SOLVED

Understanding Limited Access

%3CLINGO-SUB%20id%3D%22lingo-sub-228964%22%20slang%3D%22en-US%22%3EUnderstanding%20Limited%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-228964%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20going%20through%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Funderstanding-permission-levels-in-sharepoint-87ecbb0e-6550-491a-8826-c075e4859848%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Ethe%20permissions%20article%3C%2FA%3E.%20It%20explains%20Limited%20Access%20as%3C%2FP%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3E%3CP%20class%3D%22%22%3ELimited%20Access%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CP%20class%3D%22%22%3EEnables%20a%20user%20or%20group%20to%20browse%20to%20a%20site%20page%20or%20library%20to%20access%20a%20specific%20content%20item%20when%20they%20do%20not%20have%20permissions%20to%20open%20or%20edit%20any%20other%20items%20in%20the%20site%20or%20library.%20This%20level%20is%20automatically%20assigned%20by%20SharePoint%20when%20you%20provide%20access%20to%20one%20specific%20item.%20You%20cannot%20assign%20Limited%20Access%20permissions%20directly%20to%20a%20user%20or%20group%20yourself.%20Instead%2C%20when%20you%20assign%20edit%20or%20open%20permissions%20to%20the%20single%20item%2C%20SharePoint%20automatically%20assigns%20Limited%20Access%20to%20other%20required%20locations%2C%20such%20as%20the%20site%20or%20library%20in%20which%20the%20single%20item%20is%20located.%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20per%20my%20experience%2C%20It%20technically%20doesn't%20grant%20any%20permissions.%20Even%20if%20a%20user%20or%20group%20is%20specified%20limited%2C%20the%20user%20won't%20have%20access%20to%20anything.%20For%20example%2C%26nbsp%3Buser%20won't%20be%20able%20to%20access%20item%20or%20library%20(for%20which%20user%20is%20granted%20access)%20using%20the%20site%20home%20page%20or%20regular%20site%20navigation.%26nbsp%3B%3C%2FP%3E%3CP%3ESince%2C%20limited%20access%20show%20up%20at%20site%20level.%20What%26nbsp%3Bresources%20does%20it%20make%20available%20for%20the%20user%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-228964%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-234750%22%20slang%3D%22en-US%22%3ERe%3A%20Understanding%20Limited%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-234750%22%20slang%3D%22en-US%22%3EMakes%20sense.%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-234384%22%20slang%3D%22en-US%22%3ERe%3A%20Understanding%20Limited%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-234384%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F45180%22%20target%3D%22_blank%22%3E%40Bhavpreet%20Bains%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20the%20article%20describes%2C%20%22Limited%20Access%22%20permission%20doesn't%20actually%20give%20the%20user%20the%20ability%20to%20see%20those%20items%20but%20is%20instead%20used%20under%20the%20covers%20to%20make%20things%20work%20(rendering%20the%20user%20experience%2C%20etc.)%20Hope%20that%20helps!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EStephen%20Rice%3C%2FP%3E%0A%3CP%3EOneDrive%20Program%20Manager%20II%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-229171%22%20slang%3D%22en-US%22%3ERe%3A%20Understanding%20Limited%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-229171%22%20slang%3D%22en-US%22%3E%3CP%3Egood%20question.%20I%20guess%20it%20makes%20it%20possible%20to%20go%20to%20a%20library%20or%20file%20only%20without%20seeing%20the%20site%20itself%20but%20could%20be%20wrong%20here%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1948505%22%20slang%3D%22en-US%22%3ERe%3A%20Understanding%20Limited%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1948505%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20finding%20that%20we%20have%20a%20library%20with%20a%20OneNote%20notebook%20in%20it.%20Custom%20permissions%20limit%20the%20library%20to%20just%20the%20Site%20Owners%20(SP%20Group)%2C%20then%20at%20the%20Notebook%20level%2C%20custom%20permissions%20to%20limit%20to%20Site%20Owners%20(SP%20Group)%2C%20Site%20Members%20(SP%20Group).%20But%20we're%20hearing%20that%20a%20few%20users%20who%20do%20not%20have%20access%20are%20able%20to%20see%20the%20library%20AND%20the%20Notebooks%20listed.%20If%20they%20click%20on%20it%2C%20then%20they%20are%20then%20blocked%20access.%20Our%20wonder%20is%20that%20they%20shouldn't%20see%20the%20library%20at%20all.%20Now%20we%20have%20discovered%20that%20these%20people%20do%20appear%20in%20the%20Limited%20Access%20group%20because%20item%20level%20files%20have%20been%20shared%20with%20them.%20Is%20this%20why%20they%20can%20see%2C%20but%20not%20access%20the%20Notebooks%3F%20What%20happens%20if%20we%20remove%20them%20from%20the%20Limited%20Access%20group%2C%20does%20that%20break%20their%20item%20level%20access%3F%3C%2FP%3E%3CDIV%20class%3D%22lia-spoiler-container%22%3E%3CA%20class%3D%22lia-spoiler-link%22%20href%3D%22%23%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%20target%3D%22_blank%22%3ESpoiler%3C%2FA%3E%3CNOSCRIPT%3E(Highlight%20to%20read)%3C%2FNOSCRIPT%3E%3CDIV%20class%3D%22lia-spoiler-border%22%3E%3CDIV%20class%3D%22lia-spoiler-content%22%3E%26nbsp%3B%3C%2FDIV%3E%3CNOSCRIPT%3E%3CDIV%20class%3D%22lia-spoiler-noscript-container%22%3E%3CDIV%20class%3D%22lia-spoiler-noscript-content%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FNOSCRIPT%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F45180%22%20target%3D%22_blank%22%3E%40Bhavpreet%20Bains%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Hello,

 

I was going through the permissions article. It explains Limited Access as

Limited Access

Enables a user or group to browse to a site page or library to access a specific content item when they do not have permissions to open or edit any other items in the site or library. This level is automatically assigned by SharePoint when you provide access to one specific item. You cannot assign Limited Access permissions directly to a user or group yourself. Instead, when you assign edit or open permissions to the single item, SharePoint automatically assigns Limited Access to other required locations, such as the site or library in which the single item is located.

 

As per my experience, It technically doesn't grant any permissions. Even if a user or group is specified limited, the user won't have access to anything. For example, user won't be able to access item or library (for which user is granted access) using the site home page or regular site navigation. 

Since, limited access show up at site level. What resources does it make available for the user?

 

Thank you.

4 Replies

good question. I guess it makes it possible to go to a library or file only without seeing the site itself but could be wrong here

Best Response confirmed by Bhavpreet Bains (Frequent Contributor)
Solution

Hi @Bhavpreet Bains,

 

As the article describes, "Limited Access" permission doesn't actually give the user the ability to see those items but is instead used under the covers to make things work (rendering the user experience, etc.) Hope that helps!

 

Stephen Rice

OneDrive Program Manager II

Makes sense. :)

We are finding that we have a library with a OneNote notebook in it. Custom permissions limit the library to just the Site Owners (SP Group), then at the Notebook level, custom permissions to limit to Site Owners (SP Group), Site Members (SP Group). But we're hearing that a few users who do not have access are able to see the library AND the Notebooks listed. If they click on it, then they are then blocked access. Our wonder is that they shouldn't see the library at all. Now we have discovered that these people do appear in the Limited Access group because item level files have been shared with them. Is this why they can see, but not access the Notebooks? What happens if we remove them from the Limited Access group, does that break their item level access?

Spoiler
 

@Bhavpreet Bains