Sharing is easy to do and easy to forget. These two views are how you find out what is actually outstanding, and they are worth a look before any access review or when someone leaves your team.

Shared by Me lists everything you have shared out. This is the one to check periodically, because it is the only place your own sharing history is gathered up.

Shared with Me is the receiving side. Content someone shares with you appears here without moving from wherever they keep it.

Unsharing removes the access you granted. Do this the moment a piece of work finishes rather than waiting for a review to find it.

Revoke works on the receiving side. It removes a file from your Shared with Me, which is how you tidy up your own view when someone has shared things you no longer need.

Worth being clear about the difference: unsharing is the owner withdrawing access, and revoking is a recipient clearing their own list. They are not the same action, and only the first one actually removes someone's access.

A pass through Shared by Me every quarter takes a few minutes and is the cheapest governance habit available to you. Look for work that has finished, people who have moved on, and anything shared during a project that ended a while ago.

Note that this view covers person to person sharing. Links and portals are tracked separately, so a full review means checking those too.

Removing a user's access covers the full offboarding sequence. Monitoring and closing a portal covers portals.