Start by reviewing the intended audience before sharing: anyone permitted to open a shared link can view its content. The cited guidance establishes that access rule, but it does not confirm a viewer directory or a way to enumerate everyone permitted to open the link.
What the access rule means
A link sent to a particular person should not be treated as recipient-only unless the current audience controls confirm a narrower restriction. For access-control purposes, every person permitted to open the link must be counted as able to view the shared content. If the intended audience cannot be identified, the cautious action is not to share yet.
What to check before sharing
- Content: Review the full conversation for anything not intended for the audience.
- Audience: Review the intended audience before creating or sending the link. The cited guidance does not name the exact interface control or option.
- Permission: Identify who would be permitted to open the link. Anyone in that group can view the content.
- Unstated protections: Do not assume that sign-in requirements, expiration, discoverability limits, or access revocation apply; the cited statement does not specify them.
What must still be confirmed
The current interface and corresponding help material remain necessary for details not covered by the cited statement, including:
- Where the audience control appears and what its options are called.
- How the selected audience determines who may open the link.
- Whether the audience of an existing shared link can be reviewed.
- Whether access can be changed or revoked.
- Whether sign-in, expiration, or other restrictions apply.
Until those details are confirmed, the defensible rule is simple: review the content, review the audience, and treat every person permitted to open the link as able to view it.