Controlling access to content.
WHAT PERMISSION LEVELS EXIST
Read, contribute, edit, design and full control, broadly.
WHAT TO ASSIGN PERMISSIONS TO
Groups, never individuals.
WHY
Individual permissions accumulate and are never removed.
WHAT INHERITANCE MEANS
Permissions flowing from a site to its libraries and items.
WHAT BREAKING INHERITANCE DOES
Allows different permissions on a specific item or library.
WHY TO AVOID IT
It becomes impossible to establish who can see what.
WHAT TO DO INSTEAD
Separate content requiring different access into different sites.
WHAT TO REVIEW
Who has access to each site, periodically Sharing links, particularly anonymous ones Guest access
WHAT SHARING LINKS DO
Grant access outside normal permissions.
WHAT THAT MEANS
Permissions alone do not tell you who can reach content.
WHAT TO CONFIGURE
Default link type, and whether anonymous links are permitted at all Link expiry, where anonymous links are allowed
WHAT TO DO WHEN SOMEONE LEAVES
Review what they shared, and revoke it.
WHAT TO AVOID
Granting access to everyone as a shortcut.
