How to Revoke Someone’s Access to a SharePoint File
Removing access is just as important as granting it. A clean revoke is a one-minute job. Letting old access linger is how organisations slowly leak data over years.
What it is
Every shared file accumulates access permissions over time. People come and go, projects end, contractors move on, but the access often stays — quietly persistent, easily forgotten. The fix isn’t difficult; it’s just usually not done.
There are two ways access happens: direct sharing (you added a person or group) and link-based sharing (you generated a link they can use). Both need to be reviewed and cleaned up. The Manage access panel in SharePoint or OneDrive shows everything in one view, including links you may have forgotten about.
Revoking access doesn’t break anything — the file remains exactly where it is, with the same content. The person who had access just no longer does. Once they try to open the file, they’ll get a ‘request access’ prompt or simply not see it. Done cleanly, the user might not even notice — which is the goal.
Why it matters
Old access is silent risk. A contractor from 2024 can still see your files in 2026 unless you remove them.
- Audits notice. Compliance audits flag stale external access faster than almost anything else.
- Regular cleanup builds trust. When IT and end users both know files have controlled access, they can collaborate confidently.
When to use this
- When a contractor finishes a project.
- When a colleague moves to a different role or leaves the organisation.
- When you realise a file was overshared and need to lock it down.
- When auditing access during a quarterly cleanup.
How to do it
- Open the file in SharePoint or OneDrive.
- Click the file menu (the three dots) and select Manage access.
- Review who has direct access (people listed by name) and which links exist.
- For people: click the dropdown next to their name and select Stop sharing.
- For links: click Stop sharing on the link itself — this disables the entire link.
- Confirm the change.
- Test access if needed — try opening the file as that person to verify they’re locked out.
Best practices
- Make revoking part of project closure. Last task on every external project: revoke access.
- Remove the link, not just the people. Links can be forwarded. Disabling the whole link is safer than removing one user.
- Use group-based access for ongoing teams. Easier to remove someone from the group than to remove them from every shared file.
- Audit external access quarterly. 15 minutes a quarter prevents years of accumulated risk.
Common mistakes
- Assuming access was removed when the project ended. Nobody removed it. It’s still there.
- Removing one user from a ‘Anyone with the link’ link. You can’t — the link works for anyone. Disable the link entirely.
- Relying on memory for what was shared with whom. Use Manage access. It shows you the truth.
The Sharing Handbook gives you the Traffic Light System for every SharePoint sharing decision. Real screenshots of the Link Settings dialog, end-user focused, no admin access required.
Get the Sharing Handbook — $27 →FAQ
How do I remove someone’s access to a SharePoint file?
Select the file, click Manage access. Find the person or link, click the down arrow next to their permission level, and choose Stop sharing or Remove. The change takes effect immediately — their next click on the link fails. Takes under 60 seconds and doesn’t notify the person (deliberately).
Does the person get notified when I revoke their access?
No — SharePoint doesn’t notify people when their access is revoked. This is by design (you might be doing a security review, or removing a former employee). If you want to tell the person, you’ll need to email them separately. If the revocation is sensitive, the silent default is usually what you want.
Can I revoke access to a SharePoint link without removing the file?
Yes — Manage Access lets you revoke individual sharing links without affecting the file or other people’s access. Each sharing link is independent. You can remove the ‘Anyone with the link’ you created in 2024 while keeping all the named-person shares intact. Surgical control.
How do I find SharePoint files I’ve shared with people who no longer need access?
There’s no automatic ‘stale access’ report, but two workarounds: filter the OneDrive sharing report (under Shared) for old items, or build a Power Automate flow that scans your files monthly and flags external shares older than 90 days. Either way, set a recurring quarterly access review on your calendar.