Sharepoint Online access and permissions

If you wish to check to see if a particular user or group have access to a Library, Folder or File you can browse to the object you wish to check and then go to the permissions page for that object.

To check for access on a:

• Library - from the Cog choose Library settings and then choose 'Permissions for this document library'
• Folder or File - with the file or folder selected click on the ellipse (...) and choose 'Manage access' then 'Advanced settings'
  You can get to this by clicking on the ellipse (look in the top right corner of the 'manage access' window)

This will take you to the Permissions properties for the object. 

The banner at the top of the Permissions window will display if the object is inherting permissions from it's parent. If this is the case you can click on 'Manage Parent' and view the permissions from the parent object.

To check the permissions of a user or group click on 'Check permissions' and enter the User or Group name and then 'check now'

You can also do the same check at Site level to see what access a user has.

See instructions with images

Your site may contain libraries or content that you wish to restrict access to or apply unique permissions. To do this you firstly need to create a group to manage this access. It should be named in a useful manner that indicates the purpose of the group. 

<LibraryName>_<PermissionLevel> 

Another example might be a role-based group where Role may be ‘OfficeAdmin’ and the group may be used to grant access to a number of libraries or content.

<Role>_<PermissionLevel> 

1. To create a group, go to the Site settings - Site permissions.
2. Click on ‘Create group’.
3. Name the group and set the properties as required – the group owner can be an Active directory group containing more than one person – an email group (that appears in Outlook Global Address book) or a SharePoint group used in this site. It is a good idea to have more than one person responsible for managing the group membership.
4. Click on Create.

For step-by-step instructions (including screenshots) see How do I create a group?

1. Click on the cog to open the Settings.
2. Select Site contents.
3. From the site contents screen hover over the ellipse (three dots) for the library you want to apply the permissions to.
4. Click on Settings.
5. This will take you to the settings screen for this library. Choose ‘Permissions for this document library’.
6. This screen displays the permissions that are inherited from the Site. Click on ‘Stop inheriting permissions’ to break the inheritance.
7. Click OK on the confirmation.
8. At this point the permissions from the Site are still applied. There will be a message ‘This library has unique permissions’, but you have not made any changes yet.
9. To edit the access select on one or more of the groups. You can then remove the group altogether or edit the permission level of the selected group/s.
10. To grant permission to a group that isn’t listed you can click on grant permissions.
11. Enter the name of the group (you need to create this first).
12. Select the permission level.

For step by step instructions (including screenshots) see Applying Unique Permissions.

You can view the unique permissions on a file by following these steps:

1. Locate the file/folder in your SharePoint library.
2. Hover over the ellipse to get the 'show actions' menu.
3. Select Manage access.
4. Click on Advanced.
5. A banner will display "Note! This folder has unique permissions."
6. You will see a summary of the permissions given to the file/folder.

For step by step instructions (including screen shots) see How do I check if a file/folder in SharePoint has unique permissions?

You can remove the unique permissions on a file/folder by following these steps:

1. Locate the file/folder in your SharePoint library.
2. Hover over the ellipse to get the 'show actions' menu.
3. Select Manage access.
4. Click on Advanced.
5. A banner will display "Note! This folder has unique permissions."
6. You will see a summary of the permissions given to the file/folder.
7. Click on 'Delete unique permission's'.
8. Click OK on the warning message to reset the permissions to that of the parent folder or library.

For step by step instructions (including screen shots) see How do I remove unique permissions on a file/folder?

To add a user to an existing group:

1. Click on the cog in the top banner.
2. Select Site settings.
3. Select People and groups.
4. You should find a list of groups in the left hand-menu, if you can't see the group you require click on 'more'.
5. Select the group you wish to add the user to.
6. The current members of the group should be displayed. Click on 'New' ' Add users to this group' .
7. Enter the users name. You may wish to unselect the 'send an email invitation' particularly if you are adding several people at once.

For step-by-step instructions (including screenshots) see How do I add a user to a group?

You can control the ability of users to share files and folders or site content by changing the Access Request Settings.

To enable or disable sharing by team members with non-members   

1. Go to Settings
2. Site Permissions
3. Click on Access Request Settings from the top menu
   
4. Uncheck all boxes apart from 'Allow access requests" and an email address should be supplied to recieve the requests.
5. The settings shown above will send an email containing the request to the address specified. The site owner or admin can then add this user to an appropriate group or decline the request. Automatically accepting the request via the email will create unique permissions for this object and break the inheritance of permission from the parent objects.

Link to the page How can I restrict site sharing or sharing of folders and files?

You can share a link to a file or folder several different ways. The important point is to always select 'People with existing access' as this leaves the permissions on the folder or library unchanged.

Copy the link

To copy a link to paste into a meeting request or include in an email message or Teams chat

1. Select the folder or file to be shared
2. Click on copy link – it is both in the top menu and also available via Right mouse click
3. Make sure that ‘People with existing access can use the link’ is selected' 
   (click on this to change if it is not already selected)
4. Click ‘copy’
5. Paste this link into the meeting request or email message
   

Send link

To send a link directly via email

1. Select the folder or file
2. Click on the Sharing icon
   
3. Make sure that ‘People with existing access can use the link’ is selected' 
   (click on this to change if it is not already selected)
4. Enter the email address and a message if required
5. Click Send
   

Link to this page How do I share a folder or file?

SharePoint sites are set to restrict external access by default. If you wish to allow external access to your SharePoint site then submit a request to Helpdesk with the details of the site and the full email address and names of users who require access.

It may be recommended that a new site be created for the purpose of sharing with External users rather than allowing external access to the existing site. This approach maintains a higher level of security for both sites. 

Once external sharing has been enabled the user can be added to a group using their email address.

The external user is added in the same way as another user but you enter the entire email address. There will be a warning that this user is outside of your organisation.

You can choose to allow SharePoint to send an email invitation to the user but it is a good idea to send an email from your own account as the auto generated emails are sometimes caught by the spam or disregarded by the user.

The user needs to accept the invitation and the license conditions using the same email address used in the invitation.

Link to this content

External guest access will automatically expire after 30 days.

If you wish to have external access set for a longer period then a request can be made via the ITHelpdesk.

To extend or remove the external access click on the Manage link.

1. Click on the 3 elipses and choose the appropriate action.
   
2. You will be asked to confirm the action
   

Link to this page - When will guest access expire?