1
00:00:02,787 --> 00:00:05,487
Now that we have viewed how to manage both

2
00:00:05,487 --> 00:00:09,342
sites and hub sites, let's take a look at

3
00:00:09,342 --> 00:00:12,215
permissions. In a SharePoint site, you

4
00:00:12,215 --> 00:00:14,787
really have four main permission levels,

5
00:00:14,787 --> 00:00:17,412
and the first one is this site

6
00:00:17,412 --> 00:00:20,009
administrator who has full control on

7
00:00:20,009 --> 00:00:22,787
everything inside the site, can activate

8
00:00:22,787 --> 00:00:25,072
site features, and also, those

9
00:00:25,072 --> 00:00:27,387
administrators receive the emails on

10
00:00:27,387 --> 00:00:30,787
various notifications, such as if the site

11
00:00:30,787 --> 00:00:33,644
quota is going to be reached. After that,

12
00:00:33,644 --> 00:00:37,287
we have the site owners. Site owners can

13
00:00:37,287 --> 00:00:40,587
manage site permissions and really manage

14
00:00:40,587 --> 00:00:43,587
site artifacts. What I mean by that is

15
00:00:43,587 --> 00:00:45,787
that they can create, update, delete

16
00:00:45,787 --> 00:00:48,787
lists, library content types, and more,

17
00:00:48,787 --> 00:00:51,537
but they cannot, for example, activate

18
00:00:51,537 --> 00:00:55,787
site collection features. Under that, we

19
00:00:55,787 --> 00:00:59,072
have site members who have edit

20
00:00:59,072 --> 00:01:02,587
permissions on the site. They can create

21
00:01:02,587 --> 00:01:06,187
lists, libraries, and, of course, create

22
00:01:06,187 --> 00:01:09,587
content. Lastly, we have site visitors who

23
00:01:09,587 --> 00:01:13,987
only have read-only permissions. Now, who

24
00:01:13,987 --> 00:01:17,287
cannot assign what? First, primary and

25
00:01:17,287 --> 00:01:20,120
secondary site administrators need to be

26
00:01:20,120 --> 00:01:22,787
assigned by a SharePoint Online admin.

27
00:01:22,787 --> 00:01:26,187
Other site administrators can be added by

28
00:01:26,187 --> 00:01:28,412
the site administrators themselves, but

29
00:01:28,412 --> 00:01:32,787
really, only the primary or secondary ones

30
00:01:32,787 --> 00:01:36,187
need to be done by the admin center by a

31
00:01:36,187 --> 00:01:38,287
SharePoint Online admin. Site owners can

32
00:01:38,287 --> 00:01:41,537
be added by site administrators or higher,

33
00:01:41,537 --> 00:01:44,787
and site members can be added by other

34
00:01:44,787 --> 00:01:47,787
site members or anything above that.

35
00:01:47,787 --> 00:01:50,987
Lastly, site visitors can be added by site

36
00:01:50,987 --> 00:01:55,564
members or higher. So now, how do we

37
00:01:55,564 --> 00:01:58,037
change the primary administrators? Those

38
00:01:58,037 --> 00:02:00,940
can be done via the admin center. So we go

39
00:02:00,940 --> 00:02:04,402
on the Active sites, choose a site, go on

40
00:02:04,402 --> 00:02:08,287
Owners, and then we can do Change primary

41
00:02:08,287 --> 00:02:12,037
admin or Change other administrators. If

42
00:02:12,037 --> 00:02:14,453
we want to do it via PowerShell, now, to

43
00:02:14,453 --> 00:02:17,501
change the primary owner, we would run the

44
00:02:17,501 --> 00:02:19,787
Set-SPOSite PowerShell cmdlet, specify the

45
00:02:19,787 --> 00:02:23,787
identity of the site and the new owner,

46
00:02:23,787 --> 00:02:26,241
and if we want to add a new site

47
00:02:26,241 --> 00:02:28,501
collection administrator, you would use

48
00:02:28,501 --> 00:02:30,787
this Set-SPOUser PowerShell cmdlet,

49
00:02:30,787 --> 00:02:33,696
specify the site, the login name of the

50
00:02:33,696 --> 00:02:41,000
new site owner, and the IsSiteCollectionAdmin parameter to True.