SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a site owner who we want to be able to create lists, etc. and assign SharePoint groups to have access to them. However, we need to verify (approve) the people she wants to add to those groups or areas. Is there any way to launch a workflow or handle the addition of a new user or group and have it not apply until someone else approves it?

I realize we could take away the permissions role for the site owner but then she wouldn't be able to create new libraries and assign existing (or new) SP groups to it.

This is a MOSS site.

Thanks, Phil.

share|improve this question
up vote 3 down vote accepted

Not really, if the user is going to be creating and managing permissions, then that comes with the territory. Full Control grants this right so being listed as such gives them the trust that the permissions changes they are doing are desirable.

If you're really that concerned, then give her Contribute or Design rights on the site and manage the security yourselves or give her some guidance and training to ensure that both you and her are in agreement about permissions.

share|improve this answer
Thanks. Does Design rights give her the ability to create new subsites or document libraries? If so, does that mean that all the permissions in those new items are purely inherited (because she can't actually assign rights)? – Phillip Jubb Aug 11 '11 at 18:47
Design will give her the ability to add document libraries but not subsites. You could create a custom Design permission level that allowed for the creation of subsites and in that case, it should inherit the parent permissions as she would not have the ability to Manage Permissions. – Eric Alexander Aug 15 '11 at 12:10
Perfect, thanks very much! – Phillip Jubb Aug 15 '11 at 15:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.