What it works with
Module: PnP.PowerShell
Context: PowerShell 7.4+ · SharePoint Online · PnP.PowerShell
Compatibility: PowerShell 7.4+ is required by current PnP.PowerShell releases.
POWERSHELL / SHAREPOINT
FreeIntermediateRead-onlylow
Export SharePoint sharing settings
Exports tenant and site sharing configuration with normalized meanings rather than raw enum values only.
Generated locally in your browser · Runs in your PowerShell environment · Review before running
What this PowerShell script does
Exports tenant and site sharing configuration with normalized meanings rather than raw enum values only.
Requirements
- SharePoint admin URL - Example: https://contoso-admin.sharepoint.com
- Entra app client ID - Your PnP app client ID. Leave empty only when a PnP default client ID is already configured.
- CSV output path - Use a new absolute Windows CSV path.
Environment
- Module: PnP.PowerShell
- Runtime: PowerShell 7.4+
- Authentication: Interactive PnP login with your own Entra app/client ID or configured default
- Permissions: SharePoint AllSites.Read delegated access + SharePoint Administrator role / tenant-admin-site access.
- Risk: Low
Review before you run The generated script is read-only, but authentication and access requirements still apply in your tenant.
OPS / WORKSPACE
Ready to generate
Configure Export SharePoint sharing settings in the Builder, review the generated PowerShell and run it in your own environment.
When to use this template
Reports the tenant sharing capability and site sharing capability, default-link/expiration/domain settings when surfaced by the current tenant API, and a short normalized interpretation. It does not enumerate actual sharing links.
Important limitations
- This is a configuration report, not an audit of actual external/anonymous sharing links.
- Tenant properties that are unavailable during Microsoft feature rollout remain blank and are noted instead of guessed.
- Site SharingCapability is reported from tenant-site metadata and should be interpreted with the tenant policy context.
PowerShell and PnP requirements
Current PnP.PowerShell releases require PowerShell 7.4 or later. Interactive authentication requires your own Entra application/client ID, or a default client ID that you have configured for PnP.PowerShell. Opselith does not connect to SharePoint or run the script on your behalf.
Generate the script
- Open the template in the PowerShell Builder.
- Enter the requested URLs, client ID (when needed) and a new CSV output path.
- Generate the script, review its permissions and commands, then run it in your own PowerShell environment.
OPS / SCRIPT DETAILS
Script details
Exports tenant and site sharing configuration with normalized meanings rather than raw enum values only. Review these details before generating or running the script.
Permissions and impact
Permissions: AllSites.Read · SharePoint Administrator
Risk: Low
Execution impact: Read-only. The script reads tenant and SharePoint site sharing configuration and does not change sharing policies or links.
Parameters
- SharePoint admin URL - Example: https://contoso-admin.sharepoint.com
- Entra app client ID - Your PnP app client ID. Leave empty only when a PnP default client ID is already configured.
- CSV output path - Use a new absolute Windows CSV path.
Output
Output: CSV report with Scope, SiteUrl, SharingCapability, SharingMeaning, DefaultSharingLinkType, AnonymousLinkExpirationDays, DomainRestrictionMode and Notes.
This template is available in the free library and is generated locally in your browser.
Example use
Exports tenant and site sharing configuration with normalized meanings rather than raw enum values only.
Enter the required values in the Builder, review the generated script and confirm the output before running it.
Before you run: Use PowerShell 7.4+ with PnP.PowerShell and SharePoint Administrator access. Review the normalized sharing meanings carefully: this report describes configured/effective sharing controls, not actual sharing-link usage.
Opselith quality checks
- Included in the current Opselith PowerShell quality suite
- Current PnP.PowerShell runtime and interactive-auth requirements documented
- Read-only behavior and minimum permissions documented
- Stable CSV column order and explicit zero-result behavior
- Review-before-run guidance provided
- No artificial pacing inside SharePoint enumeration loops
- Unknown or rollout-dependent tenant properties are left blank instead of fabricated
Was this useful?One click. No email.