SOLVED

Manage default "Permission Levels" by tenant or by bub

%3CLINGO-SUB%20id%3D%22lingo-sub-1682671%22%20slang%3D%22en-US%22%3EManage%20default%20%22Permission%20Levels%22%20by%20tenant%20or%20by%20bub%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1682671%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20I%20manage%20the%20default%20%22Permission%20Levels%22%20settings%20either%20by%20tenant%20or%20by%20a%20hub%20level%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20goal%20is%20to%20adjust%20the%20default%20levels%20for%20edit%20(members)%20and%20read%20(visitors)%2C%20so%20that%20I%20don't%20have%20to%20keep%20editing%20these%20permission%20levels%20for%20every%20new%20site%20I%20create%20within%20the%20tenant%2Fhub.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22image.png%22%20style%3D%22width%3A%20320px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F219485iC5079D14D9B7D1C3%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22image.png%22%20alt%3D%22image.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1682671%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1687243%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20default%20%22Permission%20Levels%22%20by%20tenant%20or%20by%20bub%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1687243%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F115731%22%20target%3D%22_blank%22%3E%40Tormod%20Solem%20Slupphaug%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAre%20you%20trying%20to%20add%20users%2Fgroups%20by%20default%20(Group1%20is%20always%20in%20the%20Members%20group)%20or%20adjust%20the%20permission%20levels%20of%20the%20default%20security%20groups%20(Members%20group%20can%20only%20Contribute%20vs%20Edit)%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENorm%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

 

Can I manage the default "Permission Levels" settings either by tenant or by a hub level?

 

My goal is to adjust the default levels for edit (members) and read (visitors), so that I don't have to keep editing these permission levels for every new site I create within the tenant/hub.

 

image.png

6 Replies
Highlighted

Hi @Tormod Solem Slupphaug,

 

Are you trying to add users/groups by default (Group1 is always in the Members group) or adjust the permission levels of the default security groups (Members group can only Contribute vs Edit)?

 

Norm

Highlighted

@stormin_30 Neither. Let me rephrase:

 

The default permission levels "Read", "Edit", "Contribute" etc., each have their specific settings (see example screenshot below). If you change the settings for permission level "Read", those changes will ONLY apply for the particular site in question.

 

In my case, I'm creating a lot of different sites for a hub, and each of these sites should have slightly adjusted settings for "Read" and "Edit". Ideally I'd like to edit/manage the "Read" permission level for all of my sites in one go. I want these permission levels to stay consistent for my different Sharepoint sites, and for any new sites I create.

 

image.png

Highlighted

Hi @Tormod Solem Slupphaug,

 

You can centrally manage visitor permissions within the Hub. See Hub site permissions

for more information.

 

The edit permissions will be hard to manage and I think you will need to consider a post provisioning step to modify or create the new permission levels. 

 

I hope this helps.

 

Norm

Highlighted

I think you might have misunderstood my request. I'm aware that I can grant users access to the whole hub by using hub site permissions, but that's not what I'm trying to do. Each of my hub sites have different sets of users. The only thing I want to sync inbetween the sites are the Permission level settings.

Highlighted
Best Response confirmed by Tormod Solem Slupphaug (Occasional Contributor)
Solution

Hi @Tormod Solem Slupphaug,

 

I understand what you are trying to do. I think it will come down to a post provisioning step, like running a PnP PowerShell cmdlet to set the custom permission levels.

 

Norm

Highlighted
Not really the answer I was hoping for, but I guess there's no out-of-the-box easy way to solve this. Thanks for your help @stormin_30.