{"id":526,"date":"2018-02-11T22:08:09","date_gmt":"2018-02-12T03:08:09","guid":{"rendered":"http:\/\/www.dontpapanic.com\/blog\/?p=526"},"modified":"2018-03-14T15:12:01","modified_gmt":"2018-03-14T19:12:01","slug":"changing-permissions-in-office-365-group-sites","status":"publish","type":"post","link":"https:\/\/www.dontpapanic.com\/blog\/?p=526","title":{"rendered":"Changing Default Permissions in Office 365 Group Sites"},"content":{"rendered":"<p><a href=\"https:\/\/www.dontpapanic.com\/blog\/wp-content\/uploads\/2018\/02\/CloudLock.png\"><img loading=\"lazy\" decoding=\"async\" width=\"207\" height=\"131\" title=\"CloudLock\" align=\"left\" style=\"margin: 0px 8px 5px 0px; float: left; display: inline; background-image: none;\" alt=\"CloudLock\" src=\"https:\/\/www.dontpapanic.com\/blog\/wp-content\/uploads\/2018\/02\/CloudLock_thumb.png\" border=\"0\"><\/a>Changing the permissions assigned to the default Owners, Members, and Visitors groups in a SharePoint site is easy.&nbsp; You just navigate to <strong>Site Settings &gt; Site Permissions<\/strong>.&nbsp; Then select the group whose permissions you want to change and assign them a new permission level using the <strong>Edit User Permissions<\/strong> button in the Ribbon.&nbsp; But that won\u2019t work in the Site created behind an Office 365 Group.&nbsp; When you try to use the same procedure you find that the <strong>Edit User Permissions<\/strong> button is greyed out if you select any of the built in administrative groups.&nbsp; (See the Screenshot below.<\/p>\n<p><a href=\"https:\/\/www.dontpapanic.com\/blog\/wp-content\/uploads\/2018\/02\/EditGroupPermissions.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"644\" height=\"341\" title=\"EditGroupPermissions\" style=\"display: inline; background-image: none;\" alt=\"EditGroupPermissions\" src=\"https:\/\/www.dontpapanic.com\/blog\/wp-content\/uploads\/2018\/02\/EditGroupPermissions_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p align=\"left\">The problem is that Office groups are created when you create a Security Group in Office 365. By default that security group is added to the built-in Members group of the Site Collection.&nbsp; To make sure that you don\u2019t inadvertently lock users out of the site Microsoft disables your ability to change the permission on the default Administrative groups when using an Office Group based site.&nbsp; <\/p>\n<p align=\"left\">But there is still a way to modify the permissions for the users in the groups.&nbsp; If you navigate to the home page of the site and select <strong>Site Permissions<\/strong> from the Settings menu (the gear) you will see a panel open on the right hand side of the browser window.&nbsp; Under <strong>Site Members<\/strong> you will see the security group that provides the basis for the Office group you created. If you select <strong>Edit <\/strong>under that group you can change the permissions for the members of the group to either <strong>Read <\/strong>or<strong> Full Control. <\/strong>However, instead of changing the permission level for the group it will actually move the security group to either the <strong>Site Visitors<\/strong> or <strong>Site Owners<\/strong> groups respectively.<\/p>\n<p align=\"left\"><a href=\"https:\/\/www.dontpapanic.com\/blog\/wp-content\/uploads\/2018\/02\/O365Change-Group-permissions.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"644\" height=\"436\" title=\"O365Change Group permissions\" style=\"display: inline; background-image: none;\" alt=\"O365Change Group permissions\" src=\"https:\/\/www.dontpapanic.com\/blog\/wp-content\/uploads\/2018\/02\/O365Change-Group-permissions_thumb.jpg\" border=\"0\"><\/a><\/p>\n<p><a href=\"https:\/\/www.dontpapanic.com\/blog\/wp-content\/uploads\/2018\/02\/EditGroupPermissions-1.jpg\"><\/p>\n<p align=\"left\">But what if I want to change the default group\u2019s permissions to <strong>Contribute<\/strong> instead of <strong>Edit<\/strong>? To do that you\u2019ll need to use two different SharePoint groups.&nbsp; <\/p>\n<ul>\n<li>\n<div align=\"left\">First, use the Site permissions panel to move the underlying security group from the <strong>Site Members<\/strong> group to the <strong>Site Visitors<\/strong> group.&nbsp; This will give all your users <strong>Read<\/strong> permissions to the site.<\/div>\n<\/li>\n<li>\n<div align=\"left\">Second, click on the <strong>Advanced permissions settings <\/strong>link at the bottom of the panel.&nbsp; This will take you to the regular site permissions page that you are used to.&nbsp; Now you can create a new SharePoint group and assign it whatever permission level you want.&nbsp; After you create the group add the same security group you moved above as a member of the new SharePoint group.&nbsp; Since SharePoint permissions are additive this will give all your users both Read permission and whatever new permission level you assigned, for example <strong>Contribute<\/strong>.<\/div>\n<\/li>\n<\/ul>\n<p align=\"left\">I hope that clarifies how to manage Permissions in the new Office 365 group sites.&nbsp; Since Team sites are based on Office Groups, the same procedure applies to any Team sites you\u2019ve created.<\/p>\n<p><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Changing the permissions assigned to the default Owners, Members, and Visitors groups in a SharePoint site is easy.&nbsp; You just navigate to Site Settings &gt; Site Permissions.&nbsp; Then select the group whose permissions you want to change and assign them a new permission level using the Edit User Permissions button in the Ribbon.&nbsp; But that &hellip; <a href=\"https:\/\/www.dontpapanic.com\/blog\/?p=526\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Changing Default Permissions in Office 365 Group Sites<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56,101,96,102],"tags":[55,11],"class_list":["post-526","post","type-post","status-publish","format-standard","hentry","category-office-365","category-office-groups","category-security","category-teams","tag-office_365","tag-security"],"_links":{"self":[{"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/526","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=526"}],"version-history":[{"count":3,"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/526\/revisions"}],"predecessor-version":[{"id":532,"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/526\/revisions\/532"}],"wp:attachment":[{"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=526"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=526"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dontpapanic.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=526"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}