Ensure guest access to a site or OneDrive will expire automatically

Why This Matters

Without an automatic guest access expiration policy, guest users retain access to SharePoint sites and shared files indefinitely. This creates a data confidentiality risk, as former collaborators or external users may continue to access sensitive information long after their work is complete. Enforcing a 30-day expiration ensures guest access is regularly reviewed and revoked, reducing the attack surface and oversight burden.

What Aether365 Checks

Aether365 verifies that the guest access expiration setting for SharePoint sites and OneDrive is configured for 30 days or fewer. This check appears in the Aether365 dashboard under microsoft-365 checks as M365.2188.