SharePoint Online Deletion Code Lock

Our SharePoint Online sites need a safeguard that blocks anyone from deleting a document or folder unless they first enter a dedicated “code set.” Editing, writing and copying must keep working exactly as they do today; only the delete action is restricted.

Key points I must see working:
• The first prompt for deletion asks for the code.
• Any authorised user, not just administrators, can generate that code when they genuinely need to remove content.
• All other daily tasks (upload, move, copy, edit, versioning) remain unaffected.

I am open to whatever technical route best fits SharePoint Online—whether you lean on Power Automate, retention labels, an SPFx extension, or custom permissions—so long as it achieves the result cleanly and keeps Microsoft supportability intact.

Deliverables I’ll need handed over:
• Configured solution running in our test site collection and then promoted to production
• Brief step-by-step documentation that shows how users generate and input the code, plus how to maintain or revoke that ability
• A quick demo call proving that a delete fails without the code and succeeds with it, with the attempt logged for audit purposes

Let me know your proposed approach and estimated timeline so we can lock this in.

It must be implemented over team viewer