Now that we have viewed how to manage both
sites and hub sites, let's take a look at
permissions. In a SharePoint site, you
really have four main permission levels,
and the first one is this site
administrator who has full control on
everything inside the site, can activate
site features, and also, those
administrators receive the emails on
various notifications, such as if the site
quota is going to be reached. After that,
we have the site owners. Site owners can
manage site permissions and really manage
site artifacts. What I mean by that is
that they can create, update, delete
lists, library content types, and more,
but they cannot, for example, activate
site collection features. Under that, we
have site members who have edit
permissions on the site. They can create
lists, libraries, and, of course, create
content. Lastly, we have site visitors who
only have read-only permissions. Now, who
cannot assign what? First, primary and
secondary site administrators need to be
assigned by a SharePoint Online admin.
Other site administrators can be added by
the site administrators themselves, but
really, only the primary or secondary ones
need to be done by the admin center by a
SharePoint Online admin. Site owners can
be added by site administrators or higher,
and site members can be added by other
site members or anything above that.
Lastly, site visitors can be added by site
members or higher. So now, how do we
change the primary administrators? Those
can be done via the admin center. So we go
on the Active sites, choose a site, go on
Owners, and then we can do Change primary
admin or Change other administrators. If
we want to do it via PowerShell, now, to
change the primary owner, we would run the
Set-SPOSite PowerShell cmdlet, specify the
identity of the site and the new owner,
and if we want to add a new site
collection administrator, you would use
this Set-SPOUser PowerShell cmdlet,
specify the site, the login name of the
new site owner, and the IsSiteCollectionAdmin parameter to True.