SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a site that has a subsite. Users need permissions to the subsite but cannot be allowed to see the main site at all (they should get a access denied).

Generally how I do it is, I break permissions inheritance for the subsite, then create a new group for that subsite with the required permissions. Then for the main site, I place the users in whatever group I need. The problem is, as far as I know, there is no way to specify a group with "no access".

Any ideas how to do that?


share|improve this question
up vote 1 down vote accepted

There isn't a reason to specify no access, just don't add the users to a group ;)

SharePoint will assume the highest level of permission granted to the user, so if they're in two groups, the higher level of permission will reign. If they're in no groups, then no access.

share|improve this answer
Ahh, gotcha. Adding a group specific to the subsite gives them permissions to that subsite but still places them in a group visible in the "main" site, but technically this group is specific to the subsite only. That was what was throwing me off. Removing that user from any other groups on the main-site level fixed the problem.I learned something new!Thanks! :) – Justin May 22 '12 at 17:09
Glad i could help, check out my blog post which may help clarify some more… – David Lozzi May 22 '12 at 17:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.