I have lots of DOCX and PDF documents in a Document Library on my SharePoint 2016 Online Site. I need to sort the documents out so I hired a remote worker to do it. Basically his/her work consists of opening a document, reading the contents, determining the document type and moving the file to a folder corresponding to that class.
How I can configure the SharePoint Permissions to this Document Library so that the worker had access to only reading and moving files? Specifically I would like to deny any documents downloads, any linkage to third parties, etc.