Forum Discussion
Solved
SharePoint Group - Access Denied
I created a additional SharePoint Groups in a site and added a user. I set the SP Group as Read at the site level, but Contribute in certain libraries. User is receiving Access Denied for site link. Intermittently the library links works. During investigation the group disappeared in the library permissions and needed to be re-added. I had created a SP group in a test site a week or so ago and all worked fine and the current site with the issue. Today the test group in the Test Site is still working, but if I create a new one just like I did a week or so ago, the user is getting Access Denied.
Before I read your response above, it dawned on me to double check the Home.aspx and Site Pages library ... sure enough someone had shared the homepage which somehow turned the page AND the library into unique permissions therefore it did not inherit all of the new SP Groups added to the site level. As soon as I deleted unique permissions access was restored only to find the images broken ... checked the Site Assets library and same thing ... once that was restore to site level all is now working as designed.
Hi lgonyea ,
The group disappearing is a strange issue I've not heard before. Maybe for an on prem environment that would seem more plausible. But for SharePoint Online, there shouldn't be any changes to permissions like that without an action from a user. It makes me curious if you have any services that are integrated with SharePoint Online that automate admin tasks. Got anything like that? Maybe a governance solution is in use that manages permissions automatically? Share Gate is one example.
As for the Access Denied issue, it sounds like you've got the site level permissions covered. But I've seen this symptom when the Site Pages library (where the Home.aspx page lives) is too restricted, despite the site level permissions being correct. Perhaps users don't have "read" access to the Site Pages library. If the library permissions are correct, I recommend you check the Home.aspx page to make sure item level permissions are not affecting access.
Also, the "Check Permissions" button in the ribbon of the Permissions screen does wonders to find pesky permission inconsistencies.
My last recommendation is to open up the troubleshooting to even more users and sites to understand the problem a bit more. Testing with at least three users and sites is a good way to isolate the root cause.
Hope this helps! Please report back your progress.
-Rob
Before I read your response above, it dawned on me to double check the Home.aspx and Site Pages library ... sure enough someone had shared the homepage which somehow turned the page AND the library into unique permissions therefore it did not inherit all of the new SP Groups added to the site level. As soon as I deleted unique permissions access was restored only to find the images broken ... checked the Site Assets library and same thing ... once that was restore to site level all is now working as designed.
