Stop Folder Chaos: How to Restrict Access to Sensitive Files in Microsoft SharePoint

Summary

This guide helps you troubleshoot and resolve: Stop Folder Chaos: How to Restrict Access to Sensitive Files in Microsoft SharePoint. Follow the steps below to fix the issue.

Common Causes

Managing who can see what within your organisation's SharePoint site is critical for protecting sensitive information such as HR records, payroll data, and financial reports. Without correct permissions, staff may accidentally access confidential files, and AI tools like Microsoft Copilot may surface private data to unauthorised users. This guide walks you through restricting folder access in SharePoint Online to ensure your data remains secure and Copilot-ready.

Quick Fix Steps

1. Navigate to your SharePoint site and open the document library containing the sensitive folder.
2. Hover over the folder you wish to secure and click the ellipsis (...) icon.
3. Select Manage access from the menu.
4. Click Stop inheriting permissions to create unique permissions for this folder.
5. Remove any unwanted groups or users and grant access only to authorised staff.
6. Click Grant Access to add specific people or groups and set their permission level.

Detailed Instructions

Step 1: Access the Document Library

Log in to your Microsoft 365 account and open SharePoint. Navigate to the site containing the sensitive files. Click on Documents in the left-hand navigation pane to open the document library.

Step 2: Select the Sensitive Folder

Locate the folder containing private HR, payroll, or financial information. Hover your mouse over the folder name until a checkmark appears, or click the ellipsis (...) next to the folder to open the context menu.

Step 3: Manage Access

From the context menu, select Manage access. A panel will open on the right side of the screen showing who currently has access to the folder and how it inherits permissions from the parent library.

Step 4: Stop Inheriting Permissions

By default, folders inherit permissions from the document library. To restrict access specifically for this folder:

1. In the Manage access panel, look for the option Stop inheriting permissions.
2. Click this option. SharePoint will warn you that this creates unique permissions for the folder. Note that SharePoint copies the existing permissions from the parent library before breaking inheritance, so you will need to manually remove any unwanted access afterward.
3. Confirm the action to proceed.

Step 5: Remove Unwanted Access

Review the list of users and groups with access. To remove access:

1. Click the dropdown arrow next to the user or group you wish to remove.
2. Select Remove Direct Access.
3. Confirm the removal when prompted.

Step 6: Grant Access to Authorised Staff

To add specific people:

1. Click the Grant Access button at the top of the panel.
2. Enter the names or email addresses of the staff members who require access.
3. Choose the permission level: Can edit or Can view. For sensitive financial data, Can view is usually sufficient.
4. Optionally, add a message explaining why access is being granted.
5. Click Grant Access to save.

Step 7: Verify Permissions

After configuring access, return to the Manage access panel to confirm that only authorised users are listed. Ask a colleague who should not have access to attempt opening the folder to verify the restriction is working.

Troubleshooting

Folder Still Appears in Search Results

Even with restricted permissions, a folder may appear in search results for users without access. However, when they attempt to open it, they will receive an access denied message. This is expected behaviour. To further reduce visibility, ensure the folder is not shared via Anyone links.

Unable to Stop Inheriting Permissions

If the Stop inheriting permissions option is greyed out, you may not have sufficient rights. You must be a site owner or have Full Control permissions on the document library. Contact your SharePoint administrator to request the necessary access.

Access Denied After Changes

If you accidentally remove your own access, you will need another site owner to re-grant you permissions. Always ensure at least two administrators have access to sensitive folders before restricting them.

Preparing for Microsoft Copilot

Before enabling AI tools like Microsoft Copilot in your organisation, review all SharePoint permissions. Copilot can analyse and summarise content it has access to, which means poorly secured folders could expose executive payroll or private director files to unauthorised staff. Use this opportunity to:

• Audit existing folder permissions across your document libraries.
• Remove broad Everyone or All staff groups from sensitive folders.
• Implement the principle of least privilege—grant only the access required for each role.
• Document who has access to which folders for future compliance reviews.

If you encounter issues configuring SharePoint permissions or need assistance preparing your data environment for AI tools, Open a Ticket with our Brisbane support team.

Still Having Issues?