Forum Discussion
How to deal with Security groups in SharePoint and Office 365 groups
Hi there,
SharePoint groups will continue to exist as SharePoint-only entities that can be utilized for permissions purposes. You are correct that you cannot manage these in admin portal, and we have no plans to enable that.
For group connected sites (including classic sites you connect to new Office 365 Groups), we do ensure that the 3 default SP groups exists (i.e. Owners, Members, Visitors). While you will continue to be able to add your own SP groups to sites, any custom permissions you employ on site resources do not map across to Office 365 Group membership. This is an important point - that while SharePoint will allow you to break permissions inheritance on resources, if you do so you can end up with members of the Office 365 Group *not* having access to those resources.Hope this helps.
Tejas
Hi Deleted,
For a very long time I've suggested that each SharePoint group should have a matching security group. The problem however with this appraoch has always been ... users!
With the whole empowering idea that Microsoft is pushing this becomes even harder. Sharing with a user breaks this whole plan. I've never really found a better solution than simply to give up on controlling permissions too much. The alternative for giving up would be to give users not the option to share... and I'm not happy with that either. Of course, you still want to control the users with special permissions like admins, designers etc.