SharePoint 2016 Site Owners

SharePoint 2016

Lesson 2 – Assigning Permissions and Access Rights

PERMISSION LEVEL

DESCRIPTION

PERMISSIONS INCLUDED BY DEFAULT

Manage Hierarchy

Create sites; edit pages, list items, and documents, and change site permissions. For Publishing sites only.

Design permissions minus the Approve Items, Apply Themes and Borders, and Apply Style Sheets permissions, plus:

Manage permissions

• • • • • •

View Web Analytics Data

Create Subsites Manage Alerts

Enumerate Permissions

Manage Web Site

Full Control

Enables users to have full control of the website.

All permissions

NOTE

Additional information on permissions levels and user, site, and personal permissions can be found on Microsoft Technet at: http://technet.microsoft.com/en- us/library/cc721640.aspx .

P ERMISSION L EVEL D EFINITION AND M ANAGEMENT Permission levels are defined initially at the Site Collection level and may be managed and customized by any user or group with Manage Permissions permission. P ERMISSIONS I NHERITANCE IN S HARE P OINT By default securable objects inherit their permissions from their parent object. A document inherits its permissions from the library it is in, that library inherits its permissions from the site, and that site inherits its permissions from the top-level site in the site collection. Administrators can break permissions inheritance in order to set unique permissions, sometimes called fine grained permissions, on securable objects. You might want to do this for a list or library if that list or library will contain particularly sensitive information, the only select users of the site should have access to such as social security numbers, payroll information, bids and so forth. For ease of administration and consistency of access, you should try to use permissions inheritance whenever possible and should organize your sites so that permissions inheritance makes sense. B REAKING P ERMISSIONS I NHERITANCE When inheritance is broken, the inherited permissions are copied and become explicit permissions on the object. Administrators can then modify those permission and add new users and groups to the access control list for the object. If administrators decide to turn inheritance

OFFICEPRO, Inc.

Page 35