Security Reviews for SharePoint Sites
Protect information which may unintentionally be visible to the entire Cornell community through search and AI tools.
This article applies to: SharePoint
SharePoint owners need to protect information which may unintentionally be visible to the entire Cornell community through search and AI tools. Here's how to review and respond to email notices.
SharePoint Sites Include Teams Channels
When you create a Teams channel Microsoft automatically creates a SharePoint site within its ecosystem. Use the steps under Review Shared Teams Permissions below.
Review SharePoint Permissions Following an Email Prompt
Always check the Cornell Verified Communications to confirm you have received a legitimate email. Email notices sent to owners of SharePoint sites look similar to the following:
If the email you receive refers to a Teams channel or a Team, "Connected to Teams" appears below the site name. Follow these instructions for a Teams channel or a Team.
To review a SharePoint site:
- From the email, click the in the table row.
- In the SharePoint site, the Action column is at the far right edge. This web application does not provide a horizontal scroll bar to access the column. Expand the browser window to its widest width or reduce the content in order to find that column.
- Select the by Manage Access in the Action column to change settings.
- Modify any permissions no longer needed.
- Select the button when permission changes are satisfactory.
Review Teams Channel Permissions Following an Email Prompt
Always check the Cornell Verified Communications to confirm you have received a legitimate email. Email notices sent to owners of SharePoint sites look similar to the following:
If the email you receive refers to a Teams channel or a Team, "Connected to Teams" appears below the site name.
You need to do the following:
- In Teams go to the channel (or Team) and click on the to the right of the channel name. (This might be hidden under a date.) 
- Click Manage Channel (or Manage Team). 
- Review Owners, Members, and Teams. (For a Team, click on Members to review Members and Members and guests.) 
- If you do not want to change permissions, then raise awareness in your Team or channel about file sharing in the age of AI.
Review SharePoint Sites At Any Time
To review the settings on a SharePoint site that you own:
- Go to your SharePoint site
- Click (Gear icon) at the top right 
- Click either or 
- Click either or TIP: if a folder’s permissions are set to “Everyone except external users” then all files in that folder will be visible to the same group. Once you change the folder’s permissions, files in that folder will now reflect that new status.
As generative AI use at the university expands, files that lack appropriate viewing permissions will be exposed to individuals and uses for which they were not intended. Our goal is to help you prevent this unintended exposure. If you need help with site permissions, please contact the IT Service Desk. Here are some additional resources to help you manage your data.
 
 
 
 
 
 
 
 
 
Comments?
To share feedback about this page or request support, log in with your NetID