Document Library permission

%3CLINGO-SUB%20id%3D%22lingo-sub-2743881%22%20slang%3D%22en-US%22%3EDocument%20Library%20permission%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2743881%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20community%2C%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20been%20really%20struggling%20to%20get%20this%20permission%20right%20and%20couldn't%20get%20help%20at%20all.%3C%2FP%3E%3CP%3EPlease%20please%20if%20any%20slightest%20idea%20you%20know%20please%20share-will%20help%20me%20tons.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAt%20my%20parent%20site%20the%20permission%20looks%20like%20this%20%3A%3C%2FP%3E%3CP%3Ea)Site%20Owner%20%3A%20Full%20Control%26nbsp%3B%3C%2FP%3E%3CP%3Eb)Managers%26nbsp%3B%20%26nbsp%3B%3A%20Full%20Control%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B1.%20Manager%20A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B2.%20Manager%20B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B3.%20Manager%20C%3C%2FP%3E%3CP%3Ec)Members%20%3A%20Contribute%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20Can%20I%20structure%20the%20permission%26nbsp%3Bso%20manager%20A%26nbsp%3B%20doesn't%20see%20each%20manager%20B%26nbsp%3B%20documents%2C%20manager%20doesnt%20other%20managers%26nbsp%3B%20but%20staffs%20reporting%20to%20their%20respective%20managers%20sees%20the%20documents.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EManager%20A%20creates%20a%20folder%20and%20put%20files%20in%20to%20share%20with%20first%20members%20only.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20help.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2743881%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2016%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDocument%20Library%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ELists%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EResponsive%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2744684%22%20slang%3D%22en-US%22%3ERe%3A%20Document%20Library%20permission%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2744684%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1139035%22%20target%3D%22_blank%22%3E%40Sansoden%3C%2FA%3E%26nbsp%3BThere%20are%20a%20number%20of%20different%20approaches%20you%20could%20take%20to%20resolve%20this%20issue.%20Here%20is%20a%20straightforward%20method.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECreate%203%20Document%20Libraries%2C%20one%20for%20each%20manager%3C%2FP%3E%0A%3CP%3E-%20On%20each%20library%20go%20to%20Library%20Settings%20%26gt%3B%20Permissions%26nbsp%3B%3C%2FP%3E%0A%3CP%3E-%20Stop%20inheritance%3C%2FP%3E%0A%3CP%3E-%20Remove%20the%20Members%20and%20Managers%3C%2FP%3E%0A%3CP%3E-%20Add%20the%20Manager%20and%20a%20group%20for%20containing%20their%20staff%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20Document%20Library%20will%20only%20appear%20on%20the%20left%20hand%20navigation%20for%20users%20with%20permission%20to%20see%20the%20library.%20Each%20Manager%20will%20only%20see%20their%20library.%20Each%20managers%20team%20will%20only%20see%20documents%20in%20their%20Managers%20library.%20Search%20will%20also%20be%20security%20trimmed.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20edit%20the%20left%20hand%20navigation%20and%20remove%20the%20default%20Document%20Library%20if%20you%20wish.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2744950%22%20slang%3D%22en-US%22%3ERe%3A%20Document%20Library%20permission%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2744950%22%20slang%3D%22en-US%22%3EHi%20Steve%20..Thanks%20for%20getting%20back%20to%20me%2C%20really%20appreciate%20.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20will%20explore%20around%20the%20idea%20suggested%2C%20but%20then%20when%20new%20members%20when%20they%20join%20%2C%20I%20have%20to%20manually%20group%20them%20under%20their%20respective%20manager%2C%20can%20it%20be%20dynamic%20from%20the%20AD%20setup%3F%3CBR%20%2F%3EIn%20advance%20thank%20you%20so%20much.%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi community, 

I have been really struggling to get this permission right and couldn't get help at all.

Please please if any slightest idea you know please share-will help me tons.

 

At my parent site the permission looks like this :

a)Site Owner : Full Control 

b)Managers   : Full Control 

     1. Manager A 

     2. Manager B 

     3. Manager C

c)Members : Contribute  

 

How Can I structure the permission so manager A  doesn't see each manager B  documents, manager doesnt other managers  but staffs reporting to their respective managers sees the documents.

 

Manager A creates a folder and put files in to share with first members only. 

 

Please help.

 

 

 

3 Replies

@Sansoden There are a number of different approaches you could take to resolve this issue. Here is a straightforward method.

 

Create 3 Document Libraries, one for each manager

- On each library go to Library Settings > Permissions 

- Stop inheritance

- Remove the Members and Managers

- Add the Manager and a group for containing their staff

 

The Document Library will only appear on the left hand navigation for users with permission to see the library. Each Manager will only see their library. Each managers team will only see documents in their Managers library. Search will also be security trimmed.

 

You can edit the left hand navigation and remove the default Document Library if you wish.

 

Other options include more granular file permissions that can be complex and difficult to manage as time goes on. 

 

 

 

Hi Steve ..Thanks for getting back to me, really appreciate .

I will explore around the idea suggested, but then when new members when they join , I have to manually group them under their respective manager, can it be dynamic from the AD setup?
In advance thank you so much.
You can use an AD Group including dynamic groups for each managers team.
This article explains how to set unique permissions on a library (step by step)
https://support.microsoft.com/en-us/office/customize-permissions-for-a-sharepoint-list-or-library-02...