> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/risk-management/threat-model-coverage/internal-collaborator-sharing/sharepoint-playbooks-for-internal-collaborator-sharing.md).

# SharePoint playbooks for internal collaborator sharing

To mitigate the risk associated with internal sharing in SharePoint, you can define automated workflows for these use cases:

* [Remediate ethical wall violations](#remediate-ethical-wall-violations)
* [Remove organization link on-demand](#remove-organization-link-on-demand)

## Remediate ethical wall violations

Ethical walls aim to enforce data separation between groups and users within your organization. You can trigger a workflow to remove collaborators when a sensitive file containing PII (personally identifiable information) is shared with a user outside a specific SharePoint group.

1. In Workflows, select **Playbooks**.

2. Filter the playbooks according to Internal collaborator sharing, and select the **Remediate ethical wall violations** playbook for SharePoint.<br>

   <figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2F83wZ5G3huGF5czamFuSm%2FNotify%20on%20ethical%20wall%20violation.png?alt=media&amp;token=c6cf3cec-abf3-4c2a-98dc-af6db6b4e2da" alt=""><figcaption><p>rt</p></figcaption></figure>

3. Customize the populated conditions for the **Added to secure link** trigger:
   * Actor is from Finance group - Select any group
   * Target is not from Finance group - Select any group
   * Asset is shared in Finance site - Select any site

4. Add any relevant conditions.

5. In the **PII scan** step, customize the error handling.

6. The **Conditional** step detects if PII was found in assets:
   * **False** - End workflow
   * **True** - Collaborators are automatically removed from shared assets.

7. Customize the **Notify by email** step to notify the actor that a SharePoint file was shared with a user outside the group's ethical wall, and that the file share has been reverted to private.

8. Customize the **Notify by email** step to notify the SecOps team that an actor shared a SharePoint file with a user outside the group's ethical wall, and that the file share has been reverted to private.

## Remove organization link on-demand

You can trigger an inventory action to remove organization links from SharePoint assets on-demand.

{% hint style="success" %}
You can customize [inventory actions](/docontrol-user-guide/workflows/inventory-actions-quick-actions.md) to meet your organization's requirements. When you trigger the inventory action, select the relevant workflow you created.
{% endhint %}

1. In Workflows, select **Playbooks**.
2. Filter the playbooks according to Internal collaborator sharing, and select the **Remove organization link on-demand** playbook for SharePoint.<br>

   <figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FPyg4DN0e9BevyygQ7ZQJ%2FRemove%20org%20links%20SharePoint%20internal.png?alt=media&amp;token=22306435-c457-41fc-98f1-85150239e372" alt=""><figcaption></figcaption></figure>
3. Select the link type to remove:
   * Public
   * Organization
4. If you add actions, save the workflow with a new name.
5. When you trigger the inventory action, select the relevant workflow you created.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/risk-management/threat-model-coverage/internal-collaborator-sharing/sharepoint-playbooks-for-internal-collaborator-sharing.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.