title: SharePoint Online site configuration drift
agents: special_microsoft_365_sharepoint_config
license: GPL-2.0-only
distribution: checkmk-microsoft365
catalog: app/msoffice
description:

 Title: SharePoint Online site configuration drift.

 Data source: {Get-PnPTenantSite -Detailed}.

 The check performs configuration-drift monitoring. Values are normalized and hashed before being sent to the check plugin. "40 monitored field(s)" means these 40 selected configuration properties are included in the baseline; it is not an error count. On drift, Checkmk reports the property names whose hashes changed.

 Monitored properties: Template, AllowEditing, ArchiveStatus, LockState, OwnerEmail, SharingCapability, DefaultSharingLinkType, DefaultLinkPermission, DefaultShareLinkScope, DefaultShareLinkRole, AnonymousLinkExpirationInDays, ExternalUserExpirationInDays, OverrideTenantAnonymousLinkExpirationPolicy, OverrideTenantExternalUserExpirationPolicy, SharingDomainRestrictionMode, SharingAllowedDomainList, SharingBlockedDomainList, ConditionalAccessPolicy, ReadOnlyForUnmanagedDevices, DenyAddAndCustomizePages, SensitivityLabel, ProtectionLevelName, InformationBarrierMode, RestrictedAccessControl, RestrictedAccessControlGroups, StorageQuota, StorageQuotaWarningLevel, ResourceQuota, ResourceQuotaWarningLevel, EnableAutoExpirationVersionTrim, ExpireVersionsAfterDays, MajorVersionLimit, RequestFilesLinkEnabled, RequestFilesLinkExpirationInDays, CommentsOnSitePagesDisabled, SocialBarOnSitePagesDisabled, IsHubSite, HubSiteId, IsTeamsConnected, IsTeamsChannelConnected.

 Documentation: https://pnp.github.io/powershell/cmdlets/Get-PnPTenantSite.html

 The drift state and hold duration are configurable with the SharePoint configuration-drift rules.

inventory:

 One service is created per matching SharePoint site when individual site configuration monitoring is enabled. OneDrive personal sites are excluded unless explicitly enabled.

item:

 SharePoint site URL.
