Disable external sharing of Sway content

Description

In the Sway settings, Let people in your organization share their sways with people outside your organization is cleared. Sways can only be shared with people in the organization.

The setting has no PowerShell or Graph equivalent. Sway can also be turned off entirely by removing the Sway service plan from licenses.

Rationale

Sway has its own sharing model, not governed by the SharePoint and OneDrive sharing settings, sensitivity labels or DLP. Its external links can expose internal content to anyone who gets the link. When Sway is not needed for external communication, external sharing should be off.

Impact

Users can no longer publish Sways for customers or the public; they use approved channels instead. Existing external links stop working for external viewers.

Setting

Audit

1. Sign in to the Microsoft 365 admin center (https://admin.cloud.microsoft) as at least a Global Reader.
2. Browse to Settings > Org settings > Services > Sway, section Sharing.
3. Fail if Let people in your organization share their sways with people outside your organization is checked.

Remediation

1. Sign in to the Microsoft 365 admin center as at least a Global Administrator (or Office Apps Administrator).
2. Browse to Settings > Org settings > Services > Sway.
3. Clear Let people in your organization share their sways with people outside your organization and Save.

Rollback

Check the option again.

References

• Administrator settings for Sway Microsoft, vendor-doc, accessed 2026-10-24
• Disable access to Sway with Microsoft 365 PowerShell Microsoft, vendor-doc, accessed 2026-10-24

Mappings

How this control relates to the other framework's: equivalent, stricter, looser, partial or related.

People and lifecycle