1. Home
  2. SharePoint Online – Permissions Management

SharePoint Online – Permissions Management

Permissions management ensures team members have access to the Sites and the files they need, and ensures former team members no longer have access to data they don’t. This page describes the process.

Site-wide Permissions

There are three default permissions groups that control access to a SharePoint Site:

  1. Visitors, who have read-only access,
  2. Members, who can create and edit files,
  3. and Owners, who have full control over the Site content and permissions.

Custom groups and permission levels can be created to fine tune access when those three default groups are not sufficient.

Add Member or Owner

Alternate Method

These same results can be achieved by modifying the Members or Owners groups instead using the Modify Group Membership instructions below.

  1. Click the gear () in the top-right corner and select Site permissions.
    SPO Gear menu with Site settings highlighted
  2. Click Add members and then Add members to group.
    SPO Add members to group button
  3. Click Add members.
    SPO Add Members button
  4. Start typing a name or email address into the box and then select their account as it appears in the drop-down below.
    Add Members Search field
  5. Click the down-caret () to the right of their currently-selected role and select the proper level of access.
    SPO Member Permission Level
  6. Repeat steps 4 and 5 for any number of team members. Click Save.

Add Visitor

Alternate Method

These same results can be achieved by modifying the Visitors group instead using the Modify Group Membership instructions below.

  1. Click the gear () in the top-right corner and select Site permissions.
    SPO Gear menu with Site settings highlighted
  2. Click Add members and then Share site only.
    SPO Add to Site only button
  3. Type an email address into the box and then select it from the search results that drop down.
    SPO Visitor Email search field
  4. Click the down caret () to the right of their currently-selected role and select Read. Repeat this step for any number of visitors.
    SPO Member Permissions with Read selected
  5. Enter a message that the new group of visitors will receive via email, and click Add.
    SPO New Visitor Message field and Add button

Create Custom Group

  1. Navigate to the following page, replacing MySite with the name of your SharePoint online site.
    https://uvmoffice.sharepoint.com/sites/MySite/_layouts/15/groups.aspx
  2. Click New or click the down arrow ()and select New Group.
    SPO New Group drop-down
  3. Enter a Name for the new group and a Description of its purpose.
    SPO New Group Name and About fields
  4. Review the rest of the group settings as you scroll down to the permission level section. Select the appropriate permission level for future members of this group, and click Create.
    SPO Group Permission Level check boxes and Create button

Modify Group Membership

  1. Click the gear () in the top-right corner and select Site permissions.
    SPO Gear menu with Site settings highlighted
  2. Click Advanced permissions settings towards the bottom of the Permissions sidebar that appears.
    SPO Advanced Permissions Settings link
  3. If you’ve previously created a group like in the instructions above, you’ll see it on the list of groups that loads now, along with the three default groups (unless previously deleted).  Select the group you’d like to modify.
    SPO Groups list example

    1. To add new users, click New or click the down arrow() to the right and then Add Users.
      SPO Group Add Users button
    2. To remove users, check the box () to the left of their name(s), click Actions, and select Remove Users from Group.
      SPO Group Remove Users button

Member of Multiple Groups

It is possible to be a member of more than one group. You should always check the other groups when removing Users, especially former employees.


Change Group Permission Level

  1. Click the gear () in the top-right corner and select Site permissions.
    SPO Gear menu with Site permissions highlighted
  2. Click Advanced permissions settings towards the bottom of the Permissions sidebar that appears.
    SPO Advanced Permissions Settings link
  3. Check the box () to the left of the group you’d like to modify and click Edit User Permissions.
    SPO Group Edit User Permissions button
  4. Uncheck any obsolete options, check the box to the left of the appropriate permission level for this group, and click OK.
    SPO Group Permission Level check boxes and OK button

Grant External Access

Sponsored Guest Account Requirement

Unlike SharePoint 2016, SharePoint Online no longer requires the creation of a sponsored guest account to grant access to external users.

Granting External Access works the same as adding any other User to your SharePoint Site.  See the Add Member or Owner, Add Visitor, or Grant Access to a Single File or Folder sections.

Single File or Folder Permissions

Permissions in SharePoint are inherited; by default, any user granted permissions to your site will have access to every file and folder on that site.

If you require more granular permission management options, this section will instruct on how to grant access to or restrict access for specific files or folders.

The first step to individually managing a given file or folder’s permissions is to stop inheriting permissions.

Disable Permission Inheritance

  1. Click the ellipsis () next to the file or folder for which you want to disable permission inheritance and select Manage Access.
    SPO Folder Manage Access button
  2. Click the ellipsis () in the top-right corner of the Manage Access window, and select Advanced settings.
    SPO Folder Access Advanced settings button
  3. Click Stop Inheriting Permissions.
    SPO Stop Inheriting Permissions button
  4. Click Home from the sidebar below to return to your SharePoint site’s homepage.
    SPO Site Home link

Enable Permission Inheritance

If you previously granted access to this file or folder while permission inheritance was disabled, this process will remove that access and revert to the default permission site settings. 

  1. Hover over and click the ellipsis () next to the file or folder for which you want to enable permission inheritance, and select Manage access.
    SPO Folder Manage Access button
  2. Click the ellipsis () in the top-right corner of the Manage Access window, and select Advanced settings.
    SPO Folder Access Advanced settings button
  3. You will now be brought to the permissions page for your chosen file or folder. Click Delete Unique Permissions and proceed through the prompt.
    SPO Delete Unique Permissions button
  4. Click Home from the sidebar below to return to your SharePoint site’s homepage.
    SPO Site Home link

Grant Access to a Single File or Folder

You must disable permission inheritance before granting a user access to a single file or folder. Otherwise, you will grant site-access in addition to folder or file access.

  1. Click hover over and click the Share icon () to the right of the folder to which you want to grant permissions.
    SPO Folder Share button
  2. Enter any number of email addresses into the Add a name field, selecting their accounts from the search results as they appear.
    SPO Share dialog Search field
  3. Expand the // drop-down menu to the right and choose the level of access those accounts need.
    SPO Share dialog Permissions Level drop-down
  4. Add an optional message to appear in the email to the new members, and click Send.
    SPO Share dialog Send button
  5. Repeat steps 1-5 for any accounts that need a different level of access.

Restrict Access to a Specific File or Folder

You must disable permission inheritance to enable the ability to restrict a user’s access to a file or folder.

  1. Hover over and click the ellipsis () next to the file or folder for which you want to disable permission inheritance, and select Manage access.
    SPO Folder Manage Access button
  2. Click the ellipsis () in the top-right corner of the Manage Access window, and select Advanced settings.
    SPO Manage Access Advanced Settings button
  3. Check the box(es) () to the left to any account(s) whose access to this file or folder should be removed, and click Remove User Permissions.
    SPO Folder Remove User Permissions button

Anonymous Access

See the dedicated Anonymous Access to Files and Folders article for more details.

Other

Accept Access Requests

Direct Link

The Access Requests page can be accessed directly using this link instead, replacing “MySite” with the name of your SharePoint Online Site.

https://uvmoffice.sharepoint.com/sites/MySite/Access%20Requests/pendingreq.aspx

  1. Click the gear () in the top-right corner, and select Site contents.
    SPO Site Content link
  2. Click Site Settings.SPO Site Settings button
  3. Click Access requests and invitations.
    APO Access Requests and Invitations link
  4. You will be taken to the Access Requests page. Verify you recognize the person requesting access, then click Approve.
    Approve button
  5. Select the appropriate permission level under the “Permission” section, then click Approve.
    Approve button

Permission Levels

Direct Link

The Permission Levels page can be accessed directly using this link instead, replacing “MySite” with the name of your SharePoint Online Site.

https://uvmoffice.sharepoint.com/sites/MySite/_layouts/15/role.aspx

  1. Click the gear () in the top-right corner and select Site permissions.
    SPO Gear menu with Site permissions highlighted
  2. Click Advanced permissions settings towards the bottom of the Permissions sidebar that appears.
    SPO Advanced Permissions Settings link
  3. Click Permissions Levels.
    Permissions Levels button
  4. From here you can view the Description of all Permission Levels for your Site, as well as Delete or Add custom Permissions Levels.
  5. To assign a permission level to a group of users, see https://www.uvm.edu/it/kb/?post_type=ht_kb&p=28934&preview=true#change-group-permission-level above.

Additional Info

See UVM’s complete list of SharePoint documentation here, or Microsoft’s SharePoint help & learning page here.

 

Updated on July 5, 2024
Not the solution you were looking for?
Don’t worry we’re here to help!
Submit a Help Ticket