web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Automate / How to prevent "Create...
Power Automate
Unanswered

How to prevent "Create share link" from sharing with anonymous users

(0) ShareShare
ReportReport
Posted on by 317

Setup

- Our Microsoft 365 tenant does not allow external sharing for OneDrive and SharePoint:

DenisMolodtsov_0-1623079129609.png

 

Now, we can create a demo Flow with a single action: "Create share link":

DenisMolodtsov_2-1623079280576.png

 

When we run this flow, it generates an anonymous link:

DenisMolodtsov_1-1623079156604.png

Link format: https://cleverpointdev-my.sharepoint.com/personal/admin_cleverpointdev_onmicrosoft_com/_layouts/15/download.aspx?UniqueId=<ID>&tempAuth=<JWT_Token>&ApiVersion=2.0

 

Security Issue: This anonymous link can be opened from any computer, without a credentials prompt. The worst thing is that this hyperlink can be opened from unmanaged devices. 

 

I have tested this behaviour in several M365 tenants. Our security team is really concerned about this "data leak" issue. It looks like anyone can share any file whatsoever byappsing all organizational security policies.

 

More details: When I go to the Access settings of the file I've shared with Power Automate, I don't see any sharing hyperlinks dispite the fact that I've generated one:

DenisMolodtsov_3-1623079496674.png

 

Question: Is there a way to prevent the "Create share link" action from generating these anonymous links?

 

 

Categories:
I have the same question (0)

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Forum hierarchy changes are complete!

In our never-ending quest to improve we are simplifying the forum hierarchy…

Ajay Kumar Gannamaneni – Community Spotlight

We are honored to recognize Ajay Kumar Gannamaneni as our Community Spotlight for December…

Leaderboard > Power Automate

#1
Michael E. Gernaey Profile Picture

Michael E. Gernaey 522 Super User 2025 Season 2

#2
Tomac Profile Picture

Tomac 364 Moderator

#3
abm abm Profile Picture

abm abm 243 Most Valuable Professional

Last 30 days Overall leaderboard