Forum Discussion
User has access to CRITICAL folder not shared with her
sumo83 Follow below steps to check the detailed permissions of folder in the document library:
- Go to document library
- Select the folder --> select ellipsis (...) and choose Manage access option
- From Manage access popup, select (...)and then Advanced settings
- From advanced permissions page, you can check user permissions as well as remove group or individual user permissions as per your requirements:
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily. It also closes the item. If the post was useful in other ways, please consider giving it Like.
I have already done it -> see the "When I check via "Check Permission" I see the below" part in my post. Was not very helpful.....
- The user is part of "Team Site Members" though - Does this group have direct permissions on the folder? If yes, user will be able to access the folder as user is part of the group.
- When I check via "Check Permission" I see the below - From the screenshot, I can see that user has Contribute permissions on the folder (maybe via any of the "service groups" you mentioned). So, if that group has contribute permissions on the folder, user will be able to access the folder as user is part of the group.
In general, user will be able to access the folder when user is member of the group and the group has access to the folder (even when no "individual user" access assigned).
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily. It also closes the item. If the post was useful in other ways, please consider giving it Like.
Also, when you check the permissions using Check Permissions option, it shows you the group name from which the access was given to user:
If it is a SharePoint group, you can find that group from "People and Groups" page, generally accessible via link in this format:
https://contoso.sharepoint.com/sites/MySite/_layouts/15/groups.aspx
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily. It also closes the item. If the post was useful in other ways, please consider giving it Like.
- good info.. thank you... However, as you can see in my picture from "When I check via ""Check Permission" I see the below", I can't see any info about how the access was given... unlike in your example, there is no info in mine 😕
Team Member do not have direct access to the folder at all... And yes, the user is part of one ServiceGroup - the one you noticed with Contribute permissions... Now, how do I translate that strange "string" to a group name or any useful info? Or how do I can identify how it was shared?
I have removed the user from Team Member for now.. so will see if that will help - I do not really understand that “Limited access”… When I click on “Show users”, does it show me users that have access to that particular folder? Because one of those SharePoint group with strange long string contains all users… even users we share some files externally etc… What is that? Doesnt make sense
Can I simply delete those SharePoint Group when checking for a particular folder? If I want only users in the list to have access to it?- ok.. so I have removed the "limited access" ones, removed the user from "Member" group and the user doesnt see the folder anymore...
I am surprised that the "Permision check" feature was really useless to get some info about how and why a user can access a specific folder... Not sure how the user got access to entire folder if there was only a "limited access" for her.. 😕
