Sharing and Collaborating on Documents Online

Share files professionally, co-author documents in real time, and manage permissions so that colleagues access exactly what they need — and nothing more.

📘 Reading Lesson

Lesson Notes

Read through the key concepts before you try the challenge.

Real-World Scenario

Your supervisor needs to review a patient communication template you drafted before it goes live. The billing manager needs editing access to the monthly expense report. And a referring physician's office has requested that you share the updated referral form — but only for viewing, not editing. All three require different sharing permissions, and all three must be handled without attaching files to email. This lesson teaches you the correct way to share through Microsoft 365.

Sharing Files from OneDrive

Sharing from OneDrive sends a link rather than a file attachment — this has several important advantages for professional workflows:

  • To share a file from OneDrive: right-click the file in File Explorer (or in the OneDrive web portal), select Share. In the sharing dialog, type the recipient's name or email address, choose the permission level (Can edit or Can view), add an optional message, and click Send. The recipient receives an email with a secure link that opens the file in their browser or desktop app.
  • Link-sharing is better than email attachment for collaboration — when you email an attachment, recipients each have their own copy, and version control becomes impossible if multiple people edit simultaneously. When you share a OneDrive link, everyone accesses the same single file. All changes are synchronized in real time and a single version history is maintained.
  • Permission levels control what recipients can do — 'Can view' allows the recipient to read the file but not make changes (use this for external parties who should only read the document, such as the referring physician's office in the scenario above). 'Can edit' allows full editing rights (use this for internal colleagues who need to make changes). Never grant edit access to an external party for a document containing patient information without supervisor approval.
  • Link expiration and password protection — in the OneDrive sharing dialog, click the settings icon (gear) to set a link expiration date (the link stops working after that date) and optionally require a password to open the link. For sensitive documents shared externally, always set an expiration date. A link that never expires continues to work even after the recipient has no legitimate need to access the file.

Real-Time Co-Authoring

When a file is saved in OneDrive or SharePoint and shared with edit access, multiple people can edit it simultaneously — this is called co-authoring. Understanding how it works prevents conflicts and confusion:

  • Co-authoring works in Word, Excel, and PowerPoint when the file is in OneDrive or SharePoint — each co-author's cursor appears in a different color so you can see where others are editing in real time. Changes appear on your screen within seconds of another user making them. This eliminates the 'which version is current?' problem completely.
  • AutoSave replaces manual saving in co-authored files — when a file is in OneDrive and co-authoring is active, AutoSave (shown in the top-left corner of Word or Excel) saves your changes continuously. There is no need to press Ctrl+S. However, if AutoSave turns off unexpectedly, check your OneDrive sync status — a sync problem disables AutoSave.
  • Use comments rather than direct edits for feedback — when reviewing someone else's document, use the Insert > Comment feature (Ctrl+Alt+M in Word) to add a comment in the margin rather than directly changing the text. This allows the document owner to review, accept, or reject suggestions rather than discovering mysterious changes to their document.
  • Resolve conflicts gracefully — if two people edit the same sentence at exactly the same time, Word creates a conflict resolution prompt. Read both versions carefully and choose the correct one, or merge them manually. In a well-coordinated team, conflicts are rare because team members communicate about which sections they are editing before starting.

Managing Access to Shared Files

Sharing permissions can be modified or revoked at any time — this ongoing management is as important as the initial sharing setup:

  • To view and manage who has access to a file: right-click the file in OneDrive, select 'Manage Access.' This shows a list of everyone who has been granted access, their permission level, and the sharing links that have been created. You can change permission levels or revoke access from this panel.
  • Revoke access when it is no longer needed — when a staff member leaves the practice, is reassigned, or when an external collaboration concludes, remove their access to shared files immediately. In a medical office, former employees retaining access to shared files is a potential data breach. Your IT department typically handles account deactivation, but knowing to request it is important.
  • Audit sharing regularly — quarterly, review the Manage Access panel for your most sensitive shared documents and confirm that all current access holders still have a legitimate need. Remove any who do not. This practice is a component of HIPAA's minimum necessary access principle.

Responsible Use

Sharing a OneDrive or SharePoint link to a file containing PHI with an external party — even a referring physician — may require a Business Associate Agreement to be in place between your practice and the recipient's organization. Do not share files containing patient information externally without confirming with your supervisor that the appropriate agreements and security controls are in place. The convenience of link sharing does not override HIPAA sharing restrictions. When in doubt, route the file through your organization's secure messaging or fax system instead.

AI Assist

💡 AI Task: Ask ChatGPT — 'Explain Microsoft 365 file sharing best practices for a medical office. Include: when to share via link vs. email attachment, how to set appropriate permissions for different recipients (internal staff vs. external physicians vs. vendors), when to set link expiration dates, and how to revoke access. Make the guidance practical and specific to healthcare.' Compare the response to your office's current sharing practices and identify any gaps.

Knowledge Check

A referring physician's office asks you to share the updated referral form so they can see the latest version at any time. What is the correct sharing approach?

Challenge

Apply what you've learned in this lesson.

Practice sharing files with appropriate permission levels.

  1. Open the 'CloudTest' document you created in the previous lesson. Share it with a classmate or family member using the 'Can view' permission. Screenshot the sharing dialog showing the recipient and permission level before clicking Send.
  2. Ask your sharing recipient to attempt to edit the document. Confirm they receive a 'view only' restriction. Screenshot their view showing the document is not editable.
  3. Change the permission to 'Can edit,' ask your recipient to make a one-word change, and observe the co-authoring indicator (their cursor) appearing in your document in real time. Screenshot the co-authoring view.
  4. Open Manage Access for the same file and revoke your recipient's access. Confirm the file now shows no external shares. Screenshot the Manage Access panel showing the access removed.