3

I have a list of 10 employees. I want the managers to be able to view all 10 row items. However for the employees I only want them to be able to view their own row id. Note each id includes a column for Employee Name (name/person field type) and their ID (LAN ID)

  • 4
    OOTB why not create views for managers and employees?additionally you can filter the data like [Me] – user13408 Dec 9 '15 at 2:30
  • 1
    A view is not the same as security. He should be aware of that difference. If security is not an issue, a view would be a good idea. – Oak3 Dec 9 '15 at 10:31
  • Creating View is a good option with least efforts, unless security is concern. If users are not smart enough to traverse to other view or manipulate url go with View.. But for your question here, you can set unique permissions to an item via workflow (SPDesigner workflow is sufficient) – Gaurravs Dec 9 '15 at 10:46
3

You could use a workflow to set item level permissions. This blog post might help: http://spcycle.blogspot.nl/2012/01/how-to-create-workflow-to-change-item.html

2

To set unique permissions on List Items, you will have stop inheriting permissions from the parent.

From your question I can analyse 2 things

  1. Provide access to Managers to see all of the items in a List
  2. An employee should see only his/her item in a list.

I suggest to create a SharePoint group for Managers and add all of them in it. And follow below manual steps.

  1. Go to a list item, and navigate to advanced sharing page.
  2. From ribbon click on Stop Inheriting button

    enter image description here

  3. Once inheritance is broken, again from ribbon click on Grant Permissions button. This will bring you a pop up, where you can assign permissions to the Managers Group and to that Single Employee to whom this item belongs

    enter image description here

Note: Above are manual steps to be performed on each list item, which can be annoying for more number of list items. In this case you can PowerShell script the entire process.

1

Firstly, give managers full access to the list and other employess contribute permissions on the list. Then go to List Settings -> Advanced Settings and Specify Read and Edit Access. For example, here you may select "Read items that were created by the user" for Read access.

  • Just to clarify the managers will create the 10 items..Any manager can do whatever they want to the 10 items. For the 10 employees who each has 1 item within the list then only they should be able to view their item created by the manger. Employee 1 should not be able to view Employee 2 data. – daPlayaURH Dec 9 '15 at 6:42
  • Item Level Security is based on Ownership of the Item, if a Manager creates Items he/she is the Owner... So the Employee will not see any items. – Danny '365CSI' Engelman Dec 9 '15 at 7:48
1

The [ME] option suggested by Programmer seems to be the best solution here. As for alternatives:

1) Can the managers set permissions? If yes, you can break permission inheritance per each item, and grant permissions for each user individually

2) Alternatively, you can use workflows. With an impersonation step, you should be able to remove the permissions for existing users and assign e.g. read to the employee based on the Employee column

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.