SharePoint Online hide "site contents" and "site usage" page (modern sites)

Hey hows it going.Reindert de Kok 

   A spfx extension seemed to solve my problem.

   In my application customizer I imported SPPermission and then used some js to do what I needed.
My Code below:

let checkExist = setInterval(function() {
    const element = document.querySelector("#O365_MainLink_Settings_container").firstChild.firstChild.firstChild.firstChild;
    if(typeof(element) != "undefined" && element != null){
       element.parentElement.parentElement.parentElement.remove();
       console.log("GFC user only has view rights.");
       clearInterval(checkExist);
    }
    
}, 100);

Reference:
Setup Environment: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/set-up-your-development-environment
Build an extension: https://docs.microsoft.com/en-us/sharepoint/dev/spfx/extensions/get-started/build-a-hello-world-extension

You can use the following css at content editor web part

<style>
#SuiteMenu_zz5_MenuItem_ViewAllSiteContents {
display: none;
}
</style>

Note the ID for ViewAllSiteContents item in menu is changed from environment to another so you can get it from browser inspect element

Reindert de Kok 

Hi,

I had  the same issue I used a custom permission level with the "View application pages" permission disabled and my external users were still able to access the Site Contents.

When I first enabled, "Limited-access user permission lockdown mode" , both the site pages and Site content displayed "Access Denied". However, after playing around with the permissions I was able to find a combination that worked for me.

My Steps:

1. Enable the "Limited-access user permission lockdown mode" Site Feature (Site Settings > Site collection features > Limited-access user permission lockdown mode).

2. Create Custom Permission Level with the following permissions:

1. List Permissions
   • Add Items - Add items to lists and add documents to document libraries.
   • Edit Items - Edit items in lists, edit documents in document libraries, and customize Web Part Pages in document libraries.
   • Delete Items - Delete items from a list and documents from a document library.
   • View Items - View items in lists and documents in document libraries.
   • Open Items - View the source of documents with server-side file handlers.
   • View Versions - View past versions of a list item or document.
2. Site Permissions
   • View Pages - View pages on the Web site.
   • Browse User Information - View information about users of the Web site.
   • Open - Allows users to open the Web site, list, or folder in order to access items inside that container.
   • Use Remote Interfaces - Use SOAP, Web DAV, the Client Object Model or SharePoint Designer interfaces to access the Web site.
   • Edit Personal User Information - Allows a user to change his or her own user information, such as adding a picture.

Note: These permissions worked for my needs, you may want to modify according to your needs. However, this method didn't work without the "Use Remote Interfaces" permission being enabled.

3. Ensure the external user group has the correct permission level applied to it. (Site Settings > Site Permissions > Check Permissions).

Result:

The External User group can access the site pages and but Site content and Site usage displays "Access Denied".

I hope this helps someone else!

Reindert de Kok 

I am currently testing and in the same situation as everyone that has requested and posted regarding this problem. as rpawa posted it is a permission thing but i will test what i may found as being everyone solution. Discovery needs experimentation . As soon as i am done testing fully with a few other users and a test user i am cramming with i will repost my findings and maybe the solution.

Hi, same issue here, i whant to Hide Info about Members, but in SPO Teams Site, the external user (my domain account but without licences) he can see the Team Group Members. :( .... is not GDPR OK because my user have phone nr. etc on there profile. :(((

I did some further research, here are my findings:

When you uncheck the "view application pages" permissions, users are not able to view the 'site contents' and 'site usage' pages. This works fine in a SharePoint site that uses sitepages that are based on the classic interface. Because users can browse the site pages, but not the application pages.

If you however use modern site pages, user will not be able to view those pages if they don't have the 'view application pages' permissions. In other words, SharePoint sees the modern pages as application pages.

Therefore there does not seem to be a way to restrict the access to the site contents and site usage pages while being able to view modern site pages. Which in my opinion is a clear bug...