Forum Discussion
Questions about syncing Hub Site with Associated Sites
Jean5288 The hub visitors group is "additive" to the associated sites - it effectively adds an additional permission group to the site - Visitors, Members, Owners + Hub Visitors. Not all associated sites need to "accept" the additional hub visitors group. You can have some associates sites that use it and others that do not. You probably don't want to remove the members of the Visitors group from associated sites because if you remove that site from the hub, there will be no Visitors on the site. In other words, since Hub Visitors are added the ADD readers to the associated sites. If those sites leave the hub, the additional visitors lose their access and only the "local" visitors for the site have access. If your goal is to share read permissions for multiple sites, you may want to use an Active Directory Group, which can be added to any of the SharePoint Groups in more than one SharePoint site. Learn more: https://support.microsoft.com/en-us/office/set-up-your-sharepoint-hub-site-e2daed64-658c-4462-aeaf-7d1a92eba098#bkmk_managesiteassociationapprovals.
Jean5288 You can work with your AD Admin to create them. If you have existing Microsoft Teams, you can use the Members group for the Team as well.
SusanHanley neither of those options will work with how the sites are organized. Is there any way to make syncing the Hub Visitors to a majority of the team sites work?
- For each team site, the site owner can opt-in to sync Hub Visitors permissions - so as I said before, you can opt-in for some but not all associated sites. You can associate sites to a hub in "bulk" from the SharePoint Admin Center. From what I can see, you will need to manually opt-in to add the Hub Visitors to each associated site where you want to add the Hub Visitors group - though maybe you can do this with PowerShell. I think that before you go too far with this planning, you want to make sure that you have established the right type of site for each purpose. You can double check with this guide: https://docs.microsoft.com/en-us/microsoft-365/community/team-site-or-communication-site. Assuming that you have private team sites where you want to give READ access to an additional set of users, adding Hub Visitors to each site is a great way to do that. If the team sites are associated to Microsoft Teams, this gives Hub Visitors access to the files and lists on the site without giving them access to the Team chat and other resources associated with the Microsoft 365 Group for the Team.