💻 Want to confidently navigate SharePoint and Microsoft 365? Enroll in my revamped On-Demand SharePoint and Microsoft 365 Academy 👉 academy.sharepointmaven.com/
THANK YOU Maven 🙏🏼. Glad I'm not the only one who doesn't favour folder/file level permissions just because it's a Networks Nightmare 😱. Learning alot from you Maven, thanks again.
I'm working on a company SharePoint communication site as our new intranet. I can set permissions in the Documents folders. How do we set permissions for individual pages or the navigation so certain groups will be unable to see content or those pages? I cannot find anything on this topic, only on Document folder permissions. Thanks!
Thanks for the video's, they've been very helpful. Hopefully this question is clear. I have a template for a bunch of properties, is there a way I can setup permissions on the template and copy the template while maintaining the desired permissions?
I have a main site with several subsites. Within each subsite I have several document libraries. Each subsite has unique permissions. Each document library has unique permissions. What permission type does a user of a particular DL need in the main site and the subsite, if each has unique permissions, in order to get to the DL? For example: Main Site Subsite 1 DL 1
Thank you for a great video! Is there a way to revert all permissions back to the main site permission? I made unique permissions and stopped inheriting from the main site and I regret it. Lol
another great video!!! I have a list that i want to hide from site content without removing any user permission. the list is available for all site viewer as a web part in a page where i can hide the command bar. But it is still available if the user comes through setting>site content. Thank you !
Hi, excellent video. Just curious, is it possible to keep members from creating new folder within “Documents” and/or keep them from uploading stuff in “Documents” itself? I would like to manage the folder structure in “Document” but let members edit/add within folders as they wish.
Thanks for the feedback. Yes, you can do this by creating read-only access for the library itself (instructions here - Option 2: sharepointmaven.com/6-locations-can-set-security-files-sharepoint-office-365/) and then setting Edit access for each and every top-level folder in that library
Hi, Great video. Thanks a lot! I am trying to give access to a folder within a library to some people but don't want this people having access to the other folders in the same library. Is this possible? Thanks,
Thanks, Lisardo, glad you found it helpful. Yes, it is possible. You have to options: Option 1: Just share the folder with others by clicking the share button and sending a link to others (this way they only get access to the folder, not the site). Option 2: Share the whole site, but hide all the other folders by following instructions in this video.
Hi Maven, how to block files(filetype: pdf) be downloaded by groups that can view them? Thanks. Have any other method can be successd except the links access method?
Thanks this is very useful! One thing I still cannot work out how to do is give a user read only permissions to the whole site, and then Edit permissions only to the Site Pages library. I have set this up as per the section on Library permissions, broken the inheritance and then added the user with Edit permission. The user can now edit, copy & delete pages but not add a new site page. It always brings up the Request Access screen. Is there a way to do this that you know of? Thanks!
Hello Janie, glad you found this helpful. I believe this is because Add New Page is sort of related to site-level features. I just validated - behaves the same in my tenant too.
@@SharePointMaven Thank you so much! It was driving me crazy. I can see now I will need to set the permissions at the site level and then remove permissions from other folders and pages as needed...
Hi Greg, I'm creating a folder structure on the primary site documents library. Now I would like the set advanced permissions on each folder with security groups for read, edit and ownership. I want users of the edit group to allow to create and delete files within folder 1, but I do not want them to delete this folder. Even when they have read membership on the documents library, because they have the edit permission on folder 1, they are allowed to delete this folder also. Could you help me?
Hello Mark - this is "by design". When you have edit perm level - you can add/edit/delete. If you do not want users to delete Folder 1, then make it read only to everyone, but then you will need to make individual subfolders inside of it editable (Edit Perm Level). Perhaps might even make sense instead of Folder 1, 2, 3 create separate libraries, such that users can add/edit/delete folders inside but at least not delete the library.
Purchasing Subfolder 1 Subfolder 2 Profit Loss Report I have this folder structure in my SharePoint, the purchasing and all subfolders inherit permission from the site. But for the “Profit Loss Report” folder I stopped the inherit permission and gave access only to the department head. The problem is when the department head gives a direct access to someone to the purchasing folder it inherits to the “Profit Lost Report” folder. So he can open and see the contents in this folder. Which is a big issue for us. I thought if the folder has unique permission, it won’t affect the users adding the parent folder.
what about custom level permission? For example if i make another set of permission, how do i assign yhis to users because for the moment you can share it only with edit or read
Hi Greg. Thanks for your video. I am trying to limit access to one folder within a tree structure. I have removed access as you've suggested but people are still able to see / access the folder. Within the Manage Access dialog box of the folder i'm trying to restrict, there is a message that says "This folder is shared because the folder it is in is shared". I assume this is causing the issue but I have no idea what causes this cascading sharing.
Hi Dave, by default security is inherited, but you should be able to break the inheritance. Hard for me to specify exactly what is happening without seeing the setup. Try to see if there are no additional links shared to that folder (in that same Manage Access screen). Also, click on Advanced Permissions at the bottom of that Manage Access screen - it might provide additional clues. From there, you can click on the Check Access button (in the ribbon) and it might tell you how/why users still have access to that subfolder.
Hi, good video! We have a Board communications site shared with Board members. The CEO would like to share the site in view only with some executives, except for the CEO section of the site. Is this possible without having to edit permissions on each page since the site sections are all in the same library?
Hi Greg, Thanks for this video. We have a SharePoint document library(unique permissions) with many folder and documents. Some documents are shared to a user and they can only access those documents. Like this there are many folders/documents shared to users where SharePoint assign them permissions as Limited access. Now if we wanted to remove a user from the site how to find which folder/document the access is provided or is there any other way to revoke there access. Please help.
My pleasure, Sarath. Out of the box, it is not easy to do. Try this: sharepointmaven.com/how-to-list-unique-permissions-for-files-and-folders-on-a-sharepoint-site/ Otherwise, you might need to use PowerShell or acquire a 3rd party tool
@@SharePointMaven Hi Greg, thanks for quick reply. If I want to delete them from the complete site, can I use the below Url and delete them. /_layouts/15/people.aspx?MembershipGroupId=0
@@SharePointMaven I can understand. Thanks for your advice with the above link. We have the option only to create top level sites(we use team site template mostly) sub sites are disabled. So all the top team sites are associated to hub site. In general I tested by sharing a document inside a unique document library and deleted the user from above shared URl(people.aspx) and it worked.
How can I implement the below scenario in SharePoint document library? I have 4 levels of folder structure and in every folder I have documents. Folder 1-> Folder 2-> Folder 3-> Folder 4 I want to give Read permissions to Folder 4 for user. So that he can see and open documents that are available in Folder 4. But I don't want the user to open or see the documents which are available in Folder 1, Folder 2, and Folder 3.
Hi Greg, are these AD Security Groups please? If I have a Sharepoint Teams Site that I set up via an O365 Group and I want to set overriding permissions on certain folders or sub folders in the files tab, is this the same process? Is it possible to assign new groups, say as per your example, a management group. Where or how to create that group, in AD or as an O365 Group, is this possible please? Thanks for your video.
Good to create a separate document library but also isn't it best practice to put members into groups and put groups onto assets with permissions? Granting user-level permissions is a short road to chaos.
@@SharePointMaven in ntfs permissions, Traverse is the right to pass thru a folder to get to the actual subfolder where the user has edit/read . I read on internet that it must be something named Limited access in sharepoint, but i can't find it
In advanced permissions it only shows a couple people who can access the folder. But when I check permissions many more people, like SharePoint Owners are able to access it even though they are not listed. How do I truly limit a folder access to only a specific person and not let admins have access?
If you don't recommend unique permissions for folders, what do you recommend instead when there are subsets of employees who do not and SHOULD not view certain documents? Update: Ahhhh. At the verrrry end of the video. The alternative. Good thing I kept this playing in the background so I could perk up at that part! ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-cG6CtuTHp6k.html Minute 08:47.
@@SharePointMaven Sorry, question for you as I prepare to pitch this idea to my team... If you create a separate site to avoid building a maintenance nightmare with permissions, how do you manage document/folder sharing amongst the two groups? Right now we use links in document libraries to point to other folders, but I feel like this sets us up for failure since it doesn't allow for flexibility. (i.e. what happens if we change the location of the folder it links to?) Context: Imagine we're a school and have some teachers who need to see their students' evaluations, but assistant teachers do not and SHOULD not see these evaluations. Administrators also need to see these student evaluations. So now do we have a total of three SharePoint sites and the Admin site has an "evaluations" document library with students names and all of those just house links to the Teacher site where the evals actually live??