New answers tagged

0

I don't think it's possible to make guest users cannot see others else the file or the folder has been shared. When you share a folder with some guests, guests will be able to see other's names in the manage access panel.


0

There is a REST endpoint to remove user permissions from list item. Use this endpoint: <siteUrl>/_api/web/lists/getbytitle('<listName>')/items(<ID>)/roleassignments/removeroleassignment(principalid=<userID>,roleDefId=1073741827) Replace <userID> with the actual user ID. Microsoft documentation: Users, groups, and roles REST API ...


1

As per my understanding Web.SiteUsers returns the users from User Information List. This is a hidden list in the site collection. When a user establishes a relationship with site (access the site/assigned with an item. etc), it will be resolved as a user item in the list. Below is URL format for this list: <siteUrl>/_catalogs/users/simple.aspx


0

@John John, yes creator.LookupID is the user id. SiteUsers does not include all user inside the active directory. Its users come from a hidden user info list in the site collection. When a user establishes a relationship with this site(access the site/assigned with an item. etc), it will be resolved as a user item in the list.


0

No, this is the correct behaviour. Users with the appropriate access can still invite users to join their private group or access a SharePoint site. A public group means anyone can join the group by adding themselves, while a private group means a user with the correct access will need to add them to the group. Edit: Further clarification can be found in ...


0

Try something like below: User oUser = context2.Web.SiteUsers.GetByID(<user-id>); listItem.RoleAssignments.Add(oUser, new RoleDefinitionBindingCollection(context2) { contributeDef }); Replace <user-id> with actual ID of user.


1

That's correct. Underlying Teams is the Microsoft 365 Group. Group allow list is global, i.e. you can allow any domain or specific domains to be added to any M365 Group. There is also a deny list if you want to go that route. These are set in Azure AD at https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/UserSettings. SharePoint has ...


0

Are the files still available if the user does not connect to the Internet after the permissions are revoked? I think the following scenario is possible. Suppose the user permissions are revoked. The user however does not connect to the Internet, the local files are still available and the user can copy them to a USB drive. For organisations that handle ...


2

If the user permission has been removed from SharePoint, the user will not be able to see files in OneDrive app. These files will also get removed from his OneDrive app:


0

Per my test, I successfully deleted the folder or file in the modern document library linked to Teams. I want to confirm some information with you: 1.Do other users occur the same issue? 2.If you open the site in different browser, whether the Delete option is still missing in modern experience, try to clear browser cache then compare the result. 3.Does this ...


0

By default in SharePoint if you have permissions to edit the metadata you are going to have permissions to edit the file that the metadata is attached to. The metadata and the file are not separate "objects" that you can set different permissions on.


0

No this is not possible in SharePoint online. And I guess in on-prem as well. By the way, why would you block? It would be an interesting scenario


1

It's likely that these folders are connected to channels that exist in Microsoft Teams. For each standard channel that exists in the Microsoft Team, there is a folder in the SharePoint site. In order to delete the folders, you would need to first delete the channel and then delete the folder afterwards. More information can be found here: How SharePoint ...


1

This is likely due to NoScript. To disable this, you must poses the SharePoint Admin or Global Admin role. It can be disabled via Get-PnPTenantSite or Set-SPOSite -DenyAddAndCustomizePages 0. For each site, this is controlled by a tenant administrator. A Site Collection Admin can do anything, including deleting the site, except those things covered by ...


0

One approach could be to call an Azure function from your SPFx component, however the update will be in the context of the App not the user.


0

No. You can parse the bearer token at the time of the request, and you will find that user permissions are actually at work. This is the analysis of the bearer token with a successful request. You could parse the token here.


1

Try below PowerShell. Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction SilentlyContinue #Function to retrieve Permission data Function Get-PermissionInfo([String]$UserID, [Microsoft.SharePoint.SPSecurableObject]$Object) { #Object Array to hold Permission data $PermissionDataCollection = @() #Determine the given Object type and ...


1

As Callum Crowley mentioned, with read access user can: Example: You can refer this article for more information about User permission: https://docs.microsoft.com/en-us/sharepoint/sites/user-permissions-and-permission-levels


1

By giving all users read access, they will only be able to download/view photos in the library. You can do this by clicking the cog > Library settings > Permissions for this library, then adding users to either a group with read access or configuring unique permissions if this library needs different permissions to the rest of the site. Here is more ...


2

Yes, the Set-SPOSiteGroup updates the SharePoint Online owner and permission levels on a group inside a site collection. You could execute the following Powershell script: #connect to subsite $SiteURL= "https://test.spo.com/sites/projects/it" Connect-PnPOnline -Url $SiteURL -UseWebLogin #set permissions of a specific SharePoint group Set-...


1

To get a full list of all permission levels that have been granted to a user, You can simply use Check Permissions in Site Permissions Open Site Settings Below User and Permissions, click on Site Permissions From the above ribbon, click on Check Permissions Type, your User or Group Name, and click Check Now The list of all permissions for this user will be ...


2

Yes, the Set-SPOSiteGroup is expecting a site collection address. You may want to try Set-PnPGroupPermissions instead. You can either connect the subsite directly using Connect-PnPOnline or you can use the Web parameter on Set-PnPGroupPermissions to specify the subsite. More information can be found here: Set-PnPGroupPermissions


Top 50 recent answers are included