This is going to seem like an incredibly simple question, as I know users can already exist in multiple groups (and I know it's best practice for them not to do so where possible). I am very new to SharePoint and am still getting my hands dirty with all there is to know. Here goes:

The person running the project I'm on asked why we couldn't use the existing AD group for the lowest level permissions that are planned for a sub-site since it would have all the members who require access. In this case, each business unit has an AD group so his plan would be to use this AD group to get everyone access, and then select single users out to be defined as Members or Owners (or whatever SG's are defined). Can SharePoint support this without generating a ton of the permission warnings about a user having conflicting permissions, or are they inevitable given this design?

I know this could fall into the cardinal rule of not asking an opinion question, however I think this would draw upon learned experience more than anything else.

1 Answer 1


I don't see any issue with your approach.

You can add AD group to default Site Visitor Group. Then add users into Member or Owners group.

SharePoint takes the highest Permission and uses that for logged in User. Also it is not going to raise any warnings or errors.

Also in there is a group with name EveryOne which basically includes all Users.

  • Thanks for the answer. I know about the EveryOne group, however in this case I'd be looking to avoid EveryOne since the Site is looking for a smaller segment of the user group - in this case the people in the AD group. My concern was based on the high number of individual entries for limited access that seemed to exist inside the system. For some reason I thought those might be related to this approach, since they have been essentially testing this method through trial and error.
    – dramerus
    May 6, 2015 at 3:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.