Forum Discussion
SharePoint Online hide "site contents" and "site usage" page (modern sites)
I did some further research, here are my findings:
When you uncheck the "view application pages" permissions, users are not able to view the 'site contents' and 'site usage' pages. This works fine in a SharePoint site that uses sitepages that are based on the classic interface. Because users can browse the site pages, but not the application pages.
If you however use modern site pages, user will not be able to view those pages if they don't have the 'view application pages' permissions. In other words, SharePoint sees the modern pages as application pages.
Therefore there does not seem to be a way to restrict the access to the site contents and site usage pages while being able to view modern site pages. Which in my opinion is a clear bug...
This is very important to us, as well, and is driving us to look at alternatives that we would rather not pursue.
Ann_M Yeah this is kinda bad. Anyone with read permissions on modern sites her has access to all the admin functions on the menus, but jsut read access on the pages. What in the world is going on.
Deleted
I was running into this exact issue. Trying to setup a very strict "Read only" permission group for our Sharepoint site. I thought I had something working, and then found the gear icon had both "Site contents" and "Site Usage" listed. And, when I went to "Site Contents", I could do anything an admin can do (checkout, checkin, download, delete, upload).
I've made mitigated a big part of the issue, but I don't think it's good enough yet.
I found the "Style Resource Readers" group had Contribute permissions at the highest level (in addition to "Read" and "View Only"). Removing the Contribute permission from this group at least removed "Site Usage" from the gear, and when I went to the contents I could no longer checkout, checkin, delete or upload; but I could still get to the Site Contents, open the files and download them. This is not desired for a "Read only" user.
Next I'm going to try using the "View only" permission instead of the "Read" permission.
p.s. I just noticed as what should be a Read only user I can pull up the "Shared With" window, and share the site with presumably anyone! Not something I want them to be able to do. The window doesn't let them select the appropriate group...that's somehow much scarier, I have no idea what group that user would be put into.
Update: I have a solution!
Short answer: use "Restricted Read" instead of "Read" or "View Only", and also set the Style Resource Readers group to "Restricted Read".
When I used "View Only", Site contents were still available but files could no longer be downloaded, that was a substantial improvement but not quite all the way to what I want.
I then tried "Restricted Read", and now "Site Contents" is removed from the gear icon. "Shared With..." is still listed as an option, but clicking it results in an error and the sharing window does not come up. Pages still seem to work, and I don't seem to be able to edit list items. So this is a workable solution for me. I believe "Restricted Read" is a standard permissions group for SharePoint, in case it isn't, you can create it yourself by adding a new permission level with the following items checked in the "Permissions" section: View Items, Open Items, View Pages, and Open.
I have not experimented with creating a special permission level to pare this down even further (i.e. I don't know exactly what those permissions do, and what would happen if I took them away).
Has this been recolved or is there a way to hide the site content menu item? I have hidden access to site assests, styles and other folder except document using custom permissions by not inheriting from parent. But visitors still have access to site usage and site workflows. I need to not show this in the UI.
any help would be great.
I would like to hide the site permissions as well. Haven't figured out a way of doing so as of yet. Any input would be great.
I'm interested in learning more about this solution as well. The result is similar: A custom permission setting that would:
- Grant Visitors access to complete forms.
- Disable Visitors access to the Site Settings, Site Contents and Edit/Add Page.
After some research, I tried using
- Contribute = Visitors are able to access and complete forms. However, they may access Site Settings, Site Contents, and Edit/Add Page
- Restricted Read = Visitors are unable to access Site Settings, etc. However, they are unable to access and complete the forms.
- Custom Permission = Copy of Contribute Settings with an unchecked, "View Application Pages". Result is Visitors are unable to access and complete the form.
There are some solutions to remove the Site Settings Icon and Menu using SharePoint Designer, however, using Designer is not an option for our team at this time.
