A SharePoint sharing report without PowerShell

The genuinely complete native way to report on SharePoint sharing is PowerShell: enumerate every site, walk every library, read every item's links and permissions. It works — and it's a real engineering job, with throttling, token lifetimes, retries, and raw output to post-process afterwards. If scripting isn't where you want to spend the time, here's the no-PowerShell alternative, and exactly what you trade for it.

Why the complete native route is a script

The GUI reports each stop short of a tenant-wide answer:

• Site Usage only lists files that were shared and accessed, one site at a time.
• The per-site sharing CSV is more complete but still one site at a time, one moment in time, and raw row-per-item.
• Data Access Governance is broader but sits behind the SharePoint Advanced Management add-on or a Copilot licence — the licence-wall guide covers that in full.

So to get everything, in one place, people reach for PowerShell — the PnP cmdlets like Get-PnPSharingLinks and friends. That's the complete route, and the one this page offers an alternative to. The full walk-through of all the native methods lives in the complete how-to.

What "without PowerShell" should still give you

A no-script alternative is only worth it if it doesn't quietly give up completeness. The bar to clear:

• Tenant-wide in one pass — every site and every OneDrive, not site-by-site.
• Complete on the sharing shapes that matter — anonymous links, specific-people external links, direct guest grants, pending invitations, group grants, and inherited access.
• Deduplicated — not tens of thousands of raw rows.
• Repeatable without re-authoring anything.

The no-code alternative

TRACER365 is a locally installed Windows app that does exactly this from a UI: one read-only scan covers every SharePoint site and every OneDrive and returns external exposure as severity-ranked finding types, with the inherited duplicates collapsed under their cause — in our testing, roughly 91% of raw findings collapsed as duplicates. No script to write, throttle, or maintain; you point it at the tenant and read the result.

• Read-only. It reports; it doesn't change tenant state.
• No Copilot or Advanced Management licence required.
• Scheduled re-scans keep the answer current instead of leaving you a stale CSV.
• Change history — removed sharing resolves on the next scan and stays in the record.

Honesty note: TRACER365 audits SharePoint and OneDrive file sharing. It doesn't cover Exchange mailboxes, Microsoft Forms, or Planner — the product page states exactly what it does and doesn't cover.

PowerShell vs. the no-code scan