Forum Discussion
Solved
SharePoint Library Sharing Options Greyed Out
I'm the creator\owner of SP sites for a University Dept., so it is a managed (not by me) SP Enterprise tenant.
I use MS AD security groups (holds user's MS/MS365 domain usernames) to grant access to the SP sites, and I apply custom permission levels instead of the default permission levels for the group's access. For each user's individual Doc Libraries, I stop inheritance and Grant Permissions for their username so they can have have full control of their Doc Libraries.
When they try to "share" items in their Libraries, all sharing options (anyone, people in your org, etc.) are greyed out except for "people w/ existing access". When I try to share the same content, as my username is a member of "Group membership - Owner", I have all share options except for "anyone" (assuming our Enterprise admin turns it off).
Under "Permissions: Manager who has access to this site" if I add an individual's username (from the MS AD security group) to the Site members or Site owners categories, they will now have working sharing options.
The Problem:
1. I want to manage Site members and access through the MS AD security groups and not the SP Site groups (owners/members/visitors), as I use the security groups for many things in our IT environment.
2. Even if I would use default SP site member groups, I can't add the security group but only individual usernames, and It seems I'd have to use default access permissions and not the custom permissions I create.
Suggests/insights into how to activate sharing options while using my access/control preferences listed above would be highly appreciated.
Tnx for the reply! Should have said I did already try your suggestion w/o success. Though it does clearly state "Site" member/owners can "share". Does this mean Only users/groups w/in Site members/owners can share?
And, when I go to Site Permissions settings>Add members>"Share site only", I was able to add and get the MS AD Security group to show under "Site members". I first tried this with Add members>"Add members" to group but after the "search directory" finds the security group, it shows "Couldn't add <security group name> as a member." Not sure why.
Now when accessing the Settings>Permissions>manage who has access to this site, I have the MS AD security group under Site members, but I only can choose the default edit/read/full control options.
Also, from Settings>Site Permissions>Advanced, I now have the the MS AD security group listed twice, the first w/ "type" as Domain Group and the second w/ "type" SharePoint Group.
Funny thing is when I select either of those two entries and click select the "Edit User Permissions, it seems that I can apply my custom permission sets.
What is the difference with adding members via Settings>Permissions to the default Site Owners/Members/Visitor groups, and granting permission to users/security groups from the Advanced permissions settings?
I can't find definitive MS explanations explaining the differences between these concepts so not sure if my above steps taken are a proper solution in regard to custom permission access.
Hello ksdst1
have you checked the site sharing settings?
I think the users need to be site members or owners...this also confirms your information. I think this is a boundary in your case.
You need to use an other solution like...
- one site per user
- one teams per user
Best, Dave
Tnx for the reply! Should have said I did already try your suggestion w/o success. Though it does clearly state "Site" member/owners can "share". Does this mean Only users/groups w/in Site members/owners can share?
And, when I go to Site Permissions settings>Add members>"Share site only", I was able to add and get the MS AD Security group to show under "Site members". I first tried this with Add members>"Add members" to group but after the "search directory" finds the security group, it shows "Couldn't add <security group name> as a member." Not sure why.
Now when accessing the Settings>Permissions>manage who has access to this site, I have the MS AD security group under Site members, but I only can choose the default edit/read/full control options.
Also, from Settings>Site Permissions>Advanced, I now have the the MS AD security group listed twice, the first w/ "type" as Domain Group and the second w/ "type" SharePoint Group.
Funny thing is when I select either of those two entries and click select the "Edit User Permissions, it seems that I can apply my custom permission sets.
What is the difference with adding members via Settings>Permissions to the default Site Owners/Members/Visitor groups, and granting permission to users/security groups from the Advanced permissions settings?
I can't find definitive MS explanations explaining the differences between these concepts so not sure if my above steps taken are a proper solution in regard to custom permission access.
