Cloud Sharing & External Access Simulator
Q4_Customer_DB_and_Strategy.xlsx
Sensitivity: contains PII, customer emails & internal financials.
Sharing action: anonymous external share link
https://company.sharepoint.com/:x:/s/marketing/guest-token-12345
External access scenarios
SaaS Data Access Pipeline
Request flow through the cloud control layers.
Anonymous Link Click
External Internet
Tenant Sharing Policy & Guest Access
M365 / SharePoint Level
Cloud Access Security Broker
CASB / Defender for Cloud Apps
Data Loss Prevention Engine
DLP Content Inspection
Purview Information Protection
MIP Classification & Encryption Rights
File Access Outcome
Download decision
Cloud & SaaS Defense Controls
Tenant Sharing & Guest Access — baseline governance
Binds every external session to a verified mailbox identity.
Content may be previewed in browser but never leaves the tenant.
Awaiting simulation — configure controls, pick a persona, then run the access attempt.