I've asked this already on the SharePoint community site, but no dice.

I'm planning to use SP 2013 (in Office 365) to set up an extranet portal.

We have a set of about 10 product platforms, which some customers have, some don't. We have hundreds of customer organisations, each with usually 2-5 individual members.

What I want to do is set up permissions so that each organisation can see only content they have permission for. There are 2 possible ways to do this, as far as I see:

  1. Set up a user group for each product platform, and add the relevant individual customers to each platform group. Then assign the relevant group permission to new content, so only the relevant customers have access to it. Seems to be the easiest approach.

Problem: There are only two options for who can see the members of the group: everyone, or group members. I don't want ANY group members to know who else is in the group, because it's commercially-sensitive information.

  1. Set up a user group for each customer organisation, and when I publish new content, specify which groups have access to it.

Problem: Every time I publish something I would have to add potentially hundreds of customer permissions.

Has anyone found a solution to the group membership visibility problem in Point 1 ?
For example, a programmatic way of hiding group membership from the group members. I assume there's a chunk of code somewhere that I could edit in SharePoint Designer.

Or alternatively, does anyone have any ideas for a better structure? I could possibly do it using libraries - 1 library for each platform, set up user groups for each customer, assign the relevant groups to each library. That sort of disperses the content though, and I would like customers to see all their approved content in 1 place - I guess I could get around that with a web part..?

Any tips much appreciated.

  • 1
    There is an option in the group settings on who can see the group membership, Owners or Group Members. Setting this to Owners would satisfy your needs for option 1. – Eric Alexander Dec 28 '15 at 21:45
  • 1
    Nope, the 'view membership' options are 'members' or 'everyone'. The 'edit' options are 'owner' and 'members'. – Elliot Sumner Dec 28 '15 at 22:41
  • 1
    Was trying to go from memory and I had it backwards, apologies – Eric Alexander Dec 29 '15 at 1:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.