In order to prevent users from creating sub-sites I created a custom permission level that identical to Full Control but has "Create sub-sites" unchecked. Turns out, users can still give them self or others Full Control, which then allows them to create a site.

What changes can I make to my custom permission level that will allow site owners to do just about everything except create a new site (and grant elevated permissions)?

By the way, we do not have access to the farm or Central Administration.

  • 1
    You'd need to deselect the manage permissions option in your custom permission level Aug 5, 2016 at 17:12
  • Will that restrict people from granting permissions at all?
    – Jackie
    Aug 5, 2016 at 17:15
  • 1
    Yes, but it should still allow them to manage group membership for any groups they own. They just can't alter the group's underlying permissions as I recall. The last time I did this was in the 2007 days so I'm a little fuzzy. Aug 5, 2016 at 17:19

1 Answer 1


By default the Full Control or Manage Hierarchy permissions can create a subsite.

So try to take a copy from contribute permission level and try to customize it.

  • Don't check Create subsite , Manage website.
  • Check other roles based on your need one by one till get the correct permission that you need.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.