Forum Discussion
Permissions not working as expected
1st think just confirm external user is only available in Visitor Group. Some time you will give permission in Root Site Level Its also effect Document library and list. If you want unique permission on Custom list or else document library. Go to Library Setting ->Permission for this document library -> Stop inheriting permission -> Select all user group -> remove user group -> Grant Permission -> select User and set permission.
Note : if want some unique permission apart form Full Control, Contribute, Visitor, Owner, Member, design, Admin. You create own permission follow on below step.
Go to Site Setting -> Site Permissions -> Click Permission Level (its Top of the ribbon) -> Add a Permission Level, Here its list of permission available you can create on your requirement.
I have confirmed the only "group" on the Sharepoint site permissions is the Visitors with Read permissions.
I created a group that was just Contributing permissions that all external users would be assigned to, but the issue is that the external user even in the Read group has access to Edit the page layout even. This should not be the case.
Only other thing it could be is if you have that user or a group set as the site collection administrator for that site collection the site is in.
Or the site pages library has permission inheritance broken and permission there is set different (possibly the main page as well).
Hi Chris,
I have a similar issue. Mine is that an O365 "mail-enabled security" group is assigned to a SharePoint group that has Edit permissions for a site, however people in that group do NOT have Edit permission. Here are relevant screen shots.
This is not the only site we have setup this way. All the others work as expected. The only way to grant Edit permission to any user on this site is a direct assignment in the SharePoint group.
Help!
ChrisWebbTech I have a similar issue with modern site where I have assigned users with Read permissions to the Site Visitors group, however those users are always presented with a "You need permission to access this site" after I have granted all the open and view functions for Read permissions to them. If I assign all the access options of "Full Control" then their login works but I don't want everyone having admin privileges. Another weird thing is they can view classic pages but not modern pages with same Read permissions. Is it possible to assign just a "visitor" without giving them all the admin functions under the gear menu on a modern site? I'm not having much luck.
Deleted I had to setup groups under the Advanced Security Settings that have custom permissions to get around this.
Settings Icon > Site Permissions > Advanced Site Permission Settings
Then you can create groups that only have "Contributor" level permissions.
