May 07 2019 12:18 PM
Good Day
Hope in getting assistance clarity on this topic. What is the required set up for someone to be able in associating a SharePoint Online site to an existing Hub? Does the user need to be a site collection administrator of the stand alone site collection AND also a site collection administrator for the Hub Site?
This may be related to the choice of specifying the names of users that can associate sites to the Hub as we define a site to become a Hub Site. https://docs.microsoft.com/en-us/sharepoint/create-hub-site is clear that its not probably recommended in leaving this empty and allowing everyone to associate a site to a Hub. Once you designate a small number of users, permissions wise what other requirements need to be in place? Do the users authorized to associate a hub site need also site collection admin rights against the stand alone SPO site and the Hub site itself? Thank you!
May 07 2019 12:48 PM
Solution
Yes you are correct if you want anyone to associate the site to a hub, leave it blank. But they will also need to be site collection admins of the site they are adding to even be able to get to the site info panel (see support.ms.com). So it is dual-layered; first they need to be a site collection of the site they are adding. Next they will either need to be a site coll admin of the hub site or be granted the right to join the site to the hub. This is done via the UI as you see or via powershell with the Grant-SPOHubSiteRights which needs a user or mail-enabled security group.
May 07 2019 04:31 PM
Great thank you so much! Just curious as we run the PowerShell operation to grant a user rights to associate a stand alone site to the Hub site, what permissions are associated with the user behind the scenes?
May 08 2019 07:44 AM
My understanding is that you are only granting the user or group the right to associate the site to the hub. That is a special right that exists on the hub site and is not related to normal site permissions.
May 07 2019 12:48 PM
Solution
Yes you are correct if you want anyone to associate the site to a hub, leave it blank. But they will also need to be site collection admins of the site they are adding to even be able to get to the site info panel (see support.ms.com). So it is dual-layered; first they need to be a site collection of the site they are adding. Next they will either need to be a site coll admin of the hub site or be granted the right to join the site to the hub. This is done via the UI as you see or via powershell with the Grant-SPOHubSiteRights which needs a user or mail-enabled security group.