Forum Discussion
SergeiBaklan
Feb 04, 2019MVP
Everyone except external users disappears form Group Visitors
Hi,
For the group site when we add "Everyone except external users" to the "Site visitors" to grant people R/O access, it disappears in a while from the Site visitors and people lost access. Addin...
SergeiBaklan
Feb 09, 2019MVP
Kevin, as far as workaround works plus there is no such effect on isolated sites - we will survive. Opening of the support ticket is usually quite time consuming for us. I mean not opening itself, but all following communications and tests. That's for critical cases.
Pieter Op De Beéck
Feb 28, 2019Iron Contributor
Slightly related to this, I have issue with the "Everyone except external users" on Public groups! I want to make an exception and give them Read permissions. As a result, "Everyone except external users" is stored in the underlying Visitors (Read) group. After a couple of days, "Everyone except external users" is back in the Members group and have back their Edit permissions.
This is not a single event - this is the case for all our Public O365 Groups where we want to give them only Read permissions. Anyone has the same issues on their tenant? Ours is located in W-Europe.
- niels_de_kokMay 31, 2019Copper Contributor
Pieter Op De Beéck Hi Pieter, i have the exact same issue! After creating a new site the "Everyone except external users" group is member of the Members group instead of the Visitors Group. Also West-Europe (The Netherlands). So far i haven't found a solution.
- Pieter Op De BeéckJun 03, 2019Iron Contributor
niels_de_kok we did get an answer from Microsoft - hate it or love it; it's all about their vision on teamwork. In addition to the previous answer we tried making it a private group and giving read permissions to Everyone except external members. That was not possible either. Both answers combined provide a good answer to the question.
- Pieter Op De BeéckJun 03, 2019Iron Contributor
In addition to the solution we were looking for, the following can also provide us with a valid solution: Create a Modern SharePoint Teamsite without Office 365 Group connected to it. Only then we can manage security entirely up to our wishes. Please consider this solutions.
- Martin-CoupalApr 25, 2019Steel Contributor
Pieter Op De Beéck , did you find the issue or get information from Microsoft?
On my side I had the worst experience with the escalation team ever... First line of support tells me they can replicate the issue. Then another level of support tell me they can't replicate the issue. Then the escalation team say that this is a known behavior and it is how public group site should work!! So I start to feel they are making fun of me because in my last discussion they tell me they can't reproduce the issue BUT it is a know behavior and it is how it should work...... So how come they can't reproduce the behavior?? So the end of the story is
1) The UI gives you the ability to change permissions for Everyone Except External Users from Edit To Read in public group site
2) If the permissions are set back to edit, well this is how it should work but they can't do it on their side!!
Also, there is a thread on PowerShell PnP where someone creating a public site and setting EEEU from edit to read change back after a couple of minutes after.... https://techcommunity.microsoft.com/t5/SharePoint/Pnp-provisoning-issue-with-permissions-for-Everyone-except/td-p/388518
What a mess...
- nenonixApr 27, 2019Copper Contributor
- Martin-CoupalApr 30, 2019Steel Contributor
nenonix , Escalation team is saying that setting read permissions on "Everyone Except External Users" may (or will ??) revert to Edit caused by a background job on public group site and is a normal behavior..... Ticket closed!!!
It's a none sense to me. I asked them to document this behavior because it is not documented. They said they will... I'm eager to read user comments when they will document this !!
So why providing the option to change permissions on public group site if everyone will always have edit access anyway? Go find out....
- Martin-CoupalApr 10, 2019Steel Contributor
I finally got a confirmation by Microsoft support of this issue where changing permission of "Everyone except external users" from "Edit" to "Read" is change back to "Edit" after a period of time on Public O365 group site.
Hello Martin,
Hope you doing well.
We are following up with you for the issue related to the Modern Sharepoint site and we have reproduced the issue on multiple tenants and found that it is a known issue. We have also discussed your case with my supervisior, also escalated your case to the escalations team and will update you once i will recieve a reply from them.
Thank you for choosing Microsoft online services.
- Martin-CoupalMar 30, 2019Steel Contributor
I have the exact same issue where I change the permission from edit to read for "Everyone Except External Users" on a "Public" goup site. Sometime after 1 minute or a 1 day it goes back to Edit. At the begining I thought it was related to SP groups I was adding to the site permissions but I noticed it was occurng also on sites where I was just switching permission from edit to read for "Everyone Except External Users".
For me this is a huge security issue. One of my customer found out the issue and do not trust permissions in SharePoint anymore. Issue observed in US and Canada tenants.
I've submitted a case to Microsoft today...
- Benedicte_SJun 14, 2019Copper Contributor
Martin-Coupal Same in W-Europe Tenants
- MVHBakkerMar 26, 2019Copper Contributor
Pieter Op De BeéckWe have the same problem (in a Dutch company, so also W-Europe tenant). I thought it must have been a single event changing the group permissions of dozens of our SharePoint sites from read to contribute for the "Everyone except external users" group. But in the audit logs I cannot find anything that happened there, and indeed it can be the case that it happens automatically after some time.
Earlier I found out the Privacy setting of the Group in Teams (in the Edit Team menu) configured after the group permission in the SharePoint site was set effects the private/public setting of the SharePoint site so it can be the cause of our problems. In that case there is no possibility to have SharePoint site where everyone can read, the project team can contribute, and where only the project team can chat in Teams without others reading/editing in Teams as well. Then you have to make private groups, because in the end O365 syncs the different privacy settings on different spots.
- MVHBakkerMar 27, 2019Copper Contributor
MVHBakkerMS states it is by design in this post (march 2019): https://support.microsoft.com/en-us/help/4492201/everyone-except-external-users-group-is-removed
- Martin-CoupalMar 30, 2019Steel ContributorJust a precision, this post is for Private group, not Public group.
- SergeiBaklanMar 02, 2019MVP
Interesting, didn't see such. Based on discussion here https://techcommunity.microsoft.com/t5/Microsoft-SharePoint-Blog/Modernize-your-SharePoint-team-sites-by-connecting-them-to-new/bc-p/356981#M3416 'everyone' shall not work with Members/Visitors for public/private groups by design. Instead we have unpredictable behaviour of 'everyone' being added to one of these groups.