Permission & Access Issues

How to Block One SharePoint Group Member from a Document Library

Aamir Naveed Akram Oct 22, 2026 868 views

Question details

The user needs to restrict a single member of a SharePoint domain or site group from accessing a specific document library without removing them from the domain group entirely.

How to Block One SharePoint Group Member from a Document Library

Product: SharePoint
Device & OS: not provided
Scenario: Managing access control for a specific document library when access is inherited through a larger group.
Observed behavior: SharePoint automatically inherits permissions from the parent site by default and does not offer a simple 'deny' permission option for individual users within an allowed group.

Before you start

Verify that you have Site Owner or Full Control permissions for the SharePoint site and the specific document library before modifying permission inheritance.

Solution 1Recommended

Break Inheritance and Remove Unique User Permissions

To restrict a specific user, you must remove them from the group, break the library's permission inheritance, and manually assign access.

Because SharePoint does not support explicitly denying access to a single user within a permitted group, you must handle this by breaking inheritance on the library. This involves removing the user from the SharePoint group, assigning them separate site-level permissions if necessary, and then stripping their access from the specific document library.

Remove the user from the SharePoint group

Navigate to your site's group settings and remove the specific user from the SharePoint group that currently grants them access to the document library.

Grant site-level access separately

Go to Site settings > Site permissions > Advanced permissions settings. Grant the user the appropriate site-level permissions directly so they can still access the main site.

Open library settings

Navigate to the document library you want to restrict, click the gear icon for Settings, and select 'Library settings' or 'More library settings'.

Access library permissions

Under the Permissions and Management section, select 'Permissions for this document library'.

Stop inheriting permissions

In the Permissions ribbon at the top, click 'Stop inheriting permissions'. This creates a unique permission environment specifically for this library.

Remove the user's library access

Select the user from the list of permitted individuals, and click 'Remove User Permissions' in the ribbon. The user will now be blocked from the library but can still access the parent site.

Break Inheritance and Remove Unique User Permissions

Administration Overhead: Be careful when breaking inheritance. Creating unique permissions for individual libraries can significantly increase long-term administration overhead when managing site security.

Free Microsoft Office alternative

Manage Your Documents with WPS Office

While resolving complex SharePoint permissions, consider using WPS Office as a lightweight, highly compatible alternative for creating, editing, and collaborating on your important documents.

1. Download and Install: Get WPS Office for free from the official website and install it on your Windows, Mac, or Linux device.
2. Open Your Documents: Launch WPS Office and directly open your existing Word, Excel, or PowerPoint files without losing formatting.
3. Edit and Save: Use the comprehensive editing tools to manage your documents securely and save them locally or to your preferred cloud storage.

Completely free and lightweight office suiteHigh compatibility with Microsoft Office formats (DOCX, XLSX, PPTX)Familiar and intuitive user interface requiring no learning curveSeamless local file management and multi-platform support

microsoft office alternative - wps office

Frequently Asked Questions

Can I explicitly deny access to a user in SharePoint?

No, SharePoint does not use an explicit 'Deny' permission system for individuals within groups. You must manage access by breaking inheritance and specifically granting or removing user permissions.

What happens when I click 'Stop inheriting permissions'?

Clicking this disconnects the library's security settings from the parent site. Any future permission changes made at the site level will no longer automatically apply to this specific document library.

How do I restore permission inheritance if I make a mistake?

In the library permission settings, you can click 'Delete unique permissions' in the ribbon. This will erase the custom settings and restore the inherited permissions from the parent site.

Document & File Issues