Forum Discussion
Difference Between SP Access/Permissions via SharePoint Groups vs. Domain Groups?
Update: After quite a bit of testing/troubleshooting I have found the following:
- When a user has SP Site access via creating a Domain group of the MS AD Security group they are a member of (where I can assign custom site permissions.), the doc libs\document sharing options are greyed out.
- When a user has SP Site access via creating a SharePoint Group that contain the AD Security Group they are a member of (where I can assign custom site permissions), the doc libs\document sharing options are available except for "Anyone" and "People in..the tenant organization name" that are greyed out.
- When a user has SP Site access by adding the AD Security Group they are a member of via the "Share this Site Only" option, the AD Security group is added to the SharePoint – Members site group, and they have full sharing options. I have to pick Edit or Full Control permissions.
Not sure why these difference/limitations in Sharing need to exist.
My goal is to somehow use MS AD Security Groups for SP site access and be able to apply custom default site permissions, with the users in their prospective AD Security Group to have full Sharing options of their Site doc libs\documents.
Any input on how to achieve this goal, and/or documentation that explains the intricacies of the various characteristics/limitations of granting SP site access with SharePoint Groups vs. Site Groups vs. Domain Groups, would be highly appreciated!
- When a user has SP Site access via creating a Domain group of the MS AD Security group they are a member of (where I can assign custom site permissions.), the doc libs\document sharing options are greyed out.
Update: After quite a bit of testing/troubleshooting I have found the following:
- When a user has SP Site access via creating a Domain group of the MS AD Security group they are a member of (where I can assign custom site permissions.), the doc libs\document sharing options are greyed out.
- When a user has SP Site access via creating a SharePoint Group that contain the AD Security Group they are a member of (where I can assign custom site permissions), the doc libs\document sharing options are available except for "Anyone" and "People in..the tenant organization name" that are greyed out.
- When a user has SP Site access by adding the AD Security Group they are a member of via the "Share this Site Only" option, the AD Security group is added to the SharePoint – Members site group, and they have full sharing options. I have to pick Edit or Full Control permissions.
Not sure why these difference/limitations in Sharing need to exist.
My goal is to somehow use MS AD Security Groups for SP site access and be able to apply custom default site permissions, with the users in their prospective AD Security Group to have full Sharing options of their Site doc libs\documents.
Any input on how to achieve this goal, and/or documentation that explains the intricacies of the various characteristics/limitations of granting SP site access with SharePoint Groups vs. Site Groups vs. Domain Groups, would be highly appreciated!