Identity Management (PIM)
If your organization uses Azure AD Privileged Identity Management, you can request temporary elevation to the Global Administrator role to make the necessary changes.
Looking for a Secure and Easy-to-Manage Office Suite?
If you are finding Microsoft 365 administrative roles and sharing settings too complex to manage, consider WPS Office. It provides a lightweight, user-friendly alternative with built-in document security, intuitive sharing controls, and full compatibility with standard Office formats—all without the overhead of enterprise tenant management.
- 1. Download and Install: Visit the official WPS website to download the free version of WPS Office and install it on your device.
- 2. Open Your Documents: Launch WPS Office and open your existing .docx, .xlsx, or .pptx files seamlessly.
- 3. Share Securely: Use the 'Share' button to create customized links, set expiration dates, or apply passwords to your documents easily.
Frequently Asked Questions
Can a SharePoint Administrator change Sway external sharing settings?
No. Despite Sway being closely related to content creation and sharing, the SharePoint Administrator role does not grant permissions to manage Sway settings. Only the Global Administrator can modify these tenant-wide configurations.
Will disabling external sharing affect existing Sways that were already shared?
Yes. If the Global Administrator turns off external sharing at the organizational level, any previously shared Sways will instantly become inaccessible to external viewers.
Can I disable external sharing for specific users rather than the whole organization?
No, the external sharing toggle in the Microsoft 365 admin center applies to the entire organization. You cannot restrict Sway external sharing on a per-user or per-group basis.
How do I find out who my Global Administrator is?
You can usually find your administrators by going to your Azure Active Directory or Microsoft Entra ID portal and checking the 'Roles and administrators' section, or by contacting your internal IT support desk.
