Forum Discussion
Permissions not working as expected
Hello everyone!
I am having issues with permissions to my SharePoint Online site not working as expected. Here's the scenario below..
- Created new Team Site
- Added 3 internal members as Owners.
- Added 1 external member as an Owner in error, then removed.
- Clicked the gear icon and went into "Site Permissions"
- Created a new group called Contributors, gave contributor access
- Added the external user, put in the Contributors group.
The external user is able to "Edit" the page (should not be able to), even in the Contributors group. So I added the external user to the Visitors/Read only group, and they still have access to Edit the page.
We are expecting external users to only be able to upload documents (Contributor group) to the document library, and see a couple of Quick Links columns... They should not be able to Edit the entire page.
Am I missing something with SharePoint Online permissions or when it was setup wrong initially is the external user going to be an admin for life?
1st think just confirm external user is only available in Visitor Group. Some time you will give permission in Root Site Level Its also effect Document library and list. If you want unique permission on Custom list or else document library. Go to Library Setting ->Permission for this document library -> Stop inheriting permission -> Select all user group -> remove user group -> Grant Permission -> select User and set permission.
Note : if want some unique permission apart form Full Control, Contribute, Visitor, Owner, Member, design, Admin. You create own permission follow on below step.
Go to Site Setting -> Site Permissions -> Click Permission Level (its Top of the ribbon) -> Add a Permission Level, Here its list of permission available you can create on your requirement.
I have confirmed the only "group" on the Sharepoint site permissions is the Visitors with Read permissions.
I created a group that was just Contributing permissions that all external users would be assigned to, but the issue is that the external user even in the Read group has access to Edit the page layout even. This should not be the case.
Only other thing it could be is if you have that user or a group set as the site collection administrator for that site collection the site is in.
Or the site pages library has permission inheritance broken and permission there is set different (possibly the main page as well).
- If it’s a team site then it’s group connected right? You should have a members group that has that group in it need to check to see if when added as an owner you usually get added as a member as well so that could be causing it.
- The AD group only contains the 3 internal users unfortunately.
