MC1540348 - Microsoft SharePoint: Data access governance report for group permissions
Microsoft 365 Message Center announcement MC1540348.
MS Message Center's Summary
Microsoft is introducing a new data access governance report in the SharePoint admin centre starting globally in late November 2026 and finishing in early December 2026. This feature helps administrators identify sites accessible to specific groups to assess potential exposure of sensitive content and verify permissions before assigning Copilot licences. Administrators should review current configurations and update internal documentation.
- Administrator impact
- SharePoint administrators can use the new reporting capability in the admin centre to investigate group permissions and potential content exposure.
- End user impact
- No direct end user impact is expected.
- Importance
- 3/10: This is a standard administrative reporting feature introduction that requires no immediate configuration changes.
Data access governance reports get site permission report for given users
Microsoft Summary
Microsoft SharePoint is introducing a Data access governance report in the admin center to help administrators identify sites accessible to specific groups and assess access levels. Rolling out worldwide from late November to early December 2026, it aids in managing permissions and preventing unintended content exposure.
- Message Center ID
- MC1540348
- Category
- stay Informed
- Severity
- normal
- Services
- SharePoint Online
- Tags
- New feature, Admin impact
- Roadmap ID
- 561039
- Platforms
- Web
- Published
- 2026-11-05
- Last updated
- 2026-11-05
- Expires
- 2027-01-08
[What and why] We are introducing a new Data access governance report in the SharePoint admin center that allows SharePoint administrators to identify all sites accessible to a given group and the extent of that access. Groups with broad membership, including groups created for vendors, can expose sensitive content to unintended recipients. This report helps administrators investigate potential exposure and verify group permissions. [Rollout schedule] General Availability (Worldwide, GCC, GCC High, DoD): Rollout will begin in late November 2026 and is expected to complete by early December 2026. [Impact on your organization] Who is affected SharePoint administrators responsible for managing and reviewing site permissions. Platforms and services Microsoft SharePoint admin center Data access governance What will happen SharePoint administrators will be able to use the new report to identify all sites accessible to a given group. The report will show the extent of the group's access to those sites. Administrators can use the report to investigate potential exposure of sensitive content and to review group permissions before assigning Copilot licenses. Data access governance page [Action required and recommendations] We recommend that you: Review your current SharePoint site permissions configuration to identify potential exposure. Notify your SharePoint administrators about the new reporting capability in the SharePoint admin center. Update your internal documentation and workflows to reflect this change. [Learn more] Data access governance reports - get site permission report for given users - SharePoint in Microsoft 365 | Microsoft Learn [Compliance considerations] No compliance considerations identified. Review as appropriate for your organization.