SOLVED

Contributors permissions granted, Access to subfolder in SP site blocked

%3CLINGO-SUB%20id%3D%22lingo-sub-1535538%22%20slang%3D%22en-US%22%3EContributors%20permissions%20granted%2C%20Access%20to%20subfolder%20in%20SP%20site%20blocked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1535538%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20did%20some%20research%20before%20posting%20but%20I%20didn't%20find%20a%20solution.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOur%20CTO%20created%20a%20site%20in%20Sharepoint%20which%20contains%20sensitive%20information.%3C%2FP%3E%3CP%3EHe%20now%20wants%20to%20share%20a%20specific%20documents%20subfolder%20to%20a%20user%20who%20is%20not%20part%20of%20the%20group%3B%20we%20need%20to%20give%20this%20user%20contributing%20access%20%3CSTRONG%3Eonly%20for%20that%20folder%3C%2FSTRONG%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEven%20though%20they%20appear%20to%20have%20been%20added%20correctly%2C%20they%20still%20get%20the%20email%20to%20request%20access%20%3CSTRONG%3Eto%20the%20whole%20site%3C%2FSTRONG%3E%2C%20which%20is%20not%20possible.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20read%20about%20Limited%20Access%20being%20the%20culprit%2C%20but%20the%20%22Site%20Collection%20Administrator%22%20area%20does%20not%20appear%20to%20me%20when%20I%20go%20in%20the%20settings.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFYI%2C%20I%20am%20added%20to%20the%20group%20of%20Owners%20of%20the%20site%2C%20however%2C%20when%20I%20try%20to%20manage%20user%20permissions%20it%20looks%20like%20I%20still%20don't%20have%20full%20control.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20anybody%20help%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1535538%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDocument%20Library%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EFiles%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESites%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1535581%22%20slang%3D%22en-US%22%3ERe%3A%20Contributors%20permissions%20granted%2C%20Access%20to%20subfolder%20in%20SP%20site%20blocked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1535581%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F734894%22%20target%3D%22_blank%22%3E%40mangelucci%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20I%20would%20do%20here%20is%20ensure%20you%20were%20changing%20the%20permissions%20in%20the%20correct%20place.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3ENavigate%20to%20where%20the%20folder%20is.%3C%2FLI%3E%3CLI%3ESelect%20the%20folder%20with%20the%20radio%20button.%26nbsp%3B%3C%2FLI%3E%3CLI%3EEnsure%20the%20details%20pane%20is%20open%20on%20the%20right%20of%20the%20screen(click%20the%20icon%20that%20is%20a%20circle%20with%20an%20i%20in%20it.%26nbsp%3B%3C%2FLI%3E%3CLI%3EClick%20Manage%20access.%3C%2FLI%3E%3CLI%3EClick%20Advanced%20at%20the%20bottom.%3C%2FLI%3E%3CLI%3EClick%20stop%20inheriting%20permissions(may%20be%20uninherited%20already)%3C%2FLI%3E%3CLI%3EChange%20the%20permissions%20to%20what%20you%20want%20them%20to%20be.%3C%2FLI%3E%3CLI%3ESend%20the%20the%20web%20address(not%20a%20link)%20to%20the%20folder.%3C%2FLI%3E%3C%2FOL%3E%3CP%3EThat%20should%20do%20it.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20check%20permissions%20on%20the%20rest%20of%20the%20site%20to%20ensure%20that%20the%20user%20hasn't%20been%20added.%20Owners%20by%20default%20will%20be%20able%20to%20manage%20permissions%20(Full%20control)%20unless%20someone%20has%20changed%20the%20permissions%20on%20the%20folder%20you%20are%20trying%20to%20amend.%20In%20that%20case%20you%20will%20need%20a%20site%20collection%20admin%20to%20sort%20that%20out%20for%20you.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAndy%20Hodges%20%3CSPAN%3E%7C%20ThinkShare%20%7C%20%3C%2FSPAN%3E-ERR%3AREF-NOT-FOUND-%3CSPAN%3E%3CA%20href%3D%22http%3A%2F%2Fwww.thinkshare.uk%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ewww.thinkshare.uk%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1535642%22%20slang%3D%22en-US%22%3ERe%3A%20Contributors%20permissions%20granted%2C%20Access%20to%20subfolder%20in%20SP%20site%20blocked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1535642%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F214649%22%20target%3D%22_blank%22%3E%40Andrew%20Hodges%3C%2FA%3E%26nbsp%3BHi%20Andrew%2C%20thanks%20for%20jumping%20on%20this!%3C%2FP%3E%3CP%3EI%20tried%20tried%20the%20steps%201%20to%208%20and%20I%20have%20an%20update%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20accessed%20the%20Advanced%20permissions%20page%20and%20added%20the%20user%20as%20a%20Contributor%2C%20after%20stopping%20inheriting%20permissions%20(they%20are%20unique%20to%20this%20folder%20now).%20I%20then%20accessed%20the%20folder%20myself%2C%20and%20copied%20the%20URL%20from%20the%20address%20bar%20of%20my%20browser%20(not%20the%20link)%20and%20passed%20it%20to%20my%20colleague%2C%20however%2C%20she%20still%20gets%20sent%20to%20the%20%22Request%20Access%22%20form.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETwo%20things%20I%20noticed%3A%3C%2FP%3E%3COL%3E%3CLI%3EIf%20I%20click%20on%20%22grant%20permissons%22%2C%20I%20get%20this%20error%3A%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22mangelucci_0-1595336184902.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F206823iDA82ABDBDDB1F6C0%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22mangelucci_0-1595336184902.png%22%20alt%3D%22mangelucci_0-1595336184902.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLI%3E%3CLI%3EIf%20I%20use%20the%20Permission%20Checker%20tool%2C%20I%20get%20this%20conflicting%20result%3A%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22mangelucci_1-1595336268092.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F206824i013AE60F6318AD41%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22mangelucci_1-1595336268092.png%22%20alt%3D%22mangelucci_1-1595336268092.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20am%20a%20Global%20Admin%20on%20O365%2C%20and%20I'm%20listed%20as%20%22Owner%22%20of%20this%20site%2C%20so%20shouldn't%20I%20be%20the%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Esite%20collection%20admin%26nbsp%3Bmyself%2C%20given%20the%20permissions%20and%20roles%20I%20just%20mentioned%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI%20tried%20to%20locate%20the%20Site%20Collection%20settings%20to%20disable%20the%20%22Limited%20Access%20feature%22%20as%20advised%20in%20the%20following%20link%2C%20but%20it%20just%20doesn't%20appear%20in%20the%20Site%20Settings%20page%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-za%2Fsharepoint%2Ftroubleshoot%2Fsharing-and-permissions%2Fcannot-access-shared-folder%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-za%2Fsharepoint%2Ftroubleshoot%2Fsharing-and-permissions%2Fcannot-access-shared-folder%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20in%20advance%20for%20your%20support.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1535666%22%20slang%3D%22en-US%22%3ERe%3A%20Contributors%20permissions%20granted%2C%20Access%20to%20subfolder%20in%20SP%20site%20blocked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1535666%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F734894%22%20target%3D%22_blank%22%3E%40mangelucci%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20are%20not%20a%20site%20collection%20owner%20you%20wont%20see%20the%20site%20collection%20feature%2C%20even%20though%20you%20are%20a%20Global%20Admin.%20A%20Global%20Admin%20has%20no%20rights%20over%20SharePoint%20sites%20unless%20you%20are%20added%20as%20a%20Site%20collection%20admin%20or%20an%20owner.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAdd%20yourself%20into%20the%20site%20collection%20Admins%20for%20that%20site%20in%20the%20SharePoint%20admin%20centre.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1535911%22%20slang%3D%22en-US%22%3ERe%3A%20Contributors%20permissions%20granted%2C%20Access%20to%20subfolder%20in%20SP%20site%20blocked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1535911%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F214649%22%20target%3D%22_blank%22%3E%40Andrew%20Hodges%3C%2FA%3E%26nbsp%3Ball%20sorted%2C%20I%20figured%20it%20out!%20It%20wasn't%20a%20matter%20of%20being%20an%20owner%2C%20I%20needed%20to%20be%20an%20Admin%20of%20the%20site%2C%20which%20comes%20with%20extra%20permissions%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20those%20who%20come%20here%20with%20the%20same%20issue%3A%20I%20was%20made%20an%20Owner%20by%20my%20CTO%2C%20but%20not%20an%20Admin%20of%20that%20site%20via%20the%20Sharepoint%20admin%20centre.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20I%20had%20to%20do%20was%20logging%20into%20admin.microsoft.com%2C%20open%20the%20Sharepoint%20Admin%20Centre%20from%20the%20left%20pane%2C%20select%20%22Sites%22%20and%20then%20%22Active%20Sites%22%2C%20find%20the%20relevant%20site%20and%20add%20myself%20as%20Admin%2FPrimary%20Admin.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAt%20that%20point%2C%20I%20was%20then%20able%20to%20see%20the%20Site%20Collection%20settings%20mentioned%20in%20the%20link%20below%20to%20disable%20the%20%22Limited%20Access%20feature%22%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-za%2Fsharepoint%2Ftroubleshoot%2Fsharing-and-permissions%2Fcannot-access-share..%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-za%2Fsharepoint%2Ftroubleshoot%2Fsharing-and-permissions%2Fcannot-access-share..%3C%2FA%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20soon%20as%20I%20disabled%20that%20feature%2C%20my%20colleague%20was%20able%20to%20access%20the%20folder%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi,

 

I did some research before posting but I didn't find a solution.

 

Our CTO created a site in Sharepoint which contains sensitive information.

He now wants to share a specific documents subfolder to a user who is not part of the group; we need to give this user contributing access only for that folder.

 

Even though they appear to have been added correctly, they still get the email to request access to the whole site, which is not possible.

 

I read about Limited Access being the culprit, but the "Site Collection Administrator" area does not appear to me when I go in the settings.

 

FYI, I am added to the group of Owners of the site, however, when I try to manage user permissions it looks like I still don't have full control.

 

Can anybody help?

4 Replies

@mangelucci 

 

What I would do here is ensure you were changing the permissions in the correct place. 

 

  1. Navigate to where the folder is.
  2. Select the folder with the radio button. 
  3. Ensure the details pane is open on the right of the screen(click the icon that is a circle with an i in it. 
  4. Click Manage access.
  5. Click Advanced at the bottom.
  6. Click stop inheriting permissions(may be uninherited already)
  7. Change the permissions to what you want them to be.
  8. Send the the web address(not a link) to the folder.

That should do it. 

 

You can check permissions on the rest of the site to ensure that the user hasn't been added. Owners by default will be able to manage permissions (Full control) unless someone has changed the permissions on the folder you are trying to amend. In that case you will need a site collection admin to sort that out for you. 

 

Andy Hodges | ThinkShare | www.thinkshare.uk

@Andrew Hodges Hi Andrew, thanks for jumping on this!

I tried tried the steps 1 to 8 and I have an update

 

I accessed the Advanced permissions page and added the user as a Contributor, after stopping inheriting permissions (they are unique to this folder now). I then accessed the folder myself, and copied the URL from the address bar of my browser (not the link) and passed it to my colleague, however, she still gets sent to the "Request Access" form.

 

Two things I noticed:

  1. If I click on "grant permissons", I get this error:mangelucci_0-1595336184902.png

     

  2. If I use the Permission Checker tool, I get this conflicting result:
    mangelucci_1-1595336268092.png

 

I am a Global Admin on O365, and I'm listed as "Owner" of this site, so shouldn't I be the site collection admin myself, given the permissions and roles I just mentioned?


I tried to locate the Site Collection settings to disable the "Limited Access feature" as advised in the following link, but it just doesn't appear in the Site Settings page https://docs.microsoft.com/en-za/sharepoint/troubleshoot/sharing-and-permissions/cannot-access-share...

 

Thank you in advance for your support.

@mangelucci 

 

If you are not a site collection owner you wont see the site collection feature, even though you are a Global Admin. A Global Admin has no rights over SharePoint sites unless you are added as a Site collection admin or an owner.

 

Add yourself into the site collection Admins for that site in the SharePoint admin centre.

best response confirmed by mangelucci (New Contributor)
Solution

@Andrew Hodges all sorted, I figured it out! It wasn't a matter of being an owner, I needed to be an Admin of the site, which comes with extra permissions :)

 

For those who come here with the same issue: I was made an Owner by my CTO, but not an Admin of that site via the Sharepoint admin centre.

 

What I had to do was logging into admin.microsoft.com, open the Sharepoint Admin Centre from the left pane, select "Sites" and then "Active Sites", find the relevant site and add myself as Admin/Primary Admin.

 

At that point, I was then able to see the Site Collection settings mentioned in the link below to disable the "Limited Access feature" https://docs.microsoft.com/en-za/sharepoint/troubleshoot/sharing-and-permissions/cannot-access-share....

 

As soon as I disabled that feature, my colleague was able to access the folder :)