SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to set up a site architecture for a new Office 365 account, and we would need to have a site and its documents generally open to multiple employees, but some of these need access to most documents but not all.

I was wondering if this could be controlled by metadata? I.e. if the site and document library is generally open to all users, but if a file or page has a certain metadata value, it should be restricted to a particular group. Is that possible? If not, is there another way to achieve this?

share|improve this question
Metadata cannot be used to manage item permissions. You can use metadata to filter views. You can build pages with filtered and unfiltered views and assign permissions to these pages. But a savvy user can circumvent these and get access to the list/library directly. You can use workflows that assign permissions based on metadata. – teylyn Mar 11 '13 at 8:30
So how would I go about resolving the problem: documents that are in a site/library where only some files should be visible to all? I don't want to put them in separate sites/libraries, because then they won't be searchable/filterable/possible to create views for... – Anders Svensson Mar 11 '13 at 13:01
You may need to set item level permissions on the items that should not be visible to all. – teylyn Mar 11 '13 at 21:21

I wouldn't use metadata to do a workaround on permission when you already have item level permission built in. By default your documents inherit site permission and those with sufficient permission can read, update and delete documents. But if you want specific permission on a document, edit sharing the following way.

Select Shared With

enter image description here

Click Advanced

enter image description here

Click Stop Inheriting Permission in the ribbon.

enter image description here

Select the groups that shouldn't have permission to this document. In our case, all groups but the Owners group. Then click the Remove User Permission button in the ribbon.

enter image description here

When done, you now see that only the Owners group have permission to this document.

enter image description here

Back on the document library, you only have to fire up the menu to see who this document is shared with.

enter image description here

share|improve this answer
Just to add to this, you can use 2010 workflows to set the item level permissions based off the item's metadata. – wjervis Jul 8 '14 at 11:31
@wjervis That's true! But it takes a while to implement, and it could be worth it if you set permissions on documents a lot. – Benny Skogberg Jul 8 '14 at 11:37

I was also looking for some options along the same lines but obviously individual permission is the only solution available.

Another workaround - the way I designed the site was based term store navigation and then a sub-site for each term-set. Once we have achieve this we can set up the rules to move the documents to the individual site's document libraries.

Thanks SP

share|improve this answer

Use different libraries. The more you try and hack around the more trouble you will get into.

share|improve this answer

You can put the restricted documents in a specific folder and change the view from folder view to flat. In that way only people with permissions to the folder will see the documents that are restricted.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.