Cleanup Opportunities

The Cleanup Opportunities tile on the Syskit Point Dashboard shows any permission cleanup opportunities such as, redundant unique permissions from expired links, access that differs from your current sharing policies, and files with permissions that haven't been used in a long time.

The tile gives you a single place to see how many of these issues exist in your tenant and lets you take action on them directly, without having to search through reports.

The Cleanup Opportunities tile shows the state for four categories:

• Redundant Unique Permissions (1) - these are items where unique permissions match the parent so removing them simplifies your structure without changing anyone’s access.
• Inactive Unique Permissions (2) - these are files with unique permissions that haven’t been accessed or modified within the defined inactivity period.
• Leftover Anyone Links (3) - these are anyone links that now aren't aligned with your external sharing policy because your external sharing settings have since become more restrictive.
• Leftover External Users (4) - these are external users whose access now aren't in compliance with your external sharing policy because your settings became more restrictive.

Clicking any of the counts in the tile opens the relevant report, where you can review the findings and take action.

Redundant Unique Permissions

After sharing links expire, get deleted, or access is granted ad hoc, unique permissions are often left behind even when they're no longer needed, making them redundant. Redundant unique permissions also happen with items where unique permissions match the parent. Over time, they accumulate silently: permission reviews become harder to complete, SharePoint performance degrades on heavily affected sites, and admins lose a clear picture of who actually has access. These redundant unique permissions can be safely removed to simplify your structure without changing anyone's access.

On the dashboard tile, you'll see the number of redundant unique permissions ready to be cleaned up, click Fix Now to start.

After selecting Fix Now, the information dialog opens, providing more details on Redundant Unique Permissions and leaves you with two options:

• Clicking the Request Automation button lets you send us a request for this feature to be automated, which helps us prioritize the improvements you're requesting

• Clicking Resolve Manually opens the Unique Permissions report

  • After generating the report, you'll see the recommendation to Delete Redundant Unique Permissions (1), where applicable
  • Selecting that object lets you complete the Delete Unique Permissions action (2)

Please note: When using multiselect, be mindful that parent nodes in the tree may have unique permissions without the Redundant Unique Permissions recommendation. Selecting them will delete their unique permissions even if those are still needed.

Inactive Unique Permissions

Files shared for ad hoc collaborations, one-off requests, or short-term projects often retain unique permissions long after the work is done. With no activity, no views or edits, the access just sits there unchallenged, with no signal to tell admins which permissions are still needed and which have been overlooked. Files with Inactive Unique Permissions haven't been accessed or modified in the last 180 days. Over time, inactive unique permissions accumulate and create real risk: ongoing access to files that no one is actively monitoring. By cleaning them up, you're removing that unnecessary risk exposure.

On the dashboard tile, you'll see the number of inactive unique permissions ready to be cleaned up, click Fix Now to start.

After selecting Fix Now, the information dialog opens, providing more details on Inactive Unique Permissions and leaves you with two options:

• Clicking the Request Automation button lets you send us a request for this feature to be automated, which helps us prioritize the improvements you're requesting
• Clicking Resolve Manually opens the Permissions Matrix report
  • After generating the report, use the filter next to the recommendations column (1) to search for Delete Inactive Unique Permissions (2)
  • Selecting that object lets you complete the Delete Unique Permissions (3) actions

Leftover Anyone Links

When external sharing settings become more restrictive, SharePoint blocks existing Anyone links, but doesn't delete them. These links were valid when created, but once your settings became more restrictive, they no longer comply with your external sharing policy and should be removed. Deleting these links permanently removes the risk. Unlike tightened settings that can be reverted, a deleted link cannot be reactivated.

On the dashboard tile, you'll see the number of leftover anyone links ready to be cleaned up, click Fix Now to start.

After selecting Fix Now, the information dialog opens, providing more details on Leftover Anyone Links and leaves you with two options:

• Clicking the Request Automation button lets you send us a request for this feature to be automated, which helps us prioritize the improvements you're requesting
• Clicking Resolve Manually opens the Sharing Links report
  • After clicking the report, you'll see the workspaces where there are leftover sharing links, and selecting them lets you generate the report
  • Once the report is generated, you'll see the recommendation to Remove Leftover Anyone Link (1), where applicable
  • Selecting object lets you complete the Remove Sharing Link (2) action

Leftover External Users

When external sharing settings become more restrictive, SharePoint blocks existing guest users, but doesn't remove them. These users had valid access when it was granted, but once your settings became more restrictive, they no longer comply with your external sharing settings and should be removed. Removing these external accounts eliminates

On the dashboard tile, you'll see the number of leftover external users ready to be cleaned up, click Fix Now to start.

After selecting Fix Now, the information dialog opens, providing more details on Leftover External Users and leaves you with two options:

• Clicking the Request Automation button lets you send us a request for this feature to be automated, which helps us prioritize the improvements you're requesting
• Clicking Resolve Manually opens the Externally Shared Content report
  • After clicking the report, you'll see the workspaces that include leftover external users, and selecting them lets you generate the report
  • Once the report is generated, you'll see the recommendation to Remove Leftover External User Access (1), where applicable
  • Selecting that user lets you complete the Remove Access (2) actions