Subsite Permission

Question

Hi,

I want to create an site owner permission on a subsite which has the inherits permissions from its parent home site.  For example, my home site is named "Home" and my subsite is "Accounting" which is a department site for Accounting group. 

When I granted the CFO to be the owner of the Accounting subsite, he has the owner permission of my main "Home" site as well.  I do not want him to have the site owner permission on the "Home" site. 

Do I need to break the inherits permissions on the "Accounting" subsite?  If that is the case, each time I hire a new employee from Accounting department, I have to grant the new hire to have access to "Accounting" subsite as well.  Is there an alternative?

Thanks,

Brian.

---

Brian

Answer 1

Do I need to break the inherits permissions on the "Accounting" subsite?  If that is the case, each time I hire a new employee from Accounting department, I have to grant the new hire to have access to "Accounting" subsite as well.  Is there an alternative?

Yes, you will have to break inheritance if you do not want the CFO as the owner of the Home site. There is no alternative. To make things easier, you can create Accounting group in AD, and add that group as owners for Accounting sub site. Then each time you have a new employee, simply add them to the AD group.

---

Sid Kothari | MCITP, SharePoint 2010
If a post answers your question, please click "Mark As Answer" on that post and "Vote as Helpful"

Answer 2

Hi,

If you want unique permission for your subsite then only break inheritence. but if you just want to remove CFO as owner from home then just remove him from home site owner group and add him to subsite as owner or owner group.

rest you can create dedicated SharePoint owner group for your subsite and add new employee to that sharepoint group.

hope this will help..

---

thanksArup MCTS - SharePoint

Play Sudoku Online

Answer 3

Hi Sid,

Thank you for your advice. I will break the inheritance then set up the permission by subsite accordingly.

Brian

---

Brian

Answer 4

Hi Arup,

Thanks for your input.  You gave another advice to separate ownership but leave the rest of the subsites with inheritence.

Brian.

---

Brian

Answer 5

Hi Sid,

Now that I broke the inherit permission from the "Accounting" subsite.  I create individual groups to become the member of this subsite.  When I go back to the "Home" site which is the entry portal site from SharePoint, I granted member permission of NT AUTHORITY\Authenticated Users on the "Home" site.  SharePoint creates member permission of NT AUTHORITY\Authenticated Users to all the subsites!  I already broke the inheritance in "Accounting" subsite so that it would not carry the permission down to this subsite.  Yet, I see every subsites are granted with NT AUTHORITY\Authenticated Users permission again.  Any idea?

Thanks,

Brian.

---

Brian

Answer 6

Hi Brian,

Did you assign the permission to Authenticated Users before breaking inheritance or after?

---

Sid Kothari | MCITP, SharePoint 2010
If a post answers your question, please click "Mark As Answer" on that post and "Vote as Helpful"

Answer 7

I assign the permission AFTER I broke the inheritance. When I go into the broke inheritance subsites, it shows "This web site has unique permissions". Yet, when I added Authenticated users on the main Home site, it propagate the Authenticated users to all subsites...

---

Brian