This document describes how to add a Security Group to eSHARE and enable it for File Handler (Action Menu) access, allowing administrators to control which users in their organisation can create Trusted Shares via the right-click context menu in SharePoint, OneDrive, and Teams. The following steps will be reviewed:
REQUIREMENT:
The person performing these steps must have an eSHARE Administrator role.
Prerequisites
A Security Group must already exist in your Microsoft 365 tenant, containing the users you want to grant File Handler access to.
You must have an eSHARE Administrator role.
Step 1 — Navigate to Azure AD User Groups
In the eSHARE Admin Console, select 'Azure AD User Groups' from the left navigation panel.

Step 2 — Add a Group
Click the '+ Add Group' button at the top of the page. The 'Search Org for Groups' dialog will appear.
Type the name of your Security Group in the search field.
Select the checkbox next to the group in the results list.
Ensure the 'Group Type' dropdown beside the group is set to 'Generic'.
Click 'Add Groups'.

Step 3 — Enable File Handler for the Group
Once the group appears in the Azure AD User Groups list:
Select the checkbox next to the newly added group.
Click 'Enable File Handler' in the action bar that appears at the top of the page.

Note:
Only users who are members of this group will be able to create Trusted Shares using the eSHARE File Handler right-click option in SharePoint, OneDrive, and Teams. Users who are not part of this group will still see the Trusted Share option when right-clicking a file; however, when they attempt to create a share by clicking 'External Share', they will be redirected to submit a justification to their administrator to request access.