29 October, 2018
When you create a subsite, you can choose whether to inherit the permissions from the parent Web site or to create unique permissions for your subsite. Depending on your choice, you get different results:
If you set up your subsite with unique permissions, but find that you need to share permissions with your parent Web site instead, you can switch to inherited permissions. There are some drawbacks to making this switch, however, such as:
You can also switch from using inherited permissions to using unique permissions. In this case, the transition is simpler. The current permissions are duplicated when you switch, and the link to the parent Web site's permissions structure is broken. From that point on any changes you make to the permissions affect only the subsite. When you switch from inherited to unique permissions, per-list permission settings remain intact.
|Switching between permissions models can create some strange scenarios. For example, any user who has the Create Sub sites right can create a subsite. By default this right is included only in the Administrator site group, but if you assign it to another site group, members of that group can create sub sites with unique permissions and become administrators of the new sub sites. If such a user then chooses to switch to using the parent Web site's permissions, the user will no longer be an administrator of the subsite.|
You use the Site Administration page for your subsite to switch to a different permissions model.
If you want to return to using the same permissions as the parent Web site, you can also change back by using HTML Administration pages.
Interested in mastering SharePoint Training? Enroll now for FREE demo on SharePoint Training.
By default, when Self-Service Site Creation is enabled, all members of the Reader, Contributor, Web Designer, and Administrator site groups have the Use Self-Service Site Creation right. They can use this right to create a top-level Web site on a virtual server from the Create Web Site page. Another right, the Create Subsites right, is available to members of the Administrator site group by default. This right allows the user to create a subsite or a Workspace site from the Create page or the Manage Sites and Workspaces page. You control which users have the Use Self-Service Site Creation right by changing the rights in a site group. You can control which users have the ability to create sites and Workspace sites by changing which site groups have the Create Sub sites right, or by using the Configure Site and Workspace Creation page in Site Settings. You must be a member of the Administrator site group for a site to control these rights.
SharePoint 2010 Permissions for Site Owners – Part 1: Creating a Team Site When creating a team site, you have two options: create the site with unique or a inherited permissions. If you create a site with unique permissions, the link between this site and the site it was created under (the parent site) is broken. You can have different permissions on both sites. If you create a site with same permissions as parent site, it means it is inherited permissions. That means that whatever happens on the site above it affects this site as well. And vice versa. If this example below was a collection of team sites, changing permissions in any of the green blocks affects all the green blocks up and down the structure. Creating sites with inherited permissions is fine for intranet sites – sites that are open to everyone in the organization. It’s a different story on team sites – sites that are ring-fenced to a specific department / team. Only very advanced users can successfully manage team sites using inherited permissions. The normal business user who has a day job will battle to manage a structure comprised of inherited permissions. Make sure you plan your sites carefully so as to know which options to choose when. When selecting unique permissions for a new team site, you will be prompted to create the new groups for the site. The default groups are Members, Owners and Visitors. Note what happens to the Visitors group. It automatically inherits the Visitors group from the site above it even though we have specified unique permissions. SharePoint is thinking on your behalf and assuming you want all the visitors from another site to see this site. No! Make sure you click on Create a New Group first! (If you’ve slipped up and already created the site, and the site is still empty, it’s easier to just delete the site and start again). When you click Create a New Group, the three group names will all have the same naming convention which matches the name of the site. You don’t add people to the site now! What are you adding them to? You create and build your site first, and add users last – keeping in mind how permissions works so you can structure your site correctly. With your site created, go back to Site Actions – Site Permissions to view the settings.
SharePoint 2010 Permissions for Site Owners – Part 2: Members, Owners and Visitors The three default user groups created with each team site created with unique permissions are Site Members, Site Owners, Site Visitors. (This is also valid for SharePoint 2007, the ribbon and site actions options are applicable to SharePoint 2010 though).
You don’t need to add people to all three groups. If they are Owners, they will already be able to edit and view content. If they are Members, they will already be able to view content. But what can the people in these groups see? The actions they have no rights to are grayed out on the ribbons. The Site Actions menu is security trimmed so that they will only see actions they do have rights to. Site Members -- Site Actions Library tab in the Ribbon Site Owners -- Site Actions Library tab in the ribbon Site Visitors -- Site Actions Library tab on the ribbon For Indepth understanding of SharePoint click on
TekSlate is the best online training provider in delivering world-class IT skills to individuals and corporates from all parts of the globe. We are proven experts in accumulating every need of an IT skills upgrade aspirant and have delivered excellent services. We aim to bring you all the essentials to learn and master new technologies in the market with our articles, blogs, and videos. Build your career success with us, enhancing most in-demand skills .