Suggested permission structure for collaboration site

Avatar
Matthew McBride
Follow

Hi there,

Could you explain how you suggest your product would be used in terms of permissions for the sites that are created? We're looking for a solution that allows us to create multiple project sites, where the people requesting the site creation would not have the ability to create sub-sites in any way. We would however want them to retain full control of all other aspects of the site, such as permissioning, creating of Lists, Libraries etc.

How would the permission structure of MOSS work in conjunction with your product to achieve this?

Many thanks

Gavin

Have more questions? Submit a request

3 Comments

Date Votes
  • 0
    Avatar
    Matthew McBride

    Here is the most common approach for this type of configuration.

    1. Create a custom permission level in your SharePoint environment. Remove the 'Create Subsites' permission.You could may also choose to edit the existing permission levels like Contribute and Read.
    2. Create a new Group Configuration Provisioning Template (Site Actions -> Site Settings -> Provisioning Template Providers -> New). This provisioning template is used to create SharePoint Groups and assign permission these groups when a new site is created. Specify the SharePoint Groups you would like to have created after a new site is provisioned. Use the existing Site Groups provisioning Template as a guide. (Note, if you SPA version is older than 1.0.9238.1  don't forget to refresh your providers, Actions -> Refresh Providers)
    3. Create a new Provisioning Profile and select your new Group Configuration Provisioning Template.

    When this provisioning profile is used to create sub-sites users will have a modified permission level that does not contain the 'Create Subsites' permission.

  • 0
    Avatar
    Matthew McBride

    Thanks for that, this is what I thought would be the intended approach.

    However, if the user then has permission to change permissions, can they not assign themselves Full Control at a later stage and therefore give themselves the ability to create Sub-Sites again?

    In this case, would the only solution to also be to remove their permission to change Site Permissions?

  • 0
    Avatar
    Matthew McBride

    Also, am I correct in assuming that it would be possible to create some sort of workflow to make the requester the Site Owner?

Please sign in to leave a comment.