Microsoft Stops OneDrive EEEU Permissions

What is EEEU authorization and why is it a problem?

EEEU authorization is a default setting within Microsoft 365 that allows internal users to automatically access certain files and folders in OneDrive and SharePoint.

In itself, this seems convenient because it makes collaboration within the organization easier. But there are also major risks involved:

⚠️ Unintentional exposure of sensitive data – Organizations often do not realize that files they upload are in some cases visible to everyone within the tenant. This can happen with shared team sites or document libraries, for example.

⚠️ Security risks – When users accidentally place confidential information in a folder with EEEU permissions, others within the organization can access it without explicit permission. This increases the risk of data breaches.

⚠️ Compliance challenges – For organizations with strict regulations around data protection (such as GDPR), this can be a problem. Uncontrolled file sharing with a broad group of users is often not in line with security and compliance requirements.

 

What will change as of April 10, 2025?

Microsoft has decided to permanently remove EEEU authorization from:

The root sites of OneDrive
The standard document libraries

This limits default access for all internal users and prevents files from being accidentally available to too broad a group.

Important to know:
✔️ Directly assigned permissions remain unchanged – Users and groups with explicit permissions retain their access. If apps, workflows or users depend on EEEU permissions,
❌ they will lose access once the change is made.

 

✅ What can you do to prevent problems?

Want to prevent employees or processes from unexpectedly losing access to certain files? Then it’s smart to take action now.

1. Check the current permissions in OneDrive and SharePoint

• Use the Microsoft 365 admin center or PowerShell to find out which files and folders are still using EEEU permissions.
• Pay particular attention to shared document libraries and team environments where many users have access.

2. Change permissions for critical files and folders

• Ensure that only appropriate users and groups have access.
• Use explicit permissions or Azure AD groups to manage access.
• Consider setting sensitivity labels and data loss prevention ( DLP) policies to prevent unintended sharing of sensitive information.

3. Inform employees and IT teams

• Many users are unaware of this change and may run into problems once EEEU authorization disappears.
• Inform them in time and indicate how to request access if they encounter restrictions.

⚙️ 4. Check your applications and automations

• If certain Power Automate flows, scripts or third-party apps depend on EEEU permissions, they may not work after April 10, 2025.
• Be sure to set alternate permissions to avoid disruptions.

 

What does this mean for your organization?

This change has both benefits and challenges.

✅ Benefits:
✔️ Improved security and reduced risk of inadvertent exposure of sensitive data.
✔️ Organizations gain more control over who has access to which files.
✔️ Compliance with regulations such as GDPR and ISO 27001 becomes easier.

❌ Potential challenges:
⚠️ Users may suddenly lose access to files they could previously access.
⚠️ Automations and apps that rely on EEEU may need to be manually modified.
⚠️ IT teams must invest additional time in rights management and communication.

 

How do you view this?

Do you think this change is a step forward for security and data protection? Or do you mostly see challenges for internal collaboration within organizations?

 

References

¹https://mc.merill.net/message/MC1013464

 

About the author

My name is Alta Martes, a specialist in Microsoft 365 and Google Workspace, with a focus on modern workplace management, cloud security and identity & access management. With years of experience, I help organizations optimize their IT infrastructure and create a secure, efficient digital workplace.

Need help with your Microsoft 365 strategy?
Click below and find out how we can support your organization: