security
622 TopicsSharePoint Communication and Live Chat
I am receiving error 404 on Live Chat links to SharePoint when setting it up. Can you please assist me in resolving this issue? The links highlighted in "yellow" return error 404 specifically. Is there something additional that I should be setting up to make them work?3Views0likes0CommentsDaily Security Passphrase
We operate remote store locations around the US. When a corporate employee calls a store location on the phone we need a way for the store employee to be able to validate that the caller is legitimate and from corporate. We want to create a widget or app on our internal SharePoint operations page that will automatically generate a random security passphrase or code each day. When the caller calls the store, the store employee can look on the SharePoint page and see the passphrase. They can them ask the corporate caller what the daily passphrase is. The Corporate caller can access the same internal page and recite the daily code to the store staff member. If they match, the call is legit. How do I create this widget? Is there something I can use out-of-the-box? I am non-technical so I need help understanding how to build this type of solution.25Views0likes1CommentCan we add an Office 365 dynamic group inside SharePoint site permissions?
If we create a dynamic office 365 group which contain the users inside the HR department, and we assign this dynamic group read permission on a SharePoint site (directly or through SharePoint group), will all the related users inside the HR dept get access to the SharePoint site? if the answer is Yes, then what will happen if the user get moved from the HR dept to let say the finance dept, and hence from the dynamic group, , will the user permission inside SharePoint get removed as well? so the user no longer can access the SharePoint site? Thanks30Views0likes2CommentsOnly allow the creator of the item and the user direct manager to view the submitted item
I am facing this challenge , where we want to create a custom list, with the following logic;- 1) User submit a request asking for example for for salary increase. mentioning the amount. 2) The request need to be approved by the user direct manager 3) then the manager of the user's direct manager, need to do a second approval. Now we need to force those permissions:- 1) once the form is submitted others users should not view this item, even for 1 minute, 2) so the item once submitted should only be viewed by the creator, without the ability to edit it 3) only the direct manager and later the manager of the direct manager can view it. Here what i tried and what i faced:- 1) i created a custom list, define all the columns 2) create a power apps form to submit the form. 3) create a custom permission level, to allow the user to create but without edit/delete, which is mainly a copy of the contribute, without those check-boxes:- 4) then i define a power automate flow so once the item is submitted ,to send approval email to the direct manager + grant the approval manager & submitter read on the item. where i am storing the approval status inside another list that can only be edited by the service account. this worked partially, as the item will still be visible to all users until the workflow runs. also incase the workflow fails to run the item will stay visible forever. so i tried this second approach, benefiting from Item-Level Permissions:- this will always force the item to be visible to the creator only, without the need to have a workflow. but we faced an issue , when we want the submitter's direct manager to view this item, to be able to approve or reject it. where even if we grant the direct manager full control on the item, the item will not be visible to the direct manager, since we define the above Item-Level permission. the only way to to fix this is to grant the direct manager's full control on the list, but in this case the direct manager will be able to view all items, not just the ones submitted by his team ! can we do this for example:- 1) create a custom permission level to only allow the user to submit without the ability to edit, delete, view? 2) then using a workflow to force the item permissions as we go. 3) in this case the item from the beginning will not be visible to anyone, then the workflow will do the permission modification. so if the workflow fails atleast the item will not be exposed to any one, so not sure what u need to do, and if SharePoint support a way to create a custom permission level that allow the user to create without the ability to edit,delete and even view? any advice?30Views0likes0CommentsHow to Hide 'Server' and 'X-Powered-By' response header tags
Hi, We have a communication site published on SharePoint 2019 Farm environment, primary used as an intranet portal. During the recent penetration testing, our security team recommended to hide the HTTP response headers 'Server' and 'x-powered-by'. Can we have information on how to achieve it safely, and whether it can impact any website functionalities? Regards1View0likes0Comments"Allow only users in specific security groups to share externally" to each site separately ?
Inside SharePoint online admin center, we can define security groups who can share with external users, which will get applied to all sites:- but can we have this settings at the site level using the UI or using Power shell? so each site will have different security groups which can share with external users? Thanks21Views0likes0CommentsWhat will happen if we apply different retention policies to the same SharePoint site
If inside the Office 365 Data Life Cycle Management we applied 2 retention policies to the same SharePoint site, either by selecting All Sites or include the specific site, as follow:- First policy, to remove the item after 10 years of been created:- Second policy, to retain the item forever:- so which policy will be applied and why?20Views0likes0CommentsCan external users create sites inside a tenant
One of our clients, shared some sites with my usernname, i can access the site as an external users. now i went to the sharePoint home page @ https://***.sharepoint.com/_layouts/15/sharepoint.aspx .. where i got the option to create a site, but when i select the site template for example communication site, i will get a blank page inside the popup , as follow:- so can i conclude that external users can not create new sites inside their tenant? Also can they add my external user as a SharePoint admin inside their office 365? so i can do the job? Thanks31Views0likes2CommentsSP struggles
Hello all, Great community, of which I kindly want to use your expertise :) We are an average organization with an O365 SharePoint online environment. The current environment is a mess with rights and authorizations. At the moment we are also setting up Role Based Access. The setup is as follows: Default configuration For the different departments we have a standard team site with the underlying SharePoint site. Based on RBAC, the correct authorizations are automatically assigned. For employees, sharing files in teams and SharePoint has been disabled (so sharing with users who do not have authorizations for the relevant Teams or SharePoint site is not possible.) This has been done deliberately in order to comply with information security standards. Problem There are situations in which employees from other departments (temporarily) have to work together with employees from the department. In that case, they also have to work together on documents. Now my question is, how can we ensure that people can work together without the employee from the other department getting rights to the (full) Teams and/or SharePoint site. If anyone can help me on my way that would be great. Thanks in advance, Peter21Views0likes1CommentSharePoint 2019 SSO Entra with OnPrem AD Account
I maintain a legacy SharePoint 2019 onprem installation. This installation has been around since 2007 and is wholly reliant on local AD accounts for access. We have a Microsoft 365 environment where our onprem AD Users are synced up to Entra. We are in the process of making our onprem applications available through "My Apps" via the Microsoft Application Proxy. My goal is to have a user login to My Apps and seamless login to the SharePoint 2019 environment. I have followed this tutorial to setup the trust, which is working. https://learn.microsoft.com/en-us/entra/identity/saas-apps/sharepoint-on-premises-tutorial The issue that we are having is that the user being passed is not the onPrem AD user (slhilbert), but instead the Entra user (email address removed for privacy reasons). The Entra user doesn't have any access setup in the SharePoint site, which has 100K unique permissions, is it possible to login with onPrem AD user? Thank You! Stuart51Views0likes0Comments