Microsoft is changing the everyday SharePoint Online and OneDrive sharing experience around a deceptively simple idea: one reusable link per file or folder. Microsoft calls it the hero link. Copy Link, sharing by email, and the item’s browser URL converge on that same canonical link instead of creating a growing collection of parallel links.
For users, this should feel simpler. For administrators, the value is more structural: fewer independent links to discover, explain, audit, expire, and remediate. The update does not replace permissions governance, but it gives governance teams a cleaner object to manage.
The update in one table
| Area | Current pattern | New hero-link pattern |
|---|---|---|
| Link creation | Common share actions can produce separate URLs. | Common actions reuse one canonical link for the item. |
| Scope changes | Users often create and resend another link. | Authorized users can adjust access around the existing link. |
| Manage Access | Links and direct access can feel fragmented. | A unified view surfaces access paths more clearly. |
| Compromised link | Finding and retiring the right link can be confusing. | Invalidate the hero link and issue a new URL without deleting direct permissions. |
| Existing links | Already in circulation. | Continue to work during rollout; no bulk reshare is required. |
What users will notice
The share dialog becomes more guided and less crowded. Microsoft is moving advanced choices behind a settings gear, consolidating access management, and changing the path for tasks such as setting expiration or stopping sharing. A first-run tutorial introduces the new model, and users can reopen that walkthrough later.
The important training message is not “sharing works differently everywhere.” The capabilities remain familiar. What changes is where controls appear and the expectation that users manage the scope of one link instead of repeatedly creating new ones.
What does not change
- Existing links and permissions remain valid. Microsoft says users do not need to recreate sharing that already works.
- The link does not override policy. Tenant defaults, site restrictions, sensitivity labels, information barriers, and external-sharing controls still govern effective access.
- Direct access and link access remain different concepts. Rotating the hero link does not remove a person’s direct permission.
- Oversharing is still possible. A simpler link model helps reveal access, but a broadly scoped link is still broad.
- Rollout will not look identical on every client immediately. Microsoft notes that Mac desktop apps may temporarily retain the older dialog while the web and other surfaces move ahead.
Why this matters for Copilot governance
Microsoft 365 Copilot grounds answers in content the user can already access. The hero link does not change that security boundary, but reducing link sprawl makes the access story easier to understand. One item with one canonical link is simpler to investigate than the same item with years of links carrying different audiences and expiration rules.
This is an opportunity to pair the interface rollout with a focused permissions review. The goal is not to delete every legacy link. It is to identify high-value sites, stale external access, “Anyone” links, unowned content, and files whose sensitivity should drive a narrower default.
Five checks before rollout reaches your tenant
1. Confirm the tenant schedule
Review Message Center item MC1454378. Microsoft’s updated schedule targets worldwide rollout from mid-September through late October 2026, but the tenant notice is the operational source for your environment.
2. Test the real sharing paths
Use a pilot site to test internal sharing, named external guests, broad links allowed by policy, expiration, access removal, link invalidation, and direct permissions. Include SharePoint, OneDrive, Teams file tabs, Outlook sharing, and mobile workflows used by your employees.
3. Rewrite helpdesk instructions
Old screenshots and phrases such as “create a new link with the correct permission” will send users down the wrong path. Update articles around the new Share dialog, settings gear, Manage Access view, expiration flow, and link rotation.
4. Revisit sharing defaults
The simpler interface makes defaults more influential. Verify the default link audience and permission, external-sharing level, guest expiration, domain restrictions, and site-level exceptions. A clean interface cannot compensate for an unsafe default.
5. Brief site owners and frequent sharers
Most employees need a short announcement. Site owners, executive assistants, project coordinators, and support staff need a guided demonstration with real examples. Explain that changing a link’s audience can affect every place that canonical URL has already been posted.
A practical rollout sequence
| Window | Action | Outcome |
|---|---|---|
| Now | Confirm MC1454378, identify pilot users, and capture current sharing defaults. | A known baseline and accountable owner. |
| Pilot | Exercise internal, external, expiration, invalidation, and direct-access scenarios. | Support guidance based on actual tenant behavior. |
| Before broad rollout | Update screenshots, service-desk scripts, owner training, and employee communication. | Less confusion when familiar controls move. |
| After rollout | Review sharing tickets, high-risk links, external guests, and user feedback. | Governance improves with the interface instead of lagging behind it. |
Frequently Asked Questions
What exactly is the hero link? It is the single reusable link associated with a file or folder across common Microsoft 365 sharing actions.
Will old links break? Microsoft says existing links and permissions continue to work during rollout.
Can we change access without changing the URL? The new experience is designed to let authorized users adjust scope while retaining the canonical link.
What if the URL leaks? Invalidate the hero link so the old URL stops working and a new one is issued. Review direct permissions separately.
Does this fix oversharing? It reduces link sprawl and makes access easier to reason about. It does not replace sensible defaults, ownership, review, labels, or external-sharing controls.
Make the new sharing experience a governance improvement
Accred Consulting can review SharePoint and OneDrive sharing defaults, pilot the hero-link experience, clean up high-risk access, and prepare practical guidance for users and site owners.
Review SharePoint Sharing