I have a SharePoint 2013 (Foundation) Site Collection with a Team Site at its Root.
My "power" users want to provision Sub Sites for collaborations but want the members (who access via extranet using Windows Authentication) of these sub sites to ONLY have access to the Sub Sites they are directly given permission to.
I have broken permission inheritance for each sub site but it seems the only way Sub Site Members can get to these Sub Sites is if I add the Everyone user to the visitors group at the Root Team Site.
Is this normal?