MC1198075 Low
Site attestation policy is now generally available
Summary AI-generated
SharePoint admins can now enable site attestation policies to require site owners to regularly confirm ownership, membership, and sharing settings, with configurable enforcement for non-compliance.
Suggested actions AI-generated
- Notify SharePoint admins
- Update documentation and workflows
- Review governance and enforcement policies
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1222976 Email customization is now available in Site Lifecycle Management Policies
- MC1274323 SharePoint Advanced Management: Delegate management of Restricted Access Control (RAC) to site admins
- MC1259825 SharePoint Advanced Management: Site admin control for restricted content discovery
- MC1540348 Microsoft SharePoint: Data access governance report for group permissions
- MC1198704 Microsoft SharePoint Online: Email customization for site access review from Data Access Governance reports
- MC1192256 Microsoft Purview | Data Loss Prevention- Admin units support for Microsoft SharePoint Online
Original post from Microsoft
[Introduction]
Empower your organization with proactive governance. The new site attestation policy ensures that site owners regularly validate critical details like ownership, membership, and sharing settings. By automating periodic reviews and enforcement actions, this policy helps reduce compliance risks, prevent oversharing, and maintain a secure, well-governed SharePoint Online experience.
[When this will happen:]
This feature is now generally available to all customers.
[How this will affect your organization:]
- Who is affected: SharePoint administrators and site owners.
- What will happen:
- SharePoint admins can enable site attestation policy in the SharePoint Admin Center.
- Site owners will receive periodic prompts to confirm site details such as ownership, membership, and sharing settings.
- Enforcement actions (such as restricting access or archiving) can be configured if attestations are not completed.
- The feature is off by default and requires admin configuration.
[What you can do to prepare:]
- Notify your SharePoint administrators about the new policy.
- Update internal documentation and workflows to account for this capability.
- Review governance policies and determine enforcement actions for non-compliance.
Learn more: Request recurring site attestations for SharePoint sites
[Compliance considerations:]
No compliance considerations identified, review as appropriate for your organization.
Additional details from Microsoft
- Summary
- Site attestation policy is now generally available, enabling SharePoint admins to require site owners to periodically verify site ownership, membership, and sharing settings. This helps reduce compliance risks and prevent oversharing. The feature is off by default and requires admin setup with configurable enforcement actions.