Forum Discussion
Users see libraries they dont have permissions to
I figured this out, this is what worked for me.
When I added a library and broke inheritance and use a either a SharePoint Group or a O365 Security Group to give permissions to that library (actually not sure if you need all these to happen) - SharePoint, without telling me add that group to other libraries in the site with "Unique" permissions.
Sometimes it added this group to all the other libraries, some times only one or two, sometime no libraries.
I don't know why, or what these unique permissions are for.
I can tell which libraries it added the group to by opening the site with a user who only has permission to one Library. If you can see any other libraries you need to fix those libraries.
And I saw this when I opened the permissions to a library that just broke:
"There are limited access users on this site. users may have limited access if an item or document under the site has been shared with them. Show User. This library has unique permissions
If I saw the Show User part, I needed to fix things.
If you click show user you will see all the other permissions added by SharePoint.
Here's the part that took me an embarrassing two days to figure out - at this point just check their checkboxes and delete all groups with the extra permission. That's it. I got so hung up on what I did wrong for them to show up there, that it never occurred to me to try deleting them.
Sucks you need to do this. If anyone know why this happens and how to avoid it I'd love to know.
Tom
I don't think you will be able to use O365 groups to achieve what you want here. I find the most effective way to achieve what you are trying to do is very close to what you have tried;
1). Go to Library settings, permissions for this library.
2). Break Inheritance.
3). Create new SharePoint groups.
4). Assign individual users (not O365 groups) to the new SharePoint groups as required.
That in my opinion should do the trick.
PeterRising Thanks PeterRising! I was hoping for a different answer, like I was missing a checkbox somewhere. But confirming that it cant be done means I can move on at least.