title: SharePoint Online tenant configuration drift
agents: special_microsoft_365_sharepoint_config
license: GPL-2.0-only
distribution: checkmk-microsoft365
catalog: app/msoffice
description:

 Title: SharePoint Online tenant configuration drift.

 Data source: {Get-PnPTenant}.

 The check performs configuration-drift monitoring. Values are normalized and hashed before being sent to the check plugin. "55 monitored field(s)" means these 55 selected configuration properties are included in the baseline; it is not an error count. On drift, Checkmk reports the property names whose hashes changed.

 Monitored properties: SharingCapability, DefaultSharingLinkType, DefaultLinkPermission, LegacyAuthProtocolsEnabled, LegacyBrowserAuthProtocolsEnabled, RequireAcceptingAccountMatchInvitedAccount, ShowEveryoneClaim, ShowAllUsersClaim, ShowEveryoneExceptExternalUsersClaim, ExternalUserExpirationRequired, ExternalUserExpireInDays, RequireAnonymousLinksExpireInDays, SharingDomainRestrictionMode, SharingAllowedDomainList, SharingBlockedDomainList, RestrictExternalSharing, PreventExternalUsersFromResharing, AnyoneLinkTrackUsers, IPAddressEnforcement, IPAddressAllowList, ConditionalAccessPolicy, BlockAccessOnUnmanagedDevices, AllowLimitedAccessOnUnmanagedDevices, BlockDownloadOfAllFilesOnUnmanagedDevices, BlockDownloadOfViewableFilesOnUnmanagedDevices, IsUnmanagedSyncClientForTenantRestricted, DisableCustomAppAuthentication, OfficeClientADALDisabled, EnforceRequestDigest, DisallowInfectedFileDownload, AllowDownloadingNonWebViewableFiles, DisableSharePointStoreAccess, SharePointAddInsBlocked, SharePointAddInsDisabled, EnableAzureADB2BIntegration, EnableGuestSignInAcceleration, OneDriveForGuestsEnabled, OneDriveSharingCapability, OneDriveOrganizationSharingLinkMaxExpirationInDays, OneDriveOrganizationSharingLinkRecommendedExpirationInDays, OrphanedPersonalSitesRetentionPeriod, RecycleBinRetentionPeriod, SelfServiceSiteCreationDisabled, CustomScriptsRestrictMode, ContentSecurityPolicyEnforcement, EnableRestrictedAccessControl, RestrictedAccessControl, EnableMipSiteLabel, EnableSensitivityLabelForPDF, MarkNewFilesSensitiveByDefault, MassDeleteNotificationDisabledForSPO, NotificationsInSharePointEnabled, PublicCdnEnabled, HideSyncButtonOnDocLib, HideSyncButtonOnODB.

 Documentation: https://pnp.github.io/powershell/cmdlets/Get-PnPTenant.html

 The drift state and hold duration are configurable with the SharePoint configuration-drift rules.

inventory:

 One service is created when the corresponding data is available.
