SOLVED

Weird permissions

%3CLINGO-SUB%20id%3D%22lingo-sub-1567203%22%20slang%3D%22en-US%22%3EWeird%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1567203%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20each%20department%20in%20my%20company%20has%20a%20PUBLIC%20site%20and%20a%20PRIVATE%20site.%20This%20is%20to%20separate%20between%20items%20that%20are%20department%20specific%2C%20and%20any%20content%20that%20they%20share%20with%20others%20in%20the%20company.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20each%20PRIVATE%20site%2C%20only%20those%20department%20members%20can%20see%20that%20content.%20Each%20private%20site%20under%20THAT%20has%20%22x%22%20number%20of%20subsites%20to%20divide%20into%20smaller%20teams.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20my%20question%20is%3A%20say%20i'm%20NOT%20a%20member%20of%20department%20A%20-%20I%20have%20no%20access%2C%20But%20someone%20on%20that%20team%20gives%20me%20access%20to%20the%20SUBSITE%20of%20that%20private%20site%2C%20how%20does%20that%20work%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEdit%3A%20The%20architecture%20of%20the%20intranet%20is%3A%20Landing%20page%20%26gt%3B%20Department%20(A%2CB%2CC)%20PUBLIC%20%26gt%3B%20Department%20(A%2CB%2CC)%20PRIVATE%20%26gt%3B%20subsite.%20So%20unless%20you%20have%20the%20direct%20URL%20to%20the%20subsite%2C%20this%20is%20the%20steps%20you%20need%20to%20follow%20to%20get%20to%20the%20subsite.%20But%20again%20if%20you%20don't%20have%20access%20to%20that%20private%20departmental%20site%2C%20then%20how%20would%20they%20get%20to%20the%20subsite%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1567203%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1569283%22%20slang%3D%22en-US%22%3ERe%3A%20Weird%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1569283%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F735351%22%20target%3D%22_blank%22%3E%40Yung_man%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20about%20offering%20this%20nesting%20of%20Sites%20within%20the%20Top%20Link%20bar%20on%20the%20root%20site%20collection%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Micca0815_0-1596662134609.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F210517i89B210F2A2399E5A%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Micca0815_0-1596662134609.png%22%20alt%3D%22Micca0815_0-1596662134609.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1580985%22%20slang%3D%22en-US%22%3ERe%3A%20Weird%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1580985%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F258656%22%20target%3D%22_blank%22%3E%40Micca0815%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20reply.%20I%20was%20thinking%20about%20having%20that%20subsite%20link%20visible%20on%20the%20homepage%20as%20well%2C%20but%20I%20was%20also%20thinking%20that%20it%20is%20an%20edge%20case%20where%20only%20I%20would%20have%20access%20but%20no%20one%20else%20does%2C%20so%20for%20everyone%2C%20that%20link%20just%20requests%20access%20for%20most%20people%20while%20it%20works%20for%20just%20me.%20And%20if%20there%20are%20other%20cases%20out%20there%20then%20it%20just%20ends%20up%20that%20every%20subsite%20link%20would%20end%20up%20on%20the%20homepage.%20I%20will%20however%20mark%20this%20as%20the%20best%20response%20anywho%20as%20it%20seems%20there's%20no%20way%20around%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1581366%22%20slang%3D%22en-US%22%3ERe%3A%20Weird%20permissions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1581366%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F735351%22%20target%3D%22_blank%22%3E%40Yung_man%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20approach%20could%20be%20having%20the%20root%20sites%20default%20visitor%20within%20the%20sub%20sites%20and%20define%20unique%20permission%20where%20ever%20required.%20For%20the%20sub%20site%20the%20groups%20are%20set%20up%20to%20accept%20join%20%2F%20leave%20requests%2C%3CBR%20%2F%3E%3CBR%20%2F%3EIn%20case%20your%20customers%20lack%20permission%20on%20the%20sub%20web%20in%20general%2C%20you%20could%20place%20a%20'join%20this%20group'%20link%20on%20this%20page.%20The%20group%20membership%20would%20still%20require%20approval%2C%20but%20you%20might%20want%20to%20delegate%20it%20by%20using%20a%20dedicated%20group%20for%20the%20subsites%20default%20member%20group%20ownership%20and%20thus%20letting%20others%20rather%20than%20you%20accepting%20those%20membership%20request.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Micca0815_0-1597154544451.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F211773i4A2D9AA3BD11500E%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Micca0815_0-1597154544451.png%22%20alt%3D%22Micca0815_0-1597154544451.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20adding%20some%20richt%20text%20content%20and%20a%20hyperlink%20smh%20like%3A%3CBR%20%2F%3E%3CFONT%20size%3D%222%22%3Ehttps()TENANT.sharepoint.com%2Fsites%2F12345%2FSubSiteLvl1%2F_layouts%2F15%2Freqgroup.aspx%3FGroup%3DDEMO%203.0%20Visitors%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

So each department in my company has a PUBLIC site and a PRIVATE site. This is to separate between items that are department specific, and any content that they share with others in the company.

 

In each PRIVATE site, only those department members can see that content. Each private site under THAT has "x" number of subsites to divide into smaller teams.

 

So my question is: say i'm NOT a member of department A - I have no access, But someone on that team gives me access to the SUBSITE of that private site, how does that work? 

 

Edit: The architecture of the intranet is: Landing page > Department (A,B,C) PUBLIC > Department (A,B,C) PRIVATE > subsite. So unless you have the direct URL to the subsite, this is the steps you need to follow to get to the subsite. But again if you don't have access to that private departmental site, then how would they get to the subsite?

3 Replies
best response confirmed by Yung_man (Occasional Contributor)
Solution

@Yung_man 

How about offering this nesting of Sites within the Top Link bar on the root site collection?

Micca0815_0-1596662134609.png

 

 

@Micca0815 

 

Thanks for your reply. I was thinking about having that subsite link visible on the homepage as well, but I was also thinking that it is an edge case where only I would have access but no one else does, so for everyone, that link just requests access for most people while it works for just me. And if there are other cases out there then it just ends up that every subsite link would end up on the homepage. I will however mark this as the best response anywho as it seems there's no way around it.

@Yung_man 

 

Another approach could be having the root sites default visitor within the sub sites and define unique permission where ever required. For the sub site the groups are set up to accept join / leave requests,

In case your customers lack permission on the sub web in general, you could place a 'join this group' link on this page. The group membership would still require approval, but you might want to delegate it by using a dedicated group for the subsites default member group ownership and thus letting others rather than you accepting those membership request.

Micca0815_0-1597154544451.png

 

So adding some richt text content and a hyperlink smh like:
https()TENANT.sharepoint.com/sites/12345/SubSiteLvl1/_layouts/15/reqgroup.aspx?Group=DEMO 3.0 Visitors