I have a customer with many project sites. Each of these sites has permissions set. So typically all users have ccess to project site.
Idealy I would like to use a group based permission model.
My customer now want every now and then exclude a single user for a single project file so that they don't have permissions to a project site.
Do I now have to use a permission model tht isn't using a group based permission model? If I go down the route of adding users to a SharePoint group then adding new joiners to all project sites could be a painfull process.
I can only imagine the following solution:
By default all project sites inherit permissions with the whole organisation having access.
Maintaining a list of excluded users for specific project sites and then run regular job that updates the permissions affected project sites on a regular basis.
Did I miss any options?
