Forum Discussion
Best Practices for Permissions on an O365 Group SharePoint Site
So it seems that you can break permissions of individual lists/libraries/items, but you can't actually set permissions on the site as a whole? Am I missing something when looking at configuring gene...
I found this helpful:
When working with Team sites (that have an associated Office 365 Group), there are some options to grant site access.
Start by selecting the gear icon in the upper right hand corner and select Site Permissions from the drop down menu
Select Invite People:
Add Members to Group: this option not only grants access to the site but adds the account to the Office 365 group. When an account is added via this method, the number of members at the top right of the page is updated. Note, that when using this selection only Owner and Memberpermission settings can be granted. Read access cannot be granted utilizing this method.
Share Site Only: this option adds the user to the appropriate site group. This does NOT add them to the Office 365 group. When added using this selection, the account can be granted Owner, Full Control, Edit or Read access. However, this does not update the members number on the home page of the screen and does not allow the account to participate in conversations (in a private group). This is the equivalent to selecting Advanced permission settings and adding the account that way.
Bottom line: Even though the Advanced permission settings can be utilized to grant permission to ‘Modern’ team sites, but isn’t necessary. Don’t be afraid of the Invite People selection. Just be aware that the Add Members to Group will add the user account to the Office 365 Group and can only be used to gran Owner or Member permissions. Share Site Only will grant access to the team site only and will add the account to the appropriate site group (and this is the only option for read access).
<https://newsignature.com/articles/sharepoint-modern-team-site-permissions/>
When working with Team sites (that have an associated Office 365 Group), there are some options to grant site access.
Start by selecting the gear icon in the upper right hand corner and select Site Permissions from the drop down menu
Select Invite People:
Add Members to Group: this option not only grants access to the site but adds the account to the Office 365 group. When an account is added via this method, the number of members at the top right of the page is updated. Note, that when using this selection only Owner and Memberpermission settings can be granted. Read access cannot be granted utilizing this method.
Share Site Only: this option adds the user to the appropriate site group. This does NOT add them to the Office 365 group. When added using this selection, the account can be granted Owner, Full Control, Edit or Read access. However, this does not update the members number on the home page of the screen and does not allow the account to participate in conversations (in a private group). This is the equivalent to selecting Advanced permission settings and adding the account that way.
Bottom line: Even though the Advanced permission settings can be utilized to grant permission to ‘Modern’ team sites, but isn’t necessary. Don’t be afraid of the Invite People selection. Just be aware that the Add Members to Group will add the user account to the Office 365 Group and can only be used to gran Owner or Member permissions. Share Site Only will grant access to the team site only and will add the account to the appropriate site group (and this is the only option for read access).
<https://newsignature.com/articles/sharepoint-modern-team-site-permissions/>
Yeah, it’s important to differentiate between office 365 group membership and good ol sharepoint permissions :)