I have been tasked with overhauling our SharePoint site's permissions. Currently tons of one off permissions have been granted and I am trying to get away from these and go the route of groups.
It is my understanding that a site, by default, has the site.members, site.visitors, and site.owners groups. I was going to create groups for each library, but this would be too tedious and decided to assign users into those groups which would cover the majority of users.
I was concerned about overlap at first. By that I mean Person X is in site.members, and they can view all subsites and libraries. This isn't that big of an issue now. However when I wanted to fine tune things a bit for a library I ran into an issue.
I have a group called printshop - full control. I created this group at our operations site level. I then went to the print shop library, added the group printshop - full control, and gave it Full Control permissions.
Now, when I look at this group, it says it has full control, limited access to the main site. How can I get around this. I only want the users to be able to have full control on that specific library.
Is this possible with groups?