# SharePoint Online

> Source: Courseiva IT Certification Glossary — https://courseiva.com/glossary/sharepoint-online

## Quick definition

SharePoint Online is a service you get with a Microsoft 365 subscription. It works like a central online folder system where your company can store files, share them with coworkers, and build internal websites like a team hub or a company news page. You can access it through a web browser without installing anything on your computer, and it automatically syncs with Microsoft Teams and OneDrive.

## Simple meaning

Imagine your company has a giant digital filing cabinet that everyone can reach from any computer, tablet, or phone. Unlike a regular filing cabinet that sits in one office, this one lives in the cloud, which is just a fancy way of saying on Microsoft's secure internet servers. You open your web browser, log in with your work email, and you see a page with links to different team spaces. Each team space is like a private room where only the people in that team can go. Inside that room, there are folders for documents, a calendar for deadlines, and a list for tasks.

Think of SharePoint Online as the workplace equivalent of a shared family recipe box. One person can put a new recipe file in the box, and everyone else can open it, read it, and even add their own notes without making a copy. If someone accidentally deletes the recipe, you can ask the cloud version to bring back the old one from an automatic backup. The biggest difference from just using email attachments is that there is only one version of every file. When you work on a document with a coworker, you are both editing the same file at the same time, and SharePoint keeps track of every change in a version history. This means you never need to email files back and forth or worry which draft is the newest.

Another way to understand SharePoint is to picture a company bulletin board. At a physical office, someone pins an important memo on the corkboard in the break room. With SharePoint, the bulletin board is a web page. The company can create pages that look like mini websites for announcements, policies, or project updates. The pages can include embedded videos, news feeds, and links to other tools like Microsoft Forms or Power BI dashboards. Unlike a physical board, a SharePoint page can be seen by people working from home or in different cities, and it can be updated in real time by anyone with permission. Everything is organized under a central company home page, called the root site, and you navigate through it like browsing a library catalog.

## Technical definition

SharePoint Online is a cloud-hosted platform within the Microsoft 365 ecosystem that provides content management, collaboration, and intranet capabilities. Underlying the service is a multi-tenant architecture hosted on Microsoft Azure infrastructure. Each tenant is isolated, meaning your company's data is logically separated from other customers' data, even though the physical servers may be shared. The service is accessible via HTTPS over the internet, and authentication is handled through Azure Active Directory (now called Microsoft Entra ID). Authorization uses SharePoint groups and permission levels, which control what users can see, edit, delete, or administer within site collections.

At the core of SharePoint Online are site collections. A site collection is a hierarchical grouping of sites that share common administration settings, such as storage quotas, permission inheritance, and feature activation. Each site collection has a top-level site and can contain many subsites. Sites themselves can be team sites (for collaboration with Microsoft 365 Groups integration) or communication sites (for broadcasting information to a broad audience). Libraries and lists are the fundamental data containers. A document library stores files and supports metadata columns, versioning, check-in/check-out, content approval, and workflow integration through Power Automate. Lists are similar but store rows of structured data, useful for tracking issues, contacts, or inventory.

SharePoint Online uses Representational State Transfer (REST) APIs and the SharePoint Framework (SPFx) for custom development. Data transfer relies on the HTTP protocol, and file synchronization is handled by the OneDrive sync client, which uses the Files-On-Demand feature to optimize local storage. The service is backed by a Service Level Agreement (SLA) of 99.9% uptime for the web application tier, with automatic failover across Microsoft datacenters. Compliance features include data loss prevention (DLP) policies, eDiscovery, legal hold, and retention labels integrated with the Microsoft 365 Compliance Center. Version history is stored for 500 major versions by default, but administrators can adjust these limits. Search indexing is built on the Microsoft Search platform, providing both full-text and metadata-based queries across the tenant. For IT professionals implementing SharePoint Online in an enterprise, configuration involves planning site architecture, setting up external sharing policies, managing storage limits, and applying sensitivity labels through Microsoft Purview.

## Real-life example

Think of SharePoint Online like a community library for your entire company. In a regular library, there are shelves for different subjects, a checkout desk, and a quiet reading room. The library has a librarian who decides who can borrow rare books and who can only read them in the building. In the SharePoint version, the library is digital and lives on the internet. Each team within your company gets its own section of the library, like a separate room with its own door. Only people on that team have the key to the door. When someone creates a new file, they place it on the shelf inside their room. Other team members can walk in, open the file, edit it, and put it back. If two people grab the same file at the same time, the system lets them both work on it and later merges their changes.

Now imagine you need to share a file with someone from a different department, like accounting. Instead of photocopying the file and walking it to their building, you can temporarily give them a guest pass to your team's room. That guest pass can be set to expire after 24 hours, and it only lets them see the file, not change or delete it. The library automatically keeps a copy of every version of every file. If someone accidentally tears a page out of the file, you can ask the librarian to reprint the page from last Tuesday's version. The library also has a giant bulletin board near the entrance. The company president posts a weekly video update there, and every employee can view it without needing a special link. The bulletin board can also show important notices like fire drill instructions or the holiday schedule. Unlike a physical bulletin board that gets cluttered with old papers, this one automatically archives posts after 30 days. The key takeaway is that just like a library gives order to a collection of books, SharePoint Online gives order to a collection of work files and information, making them findable and secure for everyone who needs them.

## Why it matters

In a practical IT context, SharePoint Online matters because it solves two persistent problems that organizations face: information silos and version chaos. Information silos happen when different teams store files in separate network drives, local hard drives, or even private email inboxes. A sales team might keep a customer contract on a shared drive while the legal team keeps the signed version in a different folder on a different server. When an auditor or a new hire needs to find the signed version, it can take hours or days of asking around. SharePoint Online centralizes content into a single searchable repository where permissions are consistent. An IT administrator can set up a company-wide site structure with standardized metadata, making it easy for users to tag documents with project codes, client names, or approval status.

Version chaos is the second major problem. Before cloud collaboration tools, teams often emailed documents back and forth with filenames like 'proposal_v2_final_reallyfinal.docx'. This led to confusion about which version was actually approved. SharePoint Online solves this by maintaining a single document with a version history. Every time someone saves a new version, the old version is preserved. Users can see who changed what, when, and even restore a previous version if necessary. This is critical for compliance with regulations like GDPR or HIPAA, where audit trails for document changes are mandatory. SharePoint Online integrates natively with Microsoft Teams, Outlook, and Power Platform. When a team creates a new Teams channel, a SharePoint site and document library are automatically provisioned in the background. This means IT doesn't have to manually create sites for every project. From a cost perspective, SharePoint Online is included in most Microsoft 365 business and enterprise plans, so organizations already paying for Exchange Online and Teams can use it without additional licensing. For IT support, the most frequent tickets related to SharePoint involve permission errors, sync conflicts, and broken links, all of which are manageable through the SharePoint Admin Center.

## Why it matters in exams

For general IT certifications like CompTIA Network+, Security+, and Microsoft 365 Fundamentals (MS-900), SharePoint Online appears as a concept in the context of cloud services and collaboration tools. In the MS-900 exam, candidates must understand the core features of Microsoft 365 workloads, and SharePoint Online is listed as a primary component alongside Exchange Online, Teams, and OneDrive. The exam asks questions about what SharePoint Online is used for, how it relates to OneDrive, and what licensing is required. For example, a question might present a scenario about a company that needs a central document repository with version history and ask which Microsoft 365 service to use. The correct answer is SharePoint Online. Another common question type asks about external sharing settings and guest access, which aligns with security objectives in both MS-900 and Security+.

In the CompTIA Security+ exam (SY0-601 and SY0-701), SharePoint Online appears in the domain of cloud security controls and data protection. You might see a question about Data Loss Prevention (DLP) policies applied to a SharePoint document library. The exam expects you to know that DLP in Microsoft 365 can scan documents stored in SharePoint for sensitive information like credit card numbers and automatically block or warn users. Another Security+ objective is account management and access control, and SharePoint's permission inheritance model and Azure AD integration are directly relevant. Network+ exams are less likely to have direct SharePoint questions, but you may encounter scenario-based questions where a technician needs to troubleshoot access to a cloud-hosted intranet, requiring knowledge of HTTPS, DNS, and firewall rules. For the Microsoft 365 Administrator exam (MD-102 or MS-102), SharePoint Online configuration is a core objective, covering site creation, storage limits, and hybrid configurations with on-premises SharePoint Server.

Question types vary from multiple-choice recall to scenario-based analysis. Recall questions might ask: 'Which Microsoft 365 service provides version history for documents stored in the cloud?' Scenario questions might describe a company with remote employees who need to collaborate on a policy document without emailing files. The candidate must identify SharePoint Online as the solution and might be asked additional details, such as how to set up permissions for external contractors. Some questions combine SharePoint with OneDrive, testing the understanding that OneDrive is for personal work files while SharePoint is for team collaboration. Certification bodies also test backup and recovery capabilities. Candidates should remember that SharePoint Online retains version history by default, but the recycle bin and site collection recycle bin provide additional protection against accidental deletion. Knowing these default behaviors, as well as how to configure retention policies, is key to scoring well on cloud collaboration questions.

## How it appears in exam questions

In certification exams, SharePoint Online questions appear in several distinct patterns. The first pattern is the 'best tool for the job' question. A typical scenario describes a team that needs to store shared documents, track revisions, and provide remote access without installing additional software. The answer options might include OneDrive, Exchange Online, SharePoint Online, and Microsoft Teams. The correct answer is SharePoint Online because it is designed for team-wide document management with version control and granular permissions. Confusion often arises between SharePoint and OneDrive. OneDrive is for an individual's work files, whereas SharePoint is for team files. Another pattern is the 'permission and sharing' question. The exam might present a situation where a user from outside the organization needs temporary access to a folder in a SharePoint site. The question will ask what the administrator should do. The correct action is to configure external sharing settings for that specific site and send an access invitation. The trap answer is to add the external user as a full member of the tenant or create a guest user account without setting expiration.

A third common pattern involves troubleshooting access issues. The scenario describes a user who can see a SharePoint site link but cannot open any files. The questions ask what is most likely misconfigured. Possible reasons include the user not having the correct permission level, the site being set to private, or the document library requiring checkout before editing. The candidate must differentiate between read, contribute, and edit permissions. In some cases, the issue is a network firewall blocking SharePoint Online domains like *.sharepoint.com. These questions test knowledge of how cloud services rely on DNS and HTTPS. Fourth, integration questions appear. A scenario might involve a company using Microsoft Teams and wanting to add a shared document repository to a channel. The correct method is to use the built-in SharePoint tab or navigate to the auto-provisioned SharePoint site for that team. The exam expects the candidate to know that each team channel has an underlying SharePoint site. Finally, data governance questions appear. A scenario describes a compliance officer who needs to ensure documents in SharePoint are automatically deleted after five years. The administrator should apply a retention policy or a retention label from the Microsoft 365 Compliance Center. Understanding the difference between retention and eDiscovery holds is critical. For these questions, specific terms like 'preservation hold library' and 'in-place hold' may appear. Candidates should not confuse SharePoint Online's native features with third-party backup solutions.

## Example scenario

Imagine you are an IT support specialist at a mid-sized marketing agency called CreativeWave. The agency has 50 employees spread between a main office in Chicago and remote workers in four different states. The CEO asks you to set up a system where the content team can share draft ad copy and images without emailing large files back and forth. You decide to use SharePoint Online. You log into the Microsoft 365 admin center and create a new SharePoint site called 'Content Team Hub.' You make it a team site so it automatically creates a Microsoft 365 group with its own email distribution list and calendar. For site navigation, you add three document libraries: 'Ad Copy,' 'Images,' and 'Approved Final Versions.' Each library has metadata columns like 'Client Name,' 'Campaign Code,' and 'Review Status.' This way, team members can filter documents by client or status instead of scrolling through a long list of files.

Next, you need to set permissions. The content team members need edit access to the 'Ad Copy' and 'Images' libraries, but only read access to the 'Approved Final Versions' library. The legal team needs read access to everything for compliance review. You add the content team group to the site with contribute permission, but for the legal team, you add them to a separate group with read permission. You also enable versioning on all libraries and set it to track the last 50 versions. To prevent accidental deletions, you enable the recycle bin and set it to retain deleted items for 90 days. Now the team can work. A copywriter named Sarah creates a new ad draft and uploads it to 'Ad Copy.' A graphic designer named Mark downloads the image assets from 'Images,' creates a mockup, and uploads it. They both edit the same document at the same time, and SharePoint merges their changes. When a final version is approved, Sarah moves the file to 'Approved Final Versions.' Every time a file moves, the metadata stays attached. The CEO can view a dashboard on the site's home page that shows the count of documents in each library by status. This scenario demonstrates the typical steps an IT professional takes to deploy SharePoint Online for department collaboration, including site creation, library configuration, metadata setup, permission management, and versioning.

## Common mistakes

- **Mistake:** Thinking SharePoint Online and OneDrive are the same service
  - Why it is wrong: OneDrive is a personal cloud storage for an individual user's files, while SharePoint Online is a team-based collaboration platform with site collections, lists, and enterprise features like workflows and custom pages.
  - Fix: Use OneDrive for storing your own work documents, and use SharePoint when multiple people need to work on the same files in a shared space with permissions and version history.
- **Mistake:** Assuming all SharePoint sites are publicly accessible by default
  - Why it is wrong: SharePoint Online sites are private by default. Only site members can access the content unless the administrator explicitly enables external sharing and invites guest users.
  - Fix: Always check the site permissions before expecting external users to access a site. By default, only people added to the site's member group can view and edit content.
- **Mistake:** Believing that deleting a file from a document library permanently removes it
  - Why it is wrong: SharePoint Online has a two-stage recycle bin. The first stage stores deleted items for 93 days, and the second stage (site collection recycle bin) holds them for an additional period. An administrator can restore deleted files within that window.
  - Fix: If a user accidentally deletes a file, check the site recycle bin first. If it is not there, check the site collection recycle bin in Site Settings. Do not assume the file is gone permanently.
- **Mistake:** Confusing site permission levels with library permission levels
  - Why it is wrong: A site's permission settings control access to the entire site by default. Libraries and lists can have unique permissions that override site-level permissions. If a user can access the site but not a specific library, the library may have broken permission inheritance.
  - Fix: When troubleshooting access to a specific document library, check if the library has unique permissions by going to the library settings and looking for 'Permissions for this document library.' If it has unique permissions, add the user directly to that library.
- **Mistake:** Assuming SharePoint Online syncs all files to your local computer by default
  - Why it is wrong: SharePoint Online syncs only the files you choose to sync through the OneDrive sync client. By default, nothing is synced to your local hard drive. Users must explicitly click the 'Sync' button on a document library.
  - Fix: To sync a SharePoint library to your computer, open the library in a web browser, click the Sync button, and the OneDrive sync client will handle the rest. Only the selected library will sync.

## Exam trap

{"trap":"A question states: 'A user reports that they cannot see a SharePoint site that their manager says they should have access to. What is the most likely cause?' The answer option 'The user's browser cache is full' is the trap.","why_learners_choose_it":"Learners often associate browser issues with access problems because clearing cache fixes many website problems. However, SharePoint Online access is controlled by Azure AD and site permissions, not browser cache.","how_to_avoid_it":"Always think about authentication and authorization first. The most likely cause is that the user has not been added to the site's member group, or the site permissions have not been propagated. Only after verifying permissions should you consider browser or network issues."}

## Commonly confused with

- **SharePoint Online vs OneDrive:** OneDrive is a personal cloud storage service for an individual user, while SharePoint Online is a team collaboration platform. OneDrive stores files that belong to you, while SharePoint stores files that belong to a team. In Microsoft 365, OneDrive uses SharePoint as its underlying storage engine, but the user experience and permissions are different. (Example: You use OneDrive to save your own resume. You use SharePoint to save the team's project plan that three coworkers need to edit.)
- **SharePoint Online vs Microsoft Teams:** Teams is a chat-based collaboration workspace, while SharePoint Online is a document management and intranet platform. Each Microsoft Team channel has an underlying SharePoint site that stores the files shared in that channel. You can think of Teams as the conversation layer and SharePoint as the file storage and organization layer. (Example: You use Teams to chat with your team about a presentation. You use SharePoint (via the Files tab in Teams) to store, organize, and version the actual presentation file.)
- **SharePoint Online vs Exchange Online:** Exchange Online is an email and calendaring service, while SharePoint Online is for document management and intranet sites. Exchange stores email messages in mailboxes, and SharePoint stores files in libraries. They integrate with each other, for example, you can send a link to a SharePoint file via email, but the underlying services are distinct. (Example: You use Exchange to send an email with a link to a SharePoint site. You use SharePoint to create the news page that the link points to.)

## Step-by-step breakdown

1. **Create a site collection** — In the SharePoint Admin Center, an administrator clicks 'Create site collection,' chooses a template (team site or communication site), provides a title and web address, and selects a time zone. This sets up the top-level container for all subsites and content. Why it matters: site collections are the boundary for permissions and storage quotas.
2. **Configure site permissions** — The administrator adds users or Microsoft 365 groups to SharePoint groups (Owners, Members, Visitors). Owners have full control, Members can edit and add content, and Visitors have read-only access. Why it matters: setting permissions correctly prevents unauthorized access and ensures users can only perform allowed actions.
3. **Create document library** — Within the site, the administrator clicks 'New' and selects 'Document library.' A name and description are provided. The library can later have metadata columns, versioning, and content types added. Why it matters: libraries are the primary storage container for files, and their configuration determines how files are organized and tracked.
4. **Enable versioning and checkout** — In library settings, the administrator enables major versioning (or major/minor versioning) and requires check-out for editing. Version limits are set, typically 50 to 500 versions. Why it matters: versioning protects against data loss and provides an audit trail, while check-out prevents simultaneous editing conflicts in certain workflows.
5. **Add metadata columns** — The administrator adds columns to the library, such as 'Project Name,' 'Status,' or 'Due Date.' These columns can be choice fields, text, or date types. Why it matters: metadata allows users to filter, sort, and search for files based on business attributes, making it much easier to find documents than relying on folder hierarchies alone.
6. **Configure external sharing** — In the SharePoint Admin Center, the administrator sets external sharing policies for the tenant and then for the specific site. Options include sharing with authenticated users, anonymous guest links, or only with people in the organization. Why it matters: this controls how outsiders can access your company's content, which is critical for security and compliance.
7. **Set up a home page with web parts** — The administrator edits the site home page and adds web parts like 'News,' 'Document library,' 'Events,' and 'Quick links.' Each web part can be configured to show specific content from the site. Why it matters: a well-designed home page improves user adoption by presenting relevant information immediately upon visiting the site.

## Practical mini-lesson

In practice, a SharePoint Online administrator needs to understand both the business context and the technical underpinnings. The first decision when deploying SharePoint is the site architecture. You can create a single site collection with many subsites, or you can create multiple site collections for different departments. The modern approach favors one site collection per team or project, each with a Microsoft 365 Group behind it, because this gives each team autonomy to manage their own permissions and lifecycles. However, for large enterprises with thousands of sites, you need a hub site structure. Hub sites are a way to associate related sites under a common navigation, branding, and search scope. For example, all HR-related sites can be connected to an HR hub site, and all IT-related sites to an IT hub site. This allows a user to search across all HR sites from one place.

When configuring permissions, the best practice is to avoid breaking permission inheritance at the folder level. Instead, use security groups and manage permissions at the site or library level. Breaking inheritance at the folder level creates a management nightmare because you have to track hundreds of unique permission sets. A better approach is to create a new library for sensitive content and assign unique permissions to that library. For external sharing, be extremely careful. The default setting in SharePoint Online is to allow sharing with authenticated guest users. If your organization handles sensitive data, you should set the external sharing policy to 'Only people in your organization' for high-security sites and allow specific exceptions only when approved.

Another critical area is storage management. SharePoint Online includes a baseline of storage per tenant plus additional storage based on the number of licensed users. An IT professional must monitor storage usage in the Admin Center to avoid hitting the quota. When storage runs low, you can free up space by archiving old sites, deleting them, or requesting extra storage from Microsoft. Content that is not accessed for more than 12 months should be moved to an archive site or deleted as per the retention policy. The thing that most often goes wrong is users uploading files that exceed the 250 MB per file limit for SharePoint Online (or the 15 GB limit for Files larger than that should be stored in a different service like Azure Blob Storage. If a user tries to sync a library with thousands of items, the sync client may fail or perform poorly. The recommendation is to keep library item counts under 30,000 for good sync performance. Understanding these limits and best practices is what separates a beginner from a competent SharePoint professional.

## Memory tip

Think of SharePoint as the 'shared file parking lot', OneDrive is your personal garage, SharePoint is the company parking lot where multiple cars (teams) can park and share space, and the lot attendant (permissions) decides who can enter each section.

## FAQ

**Do I need a separate license to use SharePoint Online?**

No, SharePoint Online is included with most Microsoft 365 business and enterprise plans, such as Business Basic, Business Standard, and E3/E5. You do not need an additional license beyond your Microsoft 365 subscription.

**Can I use SharePoint Online without internet access?**

You can work on files that are synced to your computer using the OneDrive sync client while offline. Changes will sync automatically when you reconnect to the internet. However, you need internet access to browse SharePoint sites and access web parts.

**What is the difference between a team site and a communication site?**

A team site is designed for collaboration within a group and includes a Microsoft 365 Group, a shared mailbox, and a calendar. A communication site is designed for broadcasting information to a larger audience and does not have an associated Microsoft 365 Group. Use team sites for projects and communication sites for company-wide announcements.

**How do I restore a deleted SharePoint site?**

Deleted SharePoint sites go to the recycle bin in the SharePoint Admin Center. Site collection administrators can restore deleted sites within 93 days. After that, the site is permanently removed. For a site that was deleted by a user, check the site collection recycle bin first.

**Can I connect SharePoint Online to an on-premises SQL Server?**

Not directly. SharePoint Online is a cloud service and cannot connect to on-premises databases natively. You can use Power Automate or Azure Logic Apps to move data between SharePoint and on-premises databases, or use SharePoint Server (on-premises) for hybrid scenarios.

**How do I prevent users from sharing SharePoint files outside the company?**

You can configure external sharing settings at the tenant level and override them at the site level. Set the tenant default to 'Only people in your organization' and then allow external sharing only on specific sites that need it. You can also use Data Loss Prevention (DLP) policies to block sharing of sensitive content.

**What is the maximum file size I can upload to SharePoint Online?**

The maximum file size for SharePoint Online is 250 GB per file. However, for optimal performance, it is recommended to keep files under 100 MB. Large files may take a long time to upload and may not sync reliably.

## Summary

SharePoint Online is a cloud-based collaboration platform in the Microsoft 365 suite that provides document management, intranet sites, and team workflows. Unlike OneDrive, which is for personal file storage, SharePoint is designed for teams to store, organize, and collaborate on shared content with version history, granular permissions, and metadata. For IT certification candidates, understanding SharePoint Online means knowing its role in Microsoft 365, how it differs from other services like OneDrive and Teams, and how its security features like external sharing and DLP policies work. In exams, you will see questions about selecting the right tool for document collaboration, configuring permissions, troubleshooting access issues, and applying data governance policies.

The practical takeaway for your certification journey is to focus on the conceptual differences between SharePoint and similar tools, not on memorizing every setting. Remember that SharePoint sites are private by default and that version history is one of its most important features. When you see a scenario about a team that needs a central file repository with version control and remote access, SharePoint Online is usually the answer. Also, be aware that Microsoft frequently updates SharePoint Online features, so check the latest exam objectives for your specific certification. As you study, build a mental model of SharePoint as the central content hub that connects with Outlook, Teams, and Power Platform. This understanding will serve you well in both exams and real-world IT roles.

---

Practice questions and the full interactive page: https://courseiva.com/glossary/sharepoint-online