none
Sharepoint 2016 problems with access rights RRS feed

  • Question

  • ood afternoon. there is SharePoint 2016.
    Help deal with access rights
    Example.
    There is a hierarchy of sites:
    https://portal.domen.com
    https://portal.domen.com/IT
    https://portal.domen.com/HR
    https://portal.domen.com/Sales
    https://portal.domen.com/industrial

    The site https://portal.domen.com/Sales has problems with the function "Requests for access and invitations"
    There was a long history with this site. There was a very tough porridge with permissions; AD, SharePoint groups and individual users were involved.
    Now everything is cleaned and rights are granted for SharePoint groups.
    Groups which are inherited on the section https://portal.domen.com/Sales: "Sales - Owners", "Sales - Members", "Sales - Reading".

    Created access groups:
    "Sales - Owners" granted rights = Full access
    "Sales - Members" rights granted = Members
    "Sales - Reading" rights granted = Reading
    "Sales - List25 - Reading" rights granted = Reading
    "Sales - List25 - Members" rights granted = Members
    "Sales - List26 - Reading" was granted rights = Reading
    "Sales - List26 - Members" rights granted = Members

    In the https://portal.domen.com/Sales there are lists
    "List1" Permissions inheritance enabled
    "List2" Permissions inheritance enabled
    -.-.-.-. Permissions inheritance enabled
    "List24" disabled permission inheritance - rights granted = "Sales - List25 - Reading" and "Sales - List25 - Members"
    "List25" disabled Permissions inheritance - rights granted = "Sales - List26 - Reading" and "Sales - List26 - Members"

    Problem \ Question 1: User "User 1" which is included in the "Sales - Owners" group of the site https://portal.domen.com/Sales cannot, by default, grant access to the "Sales - Reading" group,
    When a message comes to the mail with a request, the user Petrov requests access to https://portal.domen.com/Sales. He follows the link and sees the inscription denied access.
    If you go to the main page https://portal.domen.com and go to - gear \ site settings \ Site collection administrators and add "User 1" user there,
    then he will be able to approve access, but he will have access to all sections
    https://portal.domen.com/IT
    https://portal.domen.com/HR
    https://portal.domen.com/Sales
    https://portal.domen.com/industrial
    How to give rights so that the user could only see https://portal.domen.com/Sales and approve the default group "Sales - Reading"?

    Problem \ Question 2: I don’t seem to be able to track it, why can some users be added to the groups you created and not those who don’t ... and I can’t find the dependency ...


    • Edited by Dedman2k3 Thursday, January 31, 2019 7:10 AM
    Thursday, January 31, 2019 7:07 AM

All replies