Forum Discussion

Nigel Witherdin's avatar
Nigel Witherdin
Iron Contributor
May 23, 2018

SharePoint Access Request Ignoring Default Group

Has anyone noticed that the new release of functionality for Access Requests (where you can now pick the site Owners group to receive the email requests - excellent!) does not add the users to your site's default group anymore.

 

Instead it adds the user directly to the site, not in any group.

 

Im not sure how I feel about this - its a bit scary to think the idea is we have lots of users having permissions set directly.

 

Is this expected behaviour? If so, what do you guys think about this - is this what you want?

 

Thanks

 

Nigel

19 Replies

  • Any news on this? Actionable messages i great but when the user is added directly to the site and not in a configurable group the user might not get access to lists that have broken permission inheritence.

     

    I would like to have a dropdow in the actionable message where I can select the group the user should be added to. Like I can configure it inside sharepoint when I approve the request.

    • StephenRice's avatar
      StephenRice
      Icon for Microsoft rankMicrosoft

      Hi Deleted,

       

      Stay tuned ;) Should have more to share soon! Thanks!

       

      Stephen Rice

      OneDrive Program Manager II

      • wseda22's avatar
        wseda22
        Copper Contributor

        HiStephenRice,

        Has this been corrected? I am still encountering this behavior in one of the sites I am working on. Please advise.

         

        -Wilfredo S.

  • Hi Nigel Witherdin,

     

    We've had two changes to access requests in the last month or two. First, we now send actionable messages that let you accept/decline the access request immediately from Outlook instead of having to visit the SP page. We've heard some feedback on this feature that matches what you're seeing that we are investigating.

     

    Hope that helps!

     

    Stephen Rice

    OneDrive Program Manager II

    • Nigel Witherdin's avatar
      Nigel Witherdin
      Iron Contributor

      Hi Stephen - thanks for the reply!

       

      I think the changes made are excellent, but my issue is that when an administrator accepts an invitation, the requester is added directly to the site - not to the default group for the site.

       

      I foresee a few issues with this

      • Im not sure i like the idea of all the users being given individual permissions at the site level from a management piece. 
      • Groups are used for more then just site permissions. They can also be used for classifying users
      • Groups can be given custom permission settings. By not adding the users to groups we are forced to use only the three common permission roles (full control, edit, view)

       

      Perhaps the best thing would be if the great Outlook control could be expanded to include a way of selecting the group the user should be added to? We have tried to instruct out users to go onto the site to accept the requests so they can do this, but I think most of them will not get that message, and instead simply click 'Accept'

       

      Thanks

       

      Nigel

      • StephenRice's avatar
        StephenRice
        Icon for Microsoft rankMicrosoft

        Hi Nigel,

         

        Thanks again for reaching out! We have identified an issue with the new actionable message card where it's not behaving quite how we want for site requests. We're working on a fix but don't have an ETA just yet.

         

        In the meantime, in the actionable message in Outlook, there should be an option for seeing the original message. You can click the accept button there which will take you to the Access Request page where the behavior has not changed.

         

        Hope that helps!

         

        Stephen Rice

        OneDrive Program Manager II

         

         

Resources