Sharepoint custom permission.

Question

Hi There

I have a specific requirement for SharePoint site where I need to upload all my files and people should be able to perform all file related operations in all situations either they are members or owner or a custom permission group.

But for custom group I need to prevent from creating page, post or editing or making sitewide changes. like site visiters. and these custom group permission users shouldn't be able to share the site or add users on the site.

I created a copy or edit permission and removed some setting it work like site visitor, but they don't can't perform the file operation.

Looking forward to finding a solution for this situation.

Thanks in advance.

Answer 1

Hi @Abhishek Shrivastava ,

“Site pages” are essentially a ‘document library’. So it can't prevent users from creating it.

As a workaround, you can Stop inhering the group's “File Operations” permission on the “Site pages” library and grant them “Read” permission so that users cannot create pages.

Problems with document library went in classic mode, modify “File Operations” permissions. Under Site permissions, check “Use Remote Interfaces  -  Use SOAP, Web DAV, the Client Object Model or SharePoint Designer interfaces to access the Web site. (Deprecated)”->Submit

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @Abhishek Shrivastava ,

Thank you for posting in this community.

To achieve your requirement, you can create a custom permission level in SharePoint with the necessary restrictions. Here are the steps to create a custom permission level:

1. Go to the SharePoint site and click on the gear icon, then click on Site Settings.
2. Click on Site permissions->Advanced permissions settings.
3. Click on Permission Levels from the ribbon.
4. Click on Add a Permission Level.
5. Give a name to the permission level, for example, "File Operations".
6. Under List Permissions, select the following permissions:
   • Add Items
   • Edit Items
   • Delete Items
   • View Items
   • Open Items
   • View Versions
   • Delete Versions
   • Create Alerts
   • View Application Pages
7. Under Site Permissions, select the following permissions:
   • View Pages
   • Open
8. Under Personal Permissions, select the following permissions:
   • Manage Personal Views

When trying to create or edit the content of a site level, an error will be reported:

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Hi @Xyza Xue_MSFT

I have tried with same setting but the user in the custom group is still able to create new pages and posts.

See the screenshot below this is the page user has created after the suggested changes.

Edited: Now the error coming up as page title is required but I tried creating pages without publishing them they are appearing in site content. refer the screenshot below.

Can we prevent user from creating new page and post we just need this user to do file operations?

Also, I have noticed the document library went in classic mode after the suggested changes and now not able to exit classic look and modern look is appearing in recycle bin only.

Many Thanks

Answer 4

Hi @Xyza Xue_MSFT

I am still looking for different scenarios as I still did not find a permission where people should not invite anyone and can't make change to website but can perform file operations.

So, there should be 4 permission level that I need one for Owner, Team Leader, then Team Member and visitors.

Site owner/admin - can do everything.

Team Leader - can do file operations and add and remove users but should not be allowed to change the look and feel of the site or add and removed pages or webparts.

Team Member - Same as Team Leader but should not be able to add or remove members.

Visitors - As it is.

Many Thanks