Remove external collaborator for O365 with DLP Enforce response rule

Products

• CASB Securlet SAAS
• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard

Issue/Introduction

You need a DLP Enforce response rule to remove all external collaborators when an Office 365 SharePoint or OneDrive file triggers the policy.

Resolution

The Enforce's 'Remove Collaborator Access' rule can be used to achieve this. This response rule actually removes only external collaborators (and all of them) —unless the file was shared via group that includes both internal and external users, in which case both will be removed.

If you only want to remove any specific collaborator then you have to use the following custom rule and policy.