'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Prevent SharePoint Members from Changing Site Permissions
Question details
The user needs to restrict SharePoint site members or editors from modifying site permissions to prevent security risks and unauthorized access.
- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- Managing site security, user access levels, and role permissions within a SharePoint environment.
- Observed behavior
- Site members or editors are currently able to alter site permissions, a function that should be strictly restricted to administrators or site owners.
Ensure you have Site Owner or SharePoint Administrator privileges before attempting to modify site permission settings, group memberships, and inheritance rules.
Review Site Groups and Permission Levels
Verify that site members are not accidentally assigned to the Site Owners group or given Full Control permission levels.
The most common reason members can change permissions is that they have been assigned a permission level that includes the 'Manage Permissions' right. Standard members should only have 'Edit' or 'Contribute' access.
Click on the gear icon (Settings) in the top right corner of your SharePoint site and select 'Site permissions'.
Click on 'Advanced permissions settings' at the bottom of the pane to view the classic permissions page.
Select the 'Members' group and ensure users are assigned the 'Edit' or 'Contribute' level, not 'Full Control' or 'Design', which might allow permission management.
Investigate Permission Inheritance on Subsites and Libraries
Broken permission inheritance on specific document libraries or subsites can sometimes grant unintended elevated rights to standard members.
Document and Escalate to a SharePoint Administrator
If permission settings appear correct but the issue persists across multiple sites, a tenant-level misconfiguration might be the cause.
Secure Your Documents Locally with WPS Office
SharePoint permission issues can be complex to navigate. For a straightforward, secure, and lightweight alternative to Microsoft Office, try WPS Office. It provides robust document encryption, seamless formatting compatibility, and an easy-to-use interface for offline and cloud document management without complicated permission hierarchies.
- 1. Download and Install: Visit the official WPS Office website to download the free installer for your operating system.
- 2. Open Your Documents: Launch WPS Office and seamlessly open your existing Microsoft Office (.docx, .xlsx, .pptx) files.
- 3. Apply Document Protection: Go to the 'Menu' > 'Document Encryption' to easily set passwords and restrict editing permissions locally.
Frequently Asked Questions
Why are my SharePoint site members able to share files and change permissions?
By default, SharePoint allows site members to share files and sometimes invite others. If they can change core permissions, they may have been accidentally assigned to the Site Owners group or given 'Full Control' instead of 'Edit' or 'Contribute' access.
What is the difference between Edit and Contribute permission levels in SharePoint?
The 'Contribute' level allows users to view, add, update, and delete list items and documents. The 'Edit' level includes all 'Contribute' rights, plus the ability to manage, add, and delete lists and document libraries. Neither default level allows managing site permissions.
How do I stop members from sharing the SharePoint site with external users?
Go to Site permissions > Advanced permissions settings > Access Request Settings. Uncheck the option that allows members to share the site and individual files or folders, restricting sharing capabilities to Site Owners only.
How can I check exactly who has access to my SharePoint site?
Navigate to Site Settings and click on 'Site permissions'. Then, click 'Advanced permissions settings' and use the 'Check Permissions' button in the ribbon to type a user's name and see their exact permission level and how it was granted.
