Default type=user permission issue

Hi Erik63 

could you elaborate a little bit more on your site structure and what three access request links you created?

I assume that you have a main site and some subsites below that. And that you give some user access to elements somewhere below in the page structure.

"Limited Access" means that something somewhere below that level has been shared with that user and that user gets the minimum permissions on the upper levels he needs to get that element.
If you for example shared a document library with a user that has no access to the site, then the user will be automatically added with "Limited Access" permission on the above site in order for the user's browser to render the document library (The browser needs to have access to some js, css and somethingsomthing files in the site to render the document library). It does not give the user access to the parent site itself.


My suggestions to minimize this effect and to keep your permission setup clean in general are:
1) Don't use subsites at all, just use sites and link them together.
2) Don't share folders, always try to share at least document libraries, even better only whole sites that contain just one document library.
3) Share Top-Down: Add all users to a site and just take their permissions away on specific document libraries. Do not give people access to document libraries that do not have access to the parent site. If you need to give a person access to a document library that that does not have access to the site then move that document library into a new site.

Best Regards,
Sven