Category: Sharepoint

User Permission In Sharepoint 2013 – Permission level is always confusing for SharePoint beginners. By this article, I am going to make it easier.

Our first step is to add users in SharePoint site and there are couples of ways you can do this. Users can be added using – Settings menu >> Site settings >> People and groups:

By default “softechword members” group is selected. But we are not going to add user’s members so select “Softechword visitors” group. You can select “New” to add users in visitor group. Popup appears. Search user by name and add in group.

As we do not allow external access of SharePoint site so any user which you want to add must have workspace username and password. If your requirement to delete a user from a group, select user which you want to delete from items and click on action >> Remove users from Group. Same actions you can use for add owners and other group users.

The next question is how we can check group permission. To understand this go back to site settings >> site permissions. You can find all available groups are listed over there. More custom groups can be added with site permission accordingly. You can see in ribbon check permission button to check user permission. It will show user permission levels for SharePoint site.

Using Grant Permissions button uses to grant permissions level or direct permissions to a particular user. There is one important ribbon button “Site Collection Administrators”. “Site Collection Administrators” has full control over all site lists/ libraries/ documents etc. So “Site Collection Administrators” has access to everything in SharePoint. So if you want to add more user as site collection administrator, you can add using “Site Collection Administrators”.

Next one is “Permission level”. A permission level is basically what you can assign to a group or what you can assign to a User.

In other word you can say a permission level is collection of small permissions. Here by you can add/modify permission level. It is not recommended to modify any default permission level. But you can add new permission level using available small permissions. There are three blocks of small permissions of SharePoint are List permissions, Site permissions and Personal permissions. Easier way to create a permission level is just copy a default permission level and customizes it as per your required new permission level.

Next topic is to set unique permission to a document library. So click on document and select library tab and click on shared with.

You can see list of users to whom this document is shared with. Here by you can also invite more users for view or edit documents.

Go library settings >> Permissions for this document library.

At the top yellow line warning says “this library inherits permissions form it parents”. But we want to set unique permission for this document library and do not to share with everyone. Let’s do that. From ribbon menu, click on “Stop Inheriting Permissions” to stop inheriting permission from site.

First you need to remove all existing associated permission groups for this library. Select all and click “Remove User Permissions” from ribbon. After removing you can check user permissions using “Check permission” to verify which user has permission for this document library. So to assign new permission, click on “Grant Permissions” from ribbon and search user to assign.

You can grant direct permission to users. As unique permission is granted to user, no other user can see document library even if this library is added on home page.

New step is to grant permissions to only few folders or documents within document library. So let’s do that. Go back to document library and click “Library Settings” from ribbon. First of all you need to delete unique permission to reset permissions for document library.

As you deleted unique permissions, it once again inherits from parents. And all permission levels will be back in list. Now go back to document library.

And click on three ellipse and scroll down to “Shared with”.

You can click on “advanced” and now you again see yellow warning “this document inherits permissions form parent”. We don’t want parent permissions for this document so stop inheriting permission and remove all listed groups over there like we did previously while we were assigning unique permissions. So select “Stop inheriting permission” from ribbon, selects all listed permission group and click “Remove User Permissions” from ribbon. Now click “Grant Permissions” from ribbon and use same process as we did previously to grand permission to a selected user. Now only selected user can see folder in document list. Let’s check that. Go on Document >> Library Settings >> Permissions for this library.

In yellow warning you can see “Some items in this list may have unique permissions which are not controlled from this page. This library inherits permissions from its parents”. To see which items has unique permission click on “Show these items”

It means that this library inherits permissions from parent. But some of items in this library do not.  Click on manage permission. You can see which user has full control over ADMINFOLDER.

So we learnt how to create permissions group, assign unique permissions to document library/ sites, and assign unique permission to a particular document/folder or item in library. Same processes you can use to assign permission to any SharePoint object.

That’s it. I can share in this article regarding SharePoint Permissions level. Hope it helps you. Thanks.

Connect SharePoint Online using – As a beginner SharePoint developer, you may face problem while connecting SharePoint Online using SharePoint Designer. In this post, I am going to share some steps which will make your life easier.
Download SharePoint designer using SharePoint Online, and install on your local machine.


In case of on premises SharePoint server, SharePoint designer uses to open sites directly. But in case of SharePoint Online, we might get message “You do not have permission to open this website in SharePoint Designer.”

Above screens are examples which you will face while connecting to SharePoint Online server.

Here are some settings we need to do before we connect to SharePoint Online.

Step 1:  Default scripting capability settings are set to “Prevent users from running custom script on personal site/self-service created sites”. Because of this, custom script will be blocked in site and also for some web parts like, content editor (CEWP) & script editor web part (SEWP). This setting is essential for running all web parts properly/ or adding scripts using SharePoint Designer.

Navigate to Office  365> Admin  >  Admin Center  > SharePoint  > Settings .

Open SharePoint Online Admin Center, and allow these settings.

Step 2: Download SharePoint Online Management Shell, and install on same machine where SharePoint designer is already installed.
Note: SharePoint Online Management Shell is a tool that contains a Windows PowerShell Module to manage your SharePoint Online subscription in the Office 365.
Step 3: Run SharePoint Management Shell, and execute these commands-

Connect-SPOService -Url https://contoso-admin.sharepoint.com -credential admin@contoso.com

-Url : Pass Sharepoint Online site url.
-Credential : Admin user Name/ Password(It will prompt screen for enter password).
Following link you can visit for reference:
https://technet.microsoft.com/en-us/library/fp161392.aspx
https://technet.microsoft.com/en-us/library/fp161372.aspx

If command does not return any error, execute next one:

Set-SPOSite -Identity https://.sharepoint.com -DenyAddAndCustomizePages $false

You have to make sure scripting setting in the admin matches what you set using SharePoint Online PowerShell or the site collection setting, may be overridden again in next day cycle (24 hours).
Hope you like this article.
Thanks.

Configure Alternate Access For Mappings – In this article you will learn how to configure alternate access mappings in SharePoint 2013. Each of  web application can be associate with a collection of mappings between internal and public URLs. Both  the URLs internal and public consist of the protocol and domain portions of the full URL.

A public URL is what users can access the SharePoint site, and that URL is what appears in the links on the pages. Internal URLs is in the URL requests that sent to the SharePoint site. Many internal URLs can be associated with a single public URL it means we can use many internal URL’s for single public URL.

Each web application supports five collections of mappings per URL. The five collections correspond to five zones (default, intranet, extranet, Internet, and custom). When the web application receives a request for an internal URL in a particular zone, links on the pages returned to the user have the public URL for that zone.

How To Manage alternate access mappings

1. On the SharePoint Central Administration website, click on System Settings And then.
2. On System Settings page, in the Farm Management section, click  on Configure alternate access mappings.

Adding an internal URL for mapping

1. On the Alternate Access Mappings page, click to  Add Internal URLs.
2. In the mapping collection you want to change is not specified, then choose one. In the Alternate Access Mapping Collection section, on the Alternate Access Mapping Collection menu, click on Change alternate access mapping collection.
3. On the Select an Alternate Access Mapping Collection page, click a mapping collection.
4. In the Add internal URL section, in the URL protocol, host and port box, type the new internal URL (www.example.com)
5. In the Zone list, click the zone for the internal URL.
6. Click Save.

Edit and delete internal URL for mapping

1. On the Alternate Access Mappings page, click the internal URL that you want to edit or delete.
2. In the Edit internal URL section, change the URL in the URL protocol, host and port box.
3. In the Zone list, click the zone for the internal URL.
4. Do one of the following:
   • Click Save to save your changes.
   • Click Cancel to discard your changes and return to the Alternate Access Mappings page.
5. Click Delete to delete the internal URL.

Edit public URLs for mapping

1. On the Alternate Access Mappings page, click Edit Public URLs.
2. If the mapping collection that you want to change is not specified, then choose one. In the Alternate Access Mapping Collection section, on the Alternate Access Mapping Collection menu, click Change alternate access mapping collection.
3. On the Select an Alternate Access Mapping Collection page, click a mapping collection.
4. In the Public URLs section, you can add new URLs or edit existing URLs in any of the following text boxes:
   • Default
   • Intranet
   • Extranet
   • Internet
   • Custom
5. Click Save.

Map an external resource url

You can also define mappings for resources outside intranet applications. You must supply a unique name for URL, The initial URL, and a zone for that URL. The URL you request must be unique to the farm.

1. On the Alternate Access Mappings page, click to Map to External Resource.
2. Next click on Create External Resource Mapping page, in the Resource Name box, type a unique name.
3. In the URL protocol, host and port box, type the initial URL.(www.example.com)
4. Click Save.