I'm creating a SharePoint site for our in-house users - they should be able to access the site, create folders and content but otherwise not be able to alter user permission or site design - they should also be able to create external anonymous sharing links links with people outside the company. The Problem: I cannot grant them the permission to create content on the site and be able to create and share anonymous links without giving them permission to change site design and user/site permissions. Is there a way to do this without giving them permission to change everything? Much appreciated.
Here are the different level of permissions for groups and people.
Full Control - Has full control.
Design - Can view, add, update, delete, approve, and customize.
Edit - Can add, edit and delete lists; can view, add, update and delete list items and documents.
Contribute - Can view, add, update, and delete list items and documents.
Read - Can view pages and list items and download documents.
View Only - Can view pages, list items, and documents. Document types with server-side file handlers can be viewed in the browser but not downloaded.
If you set a group or person with the contribute permissions they should be able to create content and share that content on the site but not alter the site itself. They will only be able to share lists, documents and libraries if you want them to be able to share other things then they need higher permissions which would allow them to edit the site.