SOLVED

How to use SharePoint Groups in Team Sites

%3CLINGO-SUB%20id%3D%22lingo-sub-707487%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707487%22%20slang%3D%22en-US%22%3EThe%20access%20to%20the%20team%20sites%20is%20based%20upon%20the%20membership%20of%20the%20office%20365%20group!%20You%20can%20alter%20read%20%2F%20write%20for%20them%20or%20add%20sharepoint%20groups%20to%20the%20site%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707703%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707703%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72542%22%20target%3D%22_blank%22%3E%40adam%20deltinger%3C%2FA%3E%26nbsp%3B%26nbsp%3BThe%20use%20case%2C%20however%2C%20is%20extending%20the%20site%20permissions%20beyond%20the%20group.%20In%20an%20Office%20365%20group%2C%20you%20have%20the%20ability%20to%20apply%20permissions%20to%20the%20group%20OR%20the%20site%20only.%20This%20makes%20the%20site%20more%20flexible.%20I%20would%20expect%20the%20site%20to%20work%20like%20any%20site%2C%20but%20I%20cannot%20find%20where%20to%20manage%20SharePoint%20groups.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707720%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707720%22%20slang%3D%22en-US%22%3EGo%20to%20advanced%20permissions!%20From%20there%20you%20can%20add%20any%20sharepoint%20group%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707785%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707785%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%20That's%20kinda%20the%20point%20of%20my%20post.%20%22People%20and%20Groups%22%20is%20no%20longer%20available%20in%20the%20advanced%20settings.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhile%20you%20can%20add%20a%20group%2C%20however%2C%20unless%20you%20give%20it%20site%20permissions%20you%20can't%20see%20it%2C%20edit%20users%2C%20etc...%20A%20key%20value%20of%20SharePoint%20groups%20is%20providing%20unique%20permissions%20to%20a%20list%2Flibrary%2Ffolder%20etc...%2C%20not%20adding%20general%20site%20access.%3C%2FP%3E%3CP%3EThis%20is%20available%20on%20all%20other%20types%20of%20SharePoint%20sites%20and%20has%20been%20forever.%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20you%20can%20see%20in%20the%20screenshot%20%22Users%20and%20Permissions%22%20is%20not%20available.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707786%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707786%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%20That's%20kinda%20the%20point%20of%20my%20post.%20%22People%20and%20Groups%22%20is%20no%20longer%20available%20in%20the%20advanced%20settings.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhile%20you%20can%20add%20a%20group%2C%20however%2C%20unless%20you%20give%20it%20site%20permissions%20you%20can't%20see%20it%2C%20edit%20users%2C%20etc...%20A%20key%20value%20of%20SharePoint%20groups%20is%20providing%20unique%20permissions%20to%20a%20list%2Flibrary%2Ffolder%20etc...%2C%20not%20adding%20general%20site%20access.%3C%2FP%3E%3CP%3EThis%20is%20available%20on%20all%20other%20types%20of%20SharePoint%20sites%20and%20has%20been%20forever.%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20you%20can%20see%20in%20the%20screenshot%20%22Users%20and%20Permissions%22%20is%20not%20available.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707826%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707826%22%20slang%3D%22en-US%22%3EGo%20to%20the%20start%20page%20of%20the%20site%20(left%20menu%20at%20the%20top)%3CBR%20%2F%3EClick%20the%20cogwheel%20-%20site%20permissions%20-%20advanced%20permissions%20!%20In%20here%20you%20can%20create%20groups%20and%20add%20for%20example%20read%20permissions!%20Keep%20in%20mind%20though%20that%20this%20is%20only%20access%20to%20sharepoint%20files!%20If%20the%20user%20isn%E2%80%99t%20member%20of%20the%20office%20365%20group%2C%20they%20won%E2%80%99t%20be%20added%20to%20the%20team%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707787%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707787%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72542%22%20target%3D%22_blank%22%3E%40adam%20deltinger%3C%2FA%3E%26nbsp%3B%20That's%20kinda%20the%20point%20of%20my%20post.%20%22People%20and%20Groups%22%20is%20no%20longer%20available%20in%20the%20advanced%20settings.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhile%20you%20can%20add%20a%20group%2C%20however%2C%20unless%20you%20give%20it%20site%20permissions%20you%20can't%20see%20it%2C%20edit%20users%2C%20etc...%20A%20key%20value%20of%20SharePoint%20groups%20is%20providing%20unique%20permissions%20to%20a%20list%2Flibrary%2Ffolder%20etc...%2C%20not%20adding%20general%20site%20access.%3C%2FP%3E%3CP%3EThis%20is%20available%20on%20all%20other%20types%20of%20SharePoint%20sites%20and%20has%20been%20forever.%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20you%20can%20see%20in%20the%20screenshot%20%22Users%20and%20Permissions%22%20is%20not%20available.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707987%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707987%22%20slang%3D%22en-US%22%3ETotally%20get%20you%20can%20add%20them.%20You%20just%20can't%20manage%20them.%20Not%20in%20O365%20Group%20SharePoint%20site.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-707471%22%20slang%3D%22en-US%22%3EHow%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-707471%22%20slang%3D%22en-US%22%3E%3CP%3EUtilizing%20SharePoint%20groups%20to%20secure%20content%20for%20a%20specific%20set%20of%20users%20on%20a%20site%20is%20a%20very%20common%20scenario.%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20use%20this%20as%20a%20best%20practice%20for%20keeping%20track%20of%20who%20has%20access%20to%20content%20that%20breaks%20inheritance%20from%20the%20site.%3C%2FP%3E%3CP%3EThe%20%22People%20and%20Groups%22%20link%20no%20longer%20shows%20up%20on%20the%20site%20settings%20page%2C%20for%20Team%20Sites%20(after%20going%20to%20%22advanced%22%3C%2FP%3E%3CP%3EIs%20this%20part%20of%20a%20significant%20change%20in%20how%20to%20manage%20the%20need%20to%20have%20different%20permission%20on%20specific%20content%3F%3C%2FP%3E%3CP%3EOr%20am%20I%20missing%20something%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20a%20huge%20issue%20IMHO%20on%20how%20we%20manage%20content%20on%20Team%20sites.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-707471%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGroups%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-708042%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-708042%22%20slang%3D%22en-US%22%3EIn%20what%20sense%20do%20you%20mean%20by%20manage%20the%20groups%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-708059%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-708059%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F64210%22%20target%3D%22_blank%22%3E%40Eric%20Adler%3C%2FA%3E%26nbsp%3B%20while%20it%20isn't%20shown%20in%20the%20Settings%20page%20anymore%2C%20you%20can%20still%20get%20to%20the%20People%20and%20Groups%20page%20of%20any%20site%20by%20appending%20%22_layouts%2F15%2Fgroups.aspx%22%20to%20its%20URL.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EExample%3A%20%3CA%20href%3D%22https%3A%2F%2Fsitename.sharepoint.com%2Fsites%2Fteamname%2F_layouts%2F15%2Fgroups.aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fsitename.sharepoint.com%2Fsites%2Fteamname%2F_layouts%2F15%2Fgroups.aspx%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFrom%20here%20you%20can%20add%2Fremove%2Fmodify%20SharePoint%20Security%20Groups%20like%20you%20are%20accustomed%20too.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-708074%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-708074%22%20slang%3D%22en-US%22%3EThanks.%20Unfortunately%2C%20I%20don't%20think%20I%20can%20train%20my%20users%20to%20do%20that.%20I%20appreciate%20the%20response.%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20answer%2C%20I%20believe%2C%20is%20No%2C%20there%20is%20no%20way%20in%20the%20UI%20to%20get%20to%20People%20and%20Groups%20on%20O365%20Group%20SharePoint%20site.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20really%20don't%20understand%20why%20they%20removed%20that.%20I%20will%20post%20in%20UserVoice.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20appreciate%20everyone's%20time%20and%20responses!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-708121%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-708121%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F64210%22%20target%3D%22_blank%22%3E%40Eric%20Adler%3C%2FA%3E%26nbsp%3BI%20think%20the%20reason%20they%20have%20removed%20it%20from%20Settings%20is%20because%20of%20the%20way%20that%20the%20new%20Share%20functionality%20works%20in%20the%20background.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20users%20click%20the%20Share%20button%20in%20a%20list%20or%20library%2C%20it%20is%20creating%20a%20%22SharePointLink.....%22-named%20SharePoint%20Security%20Group%20in%20the%20background%20and%20adding%20the%20shared-with%20users%20to%20it.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWith%20the%20Share%20functionality%20front-and-center%20for%20users%20to%20access%2C%20there%20is%20less%20reason%20for%20them%20to%20go%20into%20People%20and%20Groups.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20don't%20necessarily%20like%20it%20either%2C%20as%20it%20is%20backwards%20from%20the%20best%20practices%20which%20have%20been%20established%20for%20years.%20However%2C%20I%20think%20it%20is%20an%20uphill%20battle%20to%20try%20and%20continue%20to%20use%20our%20old%20security%20practices%20and%20go%20against%20all%20of%20the%20Share%20functionality%20they%20are%20currently%20building%20and%20expanding.%20You%20would%20need%20to%20hide%20the%20Share%20and%20Copy%20Link%20buttons%20in%20all%20lists%2Flibraries%2C%20and%20then%20create%20links%20for%20users%20to%20the%20old%20People%20and%20Groups%20page%20if%20you%20wanted%20to%20continue%20down%20the%20path%20of%20only%20using%20SharePoint%20Security%20Groups.%20It's%20not%20worth%20the%20effort%20to%20me.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20do%20think%20there%20are%20still%20scenarios%20where%20SharePoint%20or%20site%20admins%20who%20have%20the%20knowledge%20should%20use%20this%20now-hidden%20People%20and%20Groups%20page%20in%20order%20to%20utilize%20SharePoint%20Security%20Groups.%20But%20doing%20so%20would%20be%20done%20in%20addition%20to%20letting%20users%20use%20the%20new%20Share%20functionalities%20that%20Microsoft%20has%20built.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-708899%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20use%20SharePoint%20Groups%20in%20Team%20Sites%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-708899%22%20slang%3D%22en-US%22%3EThe%20file%20share%20model%20is%20ok.%20As%20long%20as%20you%20share%20every%20file%2C%20every%20time.%20For%20years%20I%20warned%20people%20against%20file%20level%20permissions%20as%20it%20so%20hard%20to%20keep%20track%20of%20what%20is%20shared%20with%20who.%20A%20key%20reason%20I%20drive%20users%20to%20use%20SharePoint%20rather%20than%20OneDrive.%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20can%20also%2C%20of%20course%2C%20share%20at%20the%20folder%20and%20site%20level%20relatively%20easily%20and%20you%20can%20share%20to%20a%20securitiy%20group.%20Which%20are%20all%20improvements%2C%20IMHO%2C%20over%20single%20file%20sharing.%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20groups%20come%20into%20play%20when%20making%20a%20list%20and%20allowing%20non-team%20members%20to%20submit%20info%20to%20a%20list%20without%20opening%20the%20site%20to%20editing.%3CBR%20%2F%3EThis%20is%20a%20common%20scenario%20for%20SharePoint.%20I%20always%20create%20a%20group%20aligned%20to%20the%20list%20to%20provide%20the%20%22edit%22%20ability%20to%20so%20all%20users%20can%20submit%20items.%3CBR%20%2F%3E%3CBR%20%2F%3EIt%20was%20easy%20to%20hand%20this%20off%20to%20the%20business%20to%20manage%20who%20should%20be%20able%20to%20submit%20with%20the%20People%20and%20Groups.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20can%20teach%20them%20to%20use%20the%20List%20%26gt%3B%20List%20Permissions%20and%20access%20the%20group%20membership%20that%20way.%3CBR%20%2F%3E%3CBR%20%2F%3EIt%20is%20always%20challenging%20when%20you%20have%20to%20explain%20these%20nuances%20to%20end%20users.%20Their%20eyes%20get%20that%20dear%20in%20the%20headlights%20look%20and%20I%20know%20I%20have%20lost%20them.%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20are%20correct%2C%20it%20is%20constantly%20evolving%2C%20so%20we'll%20see.%3CBR%20%2F%3E%3CBR%20%2F%3EThank%20you%20for%20your%20insights%2C%20very%20helpful!%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Regular Contributor

Utilizing SharePoint groups to secure content for a specific set of users on a site is a very common scenario. 

We use this as a best practice for keeping track of who has access to content that breaks inheritance from the site.

The "People and Groups" link no longer shows up on the site settings page, for Team Sites (after going to "advanced"

Is this part of a significant change in how to manage the need to have different permission on specific content?

Or am I missing something?

 

This is a huge issue IMHO on how we manage content on Team sites. 

12 Replies
The access to the team sites is based upon the membership of the office 365 group! You can alter read / write for them or add sharepoint groups to the site

@adam deltinger  The use case, however, is extending the site permissions beyond the group. In an Office 365 group, you have the ability to apply permissions to the group OR the site only. This makes the site more flexible. I would expect the site to work like any site, but I cannot find where to manage SharePoint groups.

 

Go to advanced permissions! From there you can add any sharepoint group

@adam deltinger  That's kinda the point of my post. "People and Groups" is no longer available in the advanced settings.

 

While you can add a group, however, unless you give it site permissions you can't see it, edit users, etc... A key value of SharePoint groups is providing unique permissions to a list/library/folder etc..., not adding general site access.

This is available on all other types of SharePoint sites and has been forever. 

As you can see in the screenshot "Users and Permissions" is not available.

 

@adam deltinger  That's kinda the point of my post. "People and Groups" is no longer available in the advanced settings.

 

While you can add a group, however, unless you give it site permissions you can't see it, edit users, etc... A key value of SharePoint groups is providing unique permissions to a list/library/folder etc..., not adding general site access.

This is available on all other types of SharePoint sites and has been forever. 

As you can see in the screenshot "Users and Permissions" is not available.

 

Go to the start page of the site (left menu at the top)
Click the cogwheel - site permissions - advanced permissions ! In here you can create groups and add for example read permissions! Keep in mind though that this is only access to sharepoint files! If the user isn’t member of the office 365 group, they won’t be added to the team
Totally get you can add them. You just can't manage them. Not in O365 Group SharePoint site.
In what sense do you mean by manage the groups?
best response confirmed by Eric Adler (Regular Contributor)
Solution

@Eric Adler  while it isn't shown in the Settings page anymore, you can still get to the People and Groups page of any site by appending "_layouts/15/groups.aspx" to its URL. 

 

Example: https://sitename.sharepoint.com/sites/teamname/_layouts/15/groups.aspx

 

From here you can add/remove/modify SharePoint Security Groups like you are accustomed too. 

 

 

Thanks. Unfortunately, I don't think I can train my users to do that. I appreciate the response.

The answer, I believe, is No, there is no way in the UI to get to People and Groups on O365 Group SharePoint site.

I really don't understand why they removed that. I will post in UserVoice.

I appreciate everyone's time and responses!

@Eric Adler I think the reason they have removed it from Settings is because of the way that the new Share functionality works in the background.

 

When users click the Share button in a list or library, it is creating a "SharePointLink....."-named SharePoint Security Group in the background and adding the shared-with users to it. 

 

With the Share functionality front-and-center for users to access, there is less reason for them to go into People and Groups. 

 

I don't necessarily like it either, as it is backwards from the best practices which have been established for years. However, I think it is an uphill battle to try and continue to use our old security practices and go against all of the Share functionality they are currently building and expanding. You would need to hide the Share and Copy Link buttons in all lists/libraries, and then create links for users to the old People and Groups page if you wanted to continue down the path of only using SharePoint Security Groups. It's not worth the effort to me. 

 

I do think there are still scenarios where SharePoint or site admins who have the knowledge should use this now-hidden People and Groups page in order to utilize SharePoint Security Groups. But doing so would be done in addition to letting users use the new Share functionalities that Microsoft has built.

The file share model is ok. As long as you share every file, every time. For years I warned people against file level permissions as it so hard to keep track of what is shared with who. A key reason I drive users to use SharePoint rather than OneDrive.

You can also, of course, share at the folder and site level relatively easily and you can share to a securitiy group. Which are all improvements, IMHO, over single file sharing.

The groups come into play when making a list and allowing non-team members to submit info to a list without opening the site to editing.
This is a common scenario for SharePoint. I always create a group aligned to the list to provide the "edit" ability to so all users can submit items.

It was easy to hand this off to the business to manage who should be able to submit with the People and Groups.

I can teach them to use the List > List Permissions and access the group membership that way.

It is always challenging when you have to explain these nuances to end users. Their eyes get that dear in the headlights look and I know I have lost them.

You are correct, it is constantly evolving, so we'll see.

Thank you for your insights, very helpful!