Using SharePoint Online, I have set up unique permissions on a document library so that users in the "Site Visitors" read-only group have the ability to add documents to this particular library. I did this by making a copy of the "Read" permission level and adding "Add" rights to the copy, then assigning this new permission level to the visitors group on this library.

I have a handful of users who receive an "Access Denied" page when attempting to navigate to the library. All of the users who both do and do not have issues accessing the library have access through the same Active Directory group. I confirmed that permissions between a user who can and cannot access the library are the same by using the "check permissions" tool on the library permissions page.

I am at a loss as to what the issue could be. Any ideas are appreciated.

  • In addition, please remove affected users and grant permission again to compare the result.
    – Julie_MSFT
    Apr 10, 2020 at 7:02
  • Am I removing and re-adding the AD group that the users have permissions through, or am I removing and re-adding the users to the group itself? Apr 10, 2020 at 11:49
  • remove affected user in the group and re-add the users to the group, if the issue still exists, grant the affected user permissions directly and check the result
    – Julie_MSFT
    Apr 13, 2020 at 6:32

2 Answers 2


Verify the users those are facing permission issues have the limited access permissions at the site level. Limited access permissions can be maintained by the site feature.

Give NT AUTHORITY\authenticated users and Everyone to READ Only by following the below steps :

Site actions > site settings > Master Page and page layouts > Library tab > Permissions. Add All authenticated users to READ ONLY.

  1. Can you please check again with them by clearing their browser cache? OR
  2. Remove the users (those who are having issues accessing that library) from the Zeroth group and provide them similar kind of access again.

You can access the zeroth group of your site by appending below URL after your site collection name and accessing it.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.