SharePoint Access Control

Each SharePoint site now has owners from the associated department that can manage access permissions to their documents. Access can be managed down to the file level and can be broken down into three levels:

• Unrestricted Access: Members of the department’s Microsoft Team group may view the content.
• Shared Access: Allow people and groups outside of the department to view unrestricted content.
• Restricted Access: Only select people/groups may view the content.

Support Policy

MET IT is responsible for the following:

• Instructor-Led training for employees
• Consultation on best practices
• Assistance with permission changes when owner(s) are unavailable

Resources

Frequently Asked Questions

Can permission changes be made only by owners?

Access permission changes can be started by anyone with existing access but these changes will require approval by the owner. Any changes will produce a notification email for the owner to review before the change is applied.

What are the Owner, Member and Visitor groups for?

Access to the SharePoint storage is managed by these three groups by default. Each group has the following access:

• Member Group: Includes all Microsoft Teams members and grants Edit access to the SharePoint storage.
• Owner Group: Includes all Microsoft Teams owners and grants Full Control access to the SharePoint storage.
• Visitor Group: Unused group that would grant Limited Access (Read) access to the SharePoint storage.

When creating a restricted access folder or file, make sure that you NEVER delete the Owner Group as it must be present to approve future changes.