2

Yes, the Set-SPOSiteGroup updates the SharePoint Online owner and permission levels on a group inside a site collection. You could execute the following Powershell script: #connect to subsite $SiteURL= "https://test.spo.com/sites/projects/it" Connect-PnPOnline -Url $SiteURL -UseWebLogin #set permissions of a specific SharePoint group Set-...


2

Yes, the Set-SPOSiteGroup is expecting a site collection address. You may want to try Set-PnPGroupPermissions instead. You can either connect the subsite directly using Connect-PnPOnline or you can use the Web parameter on Set-PnPGroupPermissions to specify the subsite. More information can be found here: Set-PnPGroupPermissions


2

If the user permission has been removed from SharePoint, the user will not be able to see files in OneDrive app. These files will also get removed from his OneDrive app:


2

For using flow to remove user site permission, we will need to use rest api and call the http request to do so. The most default way can be remove user from permission group, and a simple demo will be like below: The GRP2 is the group name and I use the method removeByLoginName. This is not the only way, you can try other options with Rest api. Here are ...


2

I guess you want the group members be able to edit permission of other group? If so, for default permission levels, you will need to grant full control. When you edit permission level, you can find the site permission with named "Manager Permissions". It is the permission needed to assign permissions to users and groups. For more information, ...


2

By default the edit permission level cannot be deleted via UI. It cannot be selected to modify. How do you delete it? Anyway you can create a new permission level with the same permission settings.


2

As per my understanding Web.SiteUsers returns the users from User Information List. This is a hidden list in the site collection. When a user establishes a relationship with site (access the site/assigned with an item. etc), it will be resolved as a user item in the list. Below is URL format for this list: <siteUrl>/_catalogs/users/simple.aspx


2

For first part you need to assign custom permissions to the item created (becareful with scaling, if you list will have >50K items it is not an option as you will hit SP Limits) PowerAutomate will use identity you set up in the connector.


1

That's correct. Underlying Teams is the Microsoft 365 Group. Group allow list is global, i.e. you can allow any domain or specific domains to be added to any M365 Group. There is also a deny list if you want to go that route. These are set in Azure AD at https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/UserSettings. SharePoint has ...


1

SharePoint does not support permissions management based on metadata. The best practice it to store sensitive documents separately, in a different SharePoint library or at least a folder.


1

You can assign permissions to SharePoint group using SharePoint REST API like: function setPermissionForGroup(){ $.ajax({ url: _spPageContextInfo.webAbsoluteUrl + "/_api/web/roleassignments/addroleassignment(principalid=<GroupId>, roledefid=1073741827)", type: "POST", contentType: "application/json;...


1

Steps to solve your problem, Go to library settings In permission and management > click on Manage files which have no checked in version When you see list of checked out files Take ownership of selection > select the document for which you want to take ownership Delete it or update it, it's up to you 🙂 I didn't do this by my self > not unit ...


1

You will need to use Conditional Access Policies in Azure AD which will require licensing.


1

Ofc, it is supported in SharePoint Online. You could share the folder to another group via the icon.


1

If you have removed permissions of Microsoft 365 group from Site Members group (Edit permissions), you can again add permissions to Microsoft 365 group from site settings. Follow below steps: Click on Settings (gear icon) Select Site permissions Scroll at the bottom side of right panel and select "Advanced permissions settings" Open SharePoint ...


1

Assign Contribute permissions to users. Contribute permission level: Enables users to manage personal views, edit items and user information, delete versions in existing lists and document libraries, and add, remove, and update personal Web Parts. For more information about SharePoint permissions levels, check this: User permissions and permission levels ...


1

Currently adding user/group as Site Collection Administrators is not possible using Site design JSON. addPrincipalToSPGroup action currently only supports the Visitors (permission level: read), Members (permission level: contribute or edit, depending on the site template), and Owners (permission level: full control) groups. Source: Add users (principals) ...


1

SharePoint does not support column-level security. While you can implement solutions to hide the column, the data is ultimately accessible. One thing you could think about is abstracting away the data access and permission. For example, build a Power App that accesses the data with a defined account.


1

This issue has been resolved by MicroSoft as per their post to the admin center’s message center.


1

I have users experiencing this, but cannot replicate it myself - likely because I am the SharePoint Admin. Just checked the O365 Admin Console and saw this: This is an issue on Microsoft's End - they are likely backing out whatever update caused this issue. If you have access to the O365 Admin Center, you can subscribe to any updates to this advisory as ...


1

After creating a SharePoint group, you need to assign the permissions to it at site (web) level. Add a new action 'Send HTTP request to SharePoint' and configure the action to use endpoint as below: /_api/web/roleassignments/addroleassignment(principalid=<GROUPID>, roledefid=1073741827) roledefid is for Permission Levels which are as follows: ...


1

I don't think it's possible to make guest users cannot see others else the file or the folder has been shared. When you share a folder with some guests, guests will be able to see other's names in the manage access panel.


1

I can confirm Siteuser comes from user information hidden list. Users are added to the User Information List when: The specified user is granted permissions individually within a site collection The specified user is added to a person/group field value anywhere in the site collection The user is named specifically in a workflow anywhere in the site ...


1

It's likely that these folders are connected to channels that exist in Microsoft Teams. For each standard channel that exists in the Microsoft Team, there is a folder in the SharePoint site. In order to delete the folders, you would need to first delete the channel and then delete the folder afterwards. More information can be found here: How SharePoint ...


1

This is likely due to NoScript. To disable this, you must poses the SharePoint Admin or Global Admin role. It can be disabled via Get-PnPTenantSite or Set-SPOSite -DenyAddAndCustomizePages 0. For each site, this is controlled by a tenant administrator. A Site Collection Admin can do anything, including deleting the site, except those things covered by ...


1

As Callum Crowley mentioned, with read access user can: Example: You can refer this article for more information about User permission: https://docs.microsoft.com/en-us/sharepoint/sites/user-permissions-and-permission-levels


1

By giving all users read access, they will only be able to download/view photos in the library. You can do this by clicking the cog > Library settings > Permissions for this library, then adding users to either a group with read access or configuring unique permissions if this library needs different permissions to the rest of the site. Here is more ...


1

Try below PowerShell. Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction SilentlyContinue #Function to retrieve Permission data Function Get-PermissionInfo([String]$UserID, [Microsoft.SharePoint.SPSecurableObject]$Object) { #Object Array to hold Permission data $PermissionDataCollection = @() #Determine the given Object type and ...


1

To get a full list of all permission levels that have been granted to a user, You can simply use Check Permissions in Site Permissions Open Site Settings Below User and Permissions, click on Site Permissions From the above ribbon, click on Check Permissions Type, your User or Group Name, and click Check Now The list of all permissions for this user will be ...


1

Per my test, SharePoint Online "EDIT LINKS" permission: You need the Manage Lists permission. And in fact, there is only difference between Edit permission level and Contribute permission level is Manage Lists permission. It is worth noting that the Manage Lists permission includes create and delete lists, add or remove columns in a list, and add ...


Only top voted, non community-wiki answers of a minimum length are eligible