How you can disable the 'Add a Page' permission for external contractors while still allowing them other specific actions:
- Create a custom permission level:
- Go to Site Settings > Site Permissions > Permission Levels
- Click "Add a Permission Level"
- Give it a name like "External Contractor Access"
- Click "Add a Permission Level"
- Go to Site Settings > Site Permissions > Permission Levels
- Configure the custom permission level:
- Include these permissions:
- List Permissions: Add Items, Edit Items, Delete Items, View Items, Open Items
- Site Permissions: View Pages, Browse User Information
- Personal Permissions: Create Personal Views, Use Self-Service Site Creation
- Importantly, do NOT include the "Add and Customize Pages" permission
- Apply the custom permission level:
- Go to Site Settings > Site Permissions
- Create a new group for external contractors or select an existing one
- Assign the newly created "External Contractor Access" permission level to this group
- Add external contractors to the group:
- Invite the external users and add them to the group with the custom permission level
- Apply the custom permission level:
This setup will allow external contractors to:
- Read pages
- Add, edit, and delete list items
- Add, view, download, and delete items in specified folders (you'll need to set folder-level permissions separately)
More:
https://o365reports.com/2024/04/02/create-custom-permission-levels-in-sharepoint-online/
https://learn.microsoft.com/en-us/sharepoint/external-sharing-overview