Site permissions control

%3CLINGO-SUB%20id%3D%22lingo-sub-1954588%22%20slang%3D%22en-US%22%3ESite%20permissions%20control%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1954588%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20confused%20about%20the%20difference%20between%20the%20site%20permissions%20sidebar%26nbsp%3B%3C%2FP%3E%3CP%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eand%20the%20advanced%20permissions%20settings%20page%20at%26nbsp%3B%3C%2FP%3E%3CA%20href%3D%22https%3A%2F%2Ftenant.sharepoint.com%2Fsites%2Fsitename%2F_layouts%2F15%2Fuser.aspx%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ftenant.sharepoint.com%2Fsites%2Fsitename%2F_layouts%2F15%2Fuser.aspx%3C%2FA%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20seems%20that%20changes%20made%20on%20the%20advanced%20permissions%20page%20don't%20necessarily%20show%20up%20in%20the%20site%20permissions%20sidebar.%20If%20you%20use%20the%20sidebar%20to%20put%20people%20into%20a%20site%2C%20are%20you%20not%20supposed%20to%20use%20the%20advanced%20settings%3F%20I%20made%20a%20custom%20group%20and%20moved%20a%20user%20into%20it.%20Now%20that%20user%20does%20not%20show%20up%20in%20the%20sidebar%20in%20any%20of%20the%20three%20groups%3A%20owner%2C%20member%2C%20or%20visitor.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EAnother%20issue%20I've%20noticed%20is%20that%20if%20you%20use%20the%20advanced%20settings%20to%20remove%20a%20user%20from%20a%20group--say%2C%20visitors--he%20may%20still%20appear%20in%20the%20Site%20visitors%20in%20the%20permissions%20sidebar.%20Is%20that%20intentional%3F%20Or%20is%20it%20one%20of%20those%20changes%20that%20just%20takes%20time%20to%20propagate%20everywhere%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3EAnne%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1954588%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESites%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1954727%22%20slang%3D%22en-US%22%3ERe%3A%20Site%20permissions%20control%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1954727%22%20slang%3D%22en-US%22%3EHello%20annetoal%2C%3CBR%20%2F%3E%3CBR%20%2F%3EBased%20on%20my%20expierience%2C%20the%20new%20UI%20regarding%20permissions%20is%20a%20bit%20more%20simplistic%20due%20to%20the%20fact%20that%20MS%20is%20trying%20to%20force%20Organizations%20to%20adopt%20the%20newly%20O365%20office%20group%20connected%20sites%2C%20in%20which%20the%20managment%20of%20the%20users%20takes%20place%20in%20the%20Azure%20AD%20environment.%20That%20is%20why%20most%20of%20the%20functionality%20that%20one%20could%20see%20in%20a%20SP13%20deployment%20is%20simplified%20in%20the%20online%20environment.%3CBR%20%2F%3E%3CBR%20%2F%3EThis%20also%20has%20to%20do%20with%20the%20transition%20of%20classic%20expierience%20to%20modern%20expierience.%20The%20UI%20has%20changed%20and%20both%20of%20the%20approaches%20might%20be%20incompatible.%3CBR%20%2F%3E%3CBR%20%2F%3EAlthough%2C%20in%20order%20to%20answer%20your%20questions%20we%20would%20need%20a%20bit%20more%20info.%20Is%20the%20site%20o365%20connected%3F%20was%20it%20in%20classic%20experience%20and%20was%20later%20on%20connected%20to%20an%20o365%20group%3F%20Were%20the%20changes%20that%20you%20made%20in%20sharepoint%20reflected%20in%20the%20AAD%20environment%2C%20if%20the%20site%20was%20o365%20connected%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1954743%22%20slang%3D%22en-US%22%3ERe%3A%20Site%20permissions%20control%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1954743%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F820540%22%20target%3D%22_blank%22%3E%40jimas_1966%3C%2FA%3E%26nbsp%3BThank%20you%20for%20responding%20so%20quickly.%20The%20site%20is%20connected%20to%20O365.%20It%20was%20created%20as%20a%20Modern%20site--it%20was%20never%20a%20Classic%20site.%20I%20don't%20believe%20the%20changes%20I%20made%20in%20user%20permissions%20were%20reflected%20in%20the%20Azure%20Active%20Directory%20environment.%20The%20site%20was%20created%20from%20the%20New%20command%20on%20the%20SharePoint%20Home.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EAnne%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

I am confused about the difference between the site permissions sidebar 

annetoal_0-1607035234766.png

 

and the advanced permissions settings page at 

https://tenant.sharepoint.com/sites/sitename/_layouts/15/user.aspx

 

It seems that changes made on the advanced permissions page don't necessarily show up in the site permissions sidebar. If you use the sidebar to put people into a site, are you not supposed to use the advanced settings? I made a custom group and moved a user into it. Now that user does not show up in the sidebar in any of the three groups: owner, member, or visitor. 

Another issue I've noticed is that if you use the advanced settings to remove a user from a group--say, visitors--he may still appear in the Site visitors in the permissions sidebar. Is that intentional? Or is it one of those changes that just takes time to propagate everywhere?

 

Thanks,

Anne

2 Replies
Hello annetoal,

Based on my expierience, the new UI regarding permissions is a bit more simplistic due to the fact that MS is trying to force Organizations to adopt the newly O365 office group connected sites, in which the managment of the users takes place in the Azure AD environment. That is why most of the functionality that one could see in a SP13 deployment is simplified in the online environment.

This also has to do with the transition of classic expierience to modern expierience. The UI has changed and both of the approaches might be incompatible.

Although, in order to answer your questions we would need a bit more info. Is the site o365 connected? was it in classic experience and was later on connected to an o365 group? Were the changes that you made in sharepoint reflected in the AAD environment, if the site was o365 connected?

@jimas_1966 Thank you for responding so quickly. The site is connected to O365. It was created as a Modern site--it was never a Classic site. I don't believe the changes I made in user permissions were reflected in the Azure Active Directory environment. The site was created from the New command on the SharePoint Home. 

 

Thanks

Anne