How does SharePoint Online count unique permission scopes when assigning multiple users to a folder?

shibu john 20 Reputation points
2025-04-12T16:13:32.97+00:00

Hello,

I’m trying to understand how SharePoint Online counts unique permissions in a document library.

Suppose I break permission inheritance for a folder in a SharePoint Online Document Library and assign 3 users (e.g., User1, User2, and User3) to that folder with specific permissions.

My question is:

Will this count as 3 unique permissions, or just 1 unique permission scope toward the 5,000 unique permission scope limit per list or library?

I understand that SharePoint has a soft limit of 5,000 unique permission scopes per library, and I want to ensure I don’t exceed it unintentionally.

Any official clarification or Microsoft documentation reference would be greatly appreciated.

Thanks!

Microsoft 365 and Office SharePoint Development
0 comments No comments
{count} votes

Accepted answer
  1. Marcin Policht 49,640 Reputation points MVP Volunteer Moderator
    2025-04-12T17:28:02.96+00:00

    In SharePoint Online, the 5,000 unique permission scope limit refers to the number of unique permission scopes, not the number of individual users or groups assigned permissions.

    So in your case, you broke inheritance on a folder and assigned User1, User2, and User3 specific permissions.

    This counts as 1 unique permission scope, not 3.

    • A unique permission scope is created each time you break inheritance for an item (file/folder/list item).
    • It doesn't matter how many users or groups you assign to that item after breaking inheritance — it's still considered a single unique scope.

    Example:

    Item Inheritance Broken? Custom Permissions Counts as Unique Scope
    Folder A Yes User1, User2, User3 Yes — 1 unique scope
    File B No Inherits from library No
    Folder C Yes Group A Yes —

    Regarding official Microsoft documentation, refer to Microsoft Docs – Manage large lists and libraries If a folder has two files in it and you share them both with a user, that will cost you three scopes: one for the parent folder and one for each of the files that was shared individually. It doesn't matter that you shared both files with the user and the ACLs of the files are identical. Once you break the inheritance of a file or folder from its parent, you create a unique scope.


    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.