Sharepoint Online access and permissions

Your site may contain libraries or content that you wish to restrict access to or apply unique permissions. To do this you firstly need to create a group to manage this access. It should be named in a useful manner that indicates the purpose of the group. 

<LibraryName>_<PermissionLevel> 

Another example might be a role-based group where Role may be ‘OfficeAdmin’ and the group may be used to grant access to a number of libraries or content.

<Role>_<PermissionLevel> 

1. To create a group, go to the Site settings - Site permissions.
2. Click on ‘Create group’.
3. Name the group and set the properties as required – the group owner can be an Active directory group containing more than one person – an email group (that appears in Outlook Global Address book) or a SharePoint group used in this site. It is a good idea to have more than one person responsible for managing the group membership.
4. Click on Create.

For step-by-step instructions (including screenshots) see How do I create a group?

1. Click on the cog to open the Settings.
2. Select Site contents.
3. From the site contents screen hover over the ellipse (three dots) for the library you want to apply the permissions to.
4. Click on Settings.
5. This will take you to the settings screen for this library. Choose ‘Permissions for this document library’.
6. This screen displays the permissions that are inherited from the Site. Click on ‘Stop inheriting permissions’ to break the inheritance.
7. Click OK on the confirmation.
8. At this point the permissions from the Site are still applied. There will be a message ‘This library has unique permissions’, but you have not made any changes yet.
9. To edit the access select on one or more of the groups. You can then remove the group altogether or edit the permission level of the selected group/s.
10. To grant permission to a group that isn’t listed you can click on grant permissions.
11. Enter the name of the group (you need to create this first).
12. Select the permission level.

For step by step instructions (including screenshots) see Applying Unique Permissions.

You can view the unique permissions on a file by following these steps:

1. Locate the file/folder in your SharePoint library.
2. Hover over the ellipse to get the 'show actions' menu.
3. Select Manage access.
4. Click on Advanced.
5. A banner will display "Note! This folder has unique permissions."
6. You will see a summary of the permissions given to the file/folder.

For step by step instructions (including screen shots) see How do I check if a file/folder in SharePoint has unique permissions?

You can remove the unique permissions on a file/folder by following these steps:

1. Locate the file/folder in your SharePoint library.
2. Hover over the ellipse to get the 'show actions' menu.
3. Select Manage access.
4. Click on Advanced.
5. A banner will display "Note! This folder has unique permissions."
6. You will see a summary of the permissions given to the file/folder.
7. Click on 'Delete unique permission's'.
8. Click OK on the warning message to reset the permissions to that of the parent folder or library.

For step by step instructions (including screen shots) see How do I remove unique permissions on a file/folder?

To add a user to an existing group:

1. Click on the cog in the top banner.
2. Select Site settings.
3. Select People and groups.
4. You should find a list of groups in the left hand-menu, if you can't see the group you require click on 'more'.
5. Select the group you wish to add the user to.
6. The current members of the group should be displayed. Click on 'New' ' Add users to this group' .
7. Enter the users name. You may wish to unselect the 'send an email invitation' particularly if you are adding several people at once.

For step-by-step instructions (including screenshots) see How do I add a user to a group?

You can control the ability of users to share files and folders or site content by changing the Access Request Settings.

To enable or disable sharing by team members with non-members   

1. Go to Settings
2. Site Permissions
3. Click on Access Request Settings from the top menu
   
4. Uncheck all boxes apart from 'Allow access requests" and an email address should be supplied to recieve the requests.
5. The settings shown above will send an email containing the request to the address specified. The site owner or admin can then add this user to an appropriate group or decline the request. Automatically accepting the request via the email will create unique permissions for this object and break the inheritance of permission from the parent objects.

Link to the page How can I restrict site sharing or sharing of folders and files?

You can share a link to a file or folder several different ways. The important point is to always select 'People with existing access' as this leaves the permissions on the folder or library unchanged.

Copy the link

To copy a link to paste into a meeting request or include in an email message or Teams chat

1. Select the folder or file to be shared
2. Click on copy link – it is both in the top menu and also available via Right mouse click
3. Make sure that ‘People with existing access can use the link’ is selected' 
   (click on this to change if it is not already selected)
4. Click ‘copy’
5. Paste this link into the meeting request or email message
   

Send link

To send a link directly via email

1. Select the folder or file
2. Click on the Sharing icon
   
3. Make sure that ‘People with existing access can use the link’ is selected' 
   (click on this to change if it is not already selected)
4. Enter the email address and a message if required
5. Click Send
   

Link to this page How do I share a folder or file?

External guest access will automatically expire after 30 days.

If you wish to have external access set for a longer period then a request can be made via the ITHelpdesk.

Site owners will see a warning message warning similar to this:

To extend or remove the external access click on the Manage link.

1. Click on the 3 elipses and choose the appropriate action.
   
2. You will be asked to confirm the action
   

Link to this page - When will guest access expire?