1
00:00:03,940 --> 00:00:05,140
[Autogenerated] Hi. In this lesson, we're

2
00:00:05,140 --> 00:00:07,260
going to examine permission levels in

3
00:00:07,260 --> 00:00:10,000
SharePoint. We're here on our sales team

4
00:00:10,000 --> 00:00:13,360
site. You can see it is a private group

5
00:00:13,360 --> 00:00:15,750
connected site. When we want to look at

6
00:00:15,750 --> 00:00:17,440
the permission levels, UI go up here to

7
00:00:17,440 --> 00:00:19,640
the upper right to our settings gear,

8
00:00:19,640 --> 00:00:22,720
click on site permissions and come down to

9
00:00:22,720 --> 00:00:26,150
the advanced permission settings. Now we

10
00:00:26,150 --> 00:00:29,230
see our permission groups and we see which

11
00:00:29,230 --> 00:00:31,240
permission levels they're using edit full

12
00:00:31,240 --> 00:00:34,170
control and read full control is pretty

13
00:00:34,170 --> 00:00:37,420
obvious. But edit and read. What exactly

14
00:00:37,420 --> 00:00:40,610
do those mean? When we wanna look at the

15
00:00:40,610 --> 00:00:43,940
permission levels and see exactly what

16
00:00:43,940 --> 00:00:46,410
permissions everybody has? We're gonna go

17
00:00:46,410 --> 00:00:49,490
to permission levels here on the manage

18
00:00:49,490 --> 00:00:51,880
tab of the ribbon. We're gonna click

19
00:00:51,880 --> 00:00:55,600
there, and we see these five permission

20
00:00:55,600 --> 00:00:58,220
levels that were added when the site was

21
00:00:58,220 --> 00:01:00,340
corrected. These are the default

22
00:01:00,340 --> 00:01:03,140
permission levels. Full control, like I

23
00:01:03,140 --> 00:01:05,550
said, is pretty self explanatory. If we

24
00:01:05,550 --> 00:01:09,090
click on it, we see the full list off 33

25
00:01:09,090 --> 00:01:11,300
permissions that we have here in

26
00:01:11,300 --> 00:01:14,490
SharePoint. And they're all selected for

27
00:01:14,490 --> 00:01:17,020
full control, which is exactly what we

28
00:01:17,020 --> 00:01:23,170
would expect. Now, let's take a look at

29
00:01:23,170 --> 00:01:25,770
these descriptions for design conf. You

30
00:01:25,770 --> 00:01:28,280
add update, delete, approved and

31
00:01:28,280 --> 00:01:31,640
customize. Customize is the big one for

32
00:01:31,640 --> 00:01:33,850
the design permission. It gives the user

33
00:01:33,850 --> 00:01:37,230
the ability to customize the SharePoint

34
00:01:37,230 --> 00:01:40,420
pages, the edit Permission canal, add

35
00:01:40,420 --> 00:01:44,150
edit, delete lists and remember by lists.

36
00:01:44,150 --> 00:01:47,450
It also means libraries. They can also

37
00:01:47,450 --> 00:01:50,950
view, add update and delete list items and

38
00:01:50,950 --> 00:01:53,040
documents. Let's take a closer look. We're

39
00:01:53,040 --> 00:01:58,200
gonna click on edit, and we see now the

40
00:01:58,200 --> 00:02:01,260
permissions, and it has a lot of them. It

41
00:02:01,260 --> 00:02:03,520
doesn't have override list behaviors

42
00:02:03,520 --> 00:02:06,890
that's missing from edit and approve items

43
00:02:06,890 --> 00:02:09,300
on Lee. Owners with full control can

44
00:02:09,300 --> 00:02:13,630
approve items. Editors also don't have

45
00:02:13,630 --> 00:02:16,970
several site permissions as well. All of

46
00:02:16,970 --> 00:02:19,440
these are unchecked. And these air some of

47
00:02:19,440 --> 00:02:21,540
the design things apply. Themes apply.

48
00:02:21,540 --> 00:02:26,300
Style sheets, create sub sites, manage

49
00:02:26,300 --> 00:02:29,430
permissions again on Lee for site owners,

50
00:02:29,430 --> 00:02:33,920
which is good, and analytics data. So

51
00:02:33,920 --> 00:02:35,290
these are a lot of good things that you

52
00:02:35,290 --> 00:02:40,050
just want to give to the site owner manage

53
00:02:40,050 --> 00:02:43,540
alerts. You don't want somebody deleting

54
00:02:43,540 --> 00:02:46,100
alerts that the owner has set up and the

55
00:02:46,100 --> 00:02:49,440
rest of these air all checked. Okay, Now

56
00:02:49,440 --> 00:02:51,620
let's go back to that contribute

57
00:02:51,620 --> 00:02:54,330
permission. Contribute is this is one of

58
00:02:54,330 --> 00:02:56,040
the ones I always have a problem with. I

59
00:02:56,040 --> 00:02:59,100
don't like this permission level. Let's

60
00:02:59,100 --> 00:03:02,650
take a look when we go and look at the

61
00:03:02,650 --> 00:03:05,740
contribute level. I'm gonna tell you the

62
00:03:05,740 --> 00:03:08,260
Onley thing that's different about this

63
00:03:08,260 --> 00:03:12,340
from the edit permission is this one here?

64
00:03:12,340 --> 00:03:14,540
Managed lists. Somebody with the

65
00:03:14,540 --> 00:03:17,790
contribute permission level cannot create

66
00:03:17,790 --> 00:03:20,250
in delete lists or libraries and add or

67
00:03:20,250 --> 00:03:22,980
remove columns in the list or remove

68
00:03:22,980 --> 00:03:24,980
public views. Okay, that's good. I don't

69
00:03:24,980 --> 00:03:27,270
have a problem with that, But everything

70
00:03:27,270 --> 00:03:31,130
else is exactly the same as the edit

71
00:03:31,130 --> 00:03:33,640
permission. And one of the ones that I

72
00:03:33,640 --> 00:03:36,660
kind of have problems with is things like

73
00:03:36,660 --> 00:03:39,640
delete versions. I don't necessarily want

74
00:03:39,640 --> 00:03:44,240
a contributor to delete versions. The

75
00:03:44,240 --> 00:03:46,050
other thing I don't necessarily want a

76
00:03:46,050 --> 00:03:48,420
contributor to be able to do is delete

77
00:03:48,420 --> 00:03:53,770
items, either. So these are and again it's

78
00:03:53,770 --> 00:03:57,510
just my personal pet peeve. But these air

79
00:03:57,510 --> 00:04:00,970
things I like to not give somebody with a

80
00:04:00,970 --> 00:04:03,090
contribute permission and then we have

81
00:04:03,090 --> 00:04:05,840
read and read is pretty self explanatory.

82
00:04:05,840 --> 00:04:08,980
Read pretty much just allows people to

83
00:04:08,980 --> 00:04:12,530
view items, open them in view versions,

84
00:04:12,530 --> 00:04:17,540
then create alerts, but everything else

85
00:04:17,540 --> 00:04:21,970
view pages browse information everything

86
00:04:21,970 --> 00:04:24,100
else is pretty much shut off to the

87
00:04:24,100 --> 00:04:29,240
readers. Now, there's one more thing I

88
00:04:29,240 --> 00:04:30,680
want you to be aware of. We're gonna go

89
00:04:30,680 --> 00:04:33,870
back to our permissions groups now. This

90
00:04:33,870 --> 00:04:39,440
is a private group site. Okay, When we go

91
00:04:39,440 --> 00:04:42,570
to the sales team, site Owners Permission

92
00:04:42,570 --> 00:04:47,690
Group, we see that that Microsoft 3 65

93
00:04:47,690 --> 00:04:51,360
group team site members is in the owners

94
00:04:51,360 --> 00:04:54,140
group. The owners SharePoint Permission

95
00:04:54,140 --> 00:04:58,570
group. So everybody who is a member off

96
00:04:58,570 --> 00:05:05,740
this site has full control permissions.

97
00:05:05,740 --> 00:05:07,740
And that may or may not be an issue for

98
00:05:07,740 --> 00:05:11,340
you, but I want you to be aware of that.

99
00:05:11,340 --> 00:05:13,460
SharePoint does that automatically with

100
00:05:13,460 --> 00:05:18,700
groups sites. Now, if we go to our

101
00:05:18,700 --> 00:05:21,870
wellness site, this is a public group

102
00:05:21,870 --> 00:05:24,770
site. Remember that our sales team was a

103
00:05:24,770 --> 00:05:27,040
private group site. This is a public group

104
00:05:27,040 --> 00:05:29,030
site. Now there's another thing here I

105
00:05:29,030 --> 00:05:35,240
want you to be aware of. Wellness members

106
00:05:35,240 --> 00:05:39,000
on a public site are not added to the

107
00:05:39,000 --> 00:05:41,590
owners group. They are added to the

108
00:05:41,590 --> 00:05:44,190
members group, so they have edit

109
00:05:44,190 --> 00:05:49,340
permissions. Members of the wellness site

110
00:05:49,340 --> 00:05:51,070
are here in the members group. They have

111
00:05:51,070 --> 00:05:53,440
at a permissions. But the thing that you

112
00:05:53,440 --> 00:05:57,240
might find disturbing is that this

113
00:05:57,240 --> 00:06:01,600
Microsoft 3 65 group everyone except

114
00:06:01,600 --> 00:06:05,400
external users is also in the members

115
00:06:05,400 --> 00:06:09,940
group. So everybody in your organization

116
00:06:09,940 --> 00:06:13,900
who has access to Microsoft 3 65 now as

117
00:06:13,900 --> 00:06:17,750
editor permissions on this group. That's

118
00:06:17,750 --> 00:06:21,140
something you may or may not want again.

119
00:06:21,140 --> 00:06:23,300
You can always take this group out and put

120
00:06:23,300 --> 00:06:26,530
it somewhere else. But by default, that's

121
00:06:26,530 --> 00:06:30,050
what's happening in the last one, our I T

122
00:06:30,050 --> 00:06:34,900
operations. This is a traditional site

123
00:06:34,900 --> 00:06:41,540
collection in SharePoint and in here.

124
00:06:41,540 --> 00:06:46,380
Microsoft 3 65 does not automatically add

125
00:06:46,380 --> 00:06:53,500
anybody to these groups. You have to

126
00:06:53,500 --> 00:06:57,450
manually add them. But if you go here and

127
00:06:57,450 --> 00:07:05,210
you do add somebody to the site, if I add

128
00:07:05,210 --> 00:07:06,910
somebody the site owners, members or

129
00:07:06,910 --> 00:07:09,860
visitors, they will be added to those

130
00:07:09,860 --> 00:07:12,860
groups. So now you know a little bit more

131
00:07:12,860 --> 00:07:15,440
about permission levels in SharePoint.

132
00:07:15,440 --> 00:07:25,000
That's it for this lesson. Thanks for listening, and I'll see you next time