I want a user group to only be able to access our published front-end site. How can I prevent these users from accessing System pages?

For example, I don't want them to be able to access /_layouts/15/viewlsts.aspx

  • How about allowing inplview.aspx which is a rest call to sharepoint lists. We have some custom js code on publishing pages to display lists on a page. But we still want to deny system pages for forms based users who are read only.
    – rkim
    Jun 20, 2017 at 12:59

1 Answer 1


If you create a custom permission level based on Read, but deselect View Application Pages, that should prevent them from getting to those pages. Then apply this permission level to any desired group(s).

  • Is this done from central admin?
    – matt
    Jan 9, 2015 at 21:17
  • It could be done in central admin and applied to a web application f necessary, in this situation I think doing it at a site collection level would be fine. Jan 9, 2015 at 23:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.