MC1198075 – M365 Change Digest

One-line summary

SharePoint admins can now enable site attestation policies to require site owners to regularly confirm ownership, membership, and sharing settings, with configurable enforcement for non-compliance.

Similar updates

Details

Summary

Site attestation policy is now generally available, enabling SharePoint admins to require site owners to periodically verify site ownership, membership, and sharing settings. This helps reduce compliance risks and prevent oversharing. The feature is off by default and requires admin setup with configurable enforcement actions.

Body (from Message Center)

[Introduction]

Empower your organization with proactive governance. The new site attestation policy ensures that site owners regularly validate critical details like ownership, membership, and sharing settings. By automating periodic reviews and enforcement actions, this policy helps reduce compliance risks, prevent oversharing, and maintain a secure, well-governed SharePoint Online experience.

[When this will happen:]

This feature is now generally available to all customers.

[How this will affect your organization:]

Who is affected: SharePoint administrators and site owners.
What will happen:
- SharePoint admins can enable site attestation policy in the SharePoint Admin Center.
- Site owners will receive periodic prompts to confirm site details such as ownership, membership, and sharing settings.
- Enforcement actions (such as restricting access or archiving) can be configured if attestations are not completed.
- The feature is off by default and requires admin configuration.

[What you can do to prepare:]

Notify your SharePoint administrators about the new policy.
Update internal documentation and workflows to account for this capability.
Review governance policies and determine enforcement actions for non-compliance.

Learn more: Request recurring site attestations for SharePoint sites

[Compliance considerations:]

No compliance considerations identified, review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Notify SharePoint admins",
      "Update documentation and workflows",
      "Review governance and enforcement policies"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "SharePoint admins can now enable site attestation policies to require site owners to regularly confirm ownership, membership, and sharing settings, with configurable enforcement for non-compliance.",
    "ai_topics": [
      "SharePoint"
    ],
    "category": "stayInformed",
    "details_map": {
      "Summary": "Site attestation policy is now generally available, enabling SharePoint admins to require site owners to periodically verify site ownership, membership, and sharing settings. This helps reduce compliance risks and prevent oversharing. The feature is off by default and requires admin setup with configurable enforcement actions."
    },
    "id": "MC1198075",
    "importance": 1,
    "is_major_change": false,
    "last_modified": "2025-12-16T23:38:57Z",
    "ms_products": [
      "SharePoint"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "SharePoint Online"
    ],
    "severity": "normal",
    "tags": [
      "New feature",
      "Admin impact"
    ],
    "title": "Site attestation policy is now generally available"
  }
}