Forum Discussion
Can i manage Sharepoint Online Permissions with AD?
We were thinking of using the existing AD groups and as you said, add them to the security groups in SP.
Regarding Security Groups in SP, is it still not recommended to create customised Security Groups? (for example, if i want somebody to have visitor permissions for most things but want them to be able add items to a list)?
Thanks again
I would again suggest understanding the Share functionality in SharePoint before getting too far into trying to control access and permissions via groups.
However, if your situation calls for using AD Security Groups and SharePoint Security Groups, I don't see a problem in using them. I have created SharePoint Security Groups for a specific List or Library if I needed to give people a different level of permissions to that particular list or library.
For example, if our HR department has Read access to most of a SharePoint site, they will be in the SharePoint Visitors group to give them that access. But then if I need the HR department to have Edit access to a specific HR Document Library, I would probably create a SharePoint Security Group specifically for assigning Edit permissions on that HR Document library and then add the HR department to that group.
SharePoint Online has made it a little more difficult to get to the Groups page in site settings to create a new SharePoint Security Group, but you can still get there when needed.