Working with SharePoint Permissions - Exercise

Contact Us or call 1-877-932-8228
Working with SharePoint Permissions - Exercise

Working with SharePoint Permissions

Duration: 15 to 25 minutes.

In this exercise, you will learn to manage permissions on your SharePoint site.

  1. Attempt to log in to your root site with an account that does not have any permissions to the site.
    1. While holding down the Shift key, right-click your browser icon and choose the Run as different user option. Run as different user.
    2. In the Widows Security dialog window, enter "Homer" for the account name and "Pa$$w0rd" for the password or any account that does not currently have permissions to the site. Click the OK button to complete the logon.Windows Security dialog window
    3. Try to navigate to root of your team site. Root site url
    4. Verify that you get an Access Required page.Access Denied Message
    5. Leave the browser session you opened with your alternate account open and switch back to the browser window opened with your student account.
  2. Grant a new user Visitor permissions to your root team site.
    1. In the browser window opened with your student account click the Settings menu link and then select the Site settings link from the available options. Site Actions menu
    2. Click the Site permissions link on the Site Settings page. Site Settings.
    3. On the Site Permissions page, take a moment to read the existing entries and their Permission Levels.Contoso Site permissions page
    4. Click the Owners SharePoint group from the list to view its members.
    5. In the Owners list page note that the account you are logged in with is a member. This gives you full permissions to the site.Team Site Owners list
    6. Use your browser's Back button to go back to the Site Permissions page.
    7. Click the Check Permissions link button in the PERMISSIONS tab toolbar.conPermission Tools toolbar
    8. In the Check Permissions dialog form enter the account name of the account you attempted to log in earlier with in the User/Group field and click the Check Now button.Check Permissions dialog
    9. Verify that the results of the permissions check are None. Click the Close button to close the dialog form.Check Permissions dialog
    10. Click the Grant Permissions link button in the PERMISSIONS tab toolbar.Permission Tools toolbar
    11. In the Share dialog form, type "Homer Simpson", or any account name of the account that does not currently have permissions to the site in the Invite people field. The name should resolve as you type and allow you to pick it from a drop-down list. Grant Permissions dialog

      You can also click the SHARE link in the upper-right corner of the page to open the same dialog.

    12. Click the SHOW OPTIONS link to see the permission options. Permissions dialog.
    13. Uncheck the Send an email invitation checkbox and change the Select group or permission level list box to Visitors [Read]. Click the Share button to complete the permissions assignment.Grant Permissions dialog
    14. To verify that the account has the correct permissions now, click the Check Permissions link button in the PERMISSIONS tab toolbar.Permission Tools toolbar
    15. In the Check Permissions dialog form, enter 'Homer Simpson' or whatever account you just added, in the User/Group field and click the Check Now button.Check Permissions dialog
    16. Verify that the results of the permissions check now is Read. The results should be similar to the following image. Click the Close button to close the dialog form.Check Permissions dialog
  3. Test the permissions to verify they have Read permissions to the site.
    1. Switch back to the browser window you opened at the beginning of the exercise as "Homer" or whichever account you used.
    2. Retype the URL of your home site. Root site url

      Note that just refreshing the page does not work. That will just refresh the request access page.

    3. Verify that the account can now see the Home page of your root team site.
    4. Click the Settings drop-down button and note that the items listed are security trimmed based on rights.Site Actions menu trimmed for Homer
    5. Click the Favorite Cars list in the Quick Launch menu and verify that you can see the items in the list.Quick Launch menu
    6. Click the Bugatti link within the Favorite Cars list to view its properties.
    7. Note that the Edit Item button on the VIEW toolbar in the Favorite Cars - Bugatti form is grayed out and you are unable to click it.Bugatti dialog form
    8. Click the Close button to close the Favorite Cars - Bugatti form.
  4. Grant visitor account edit permissions to the Favorite Cars list.
    1. Switch back to the browser window logged in with your student account that has owner permissions. Student00
    2. Click the Favorite Cars link in the Quick Launch menu.
    3. Click the LIST tab to open the toolbar.List Tools List tab
    4. Click the Shared With icon within the Settings region on the LIST tab toolbar.List Tools List tab

      The Shared With icon text may or may not be displayed depending on the size of your browser window.

    5. Click the ADVANCED link on the Shared With dialog. Shaded With dialog.
    6. Click the Stop Inheriting Permissions link button in the PERMISSIONS tab toolbar.Permission Tools toolbar
    7. Click OK to the Message from webpage dialog window to accept the change.Message from webpage dialog
    8. Note that the PERMISSIONS toolbar has changed now that it is no longer inheriting permissions from the parent site. Click the Grant Permissions link button.Permission Tools toolbar
    9. In the Share 'Favorite Cars' dialog form, type the user account you want to grant permissions, 'Homer Simpson', in the Invite people field and click the SHOW OPTIONS link. Favorite Cars Grant Permissions dialog
    10. Uncheck the Send an email invitation checkbox and leave the Select a permission level set to Edit and click the Share button. Share options.
    11. Note that the user account is now in the permissions list for Favorite Cars with Edit permissions.Favorite Cars permission list
  5. Grant an account Full Control permissions to the Accounting child site.
    1. Click the BROWSE tab to close the PERMISSIONS toolbar.Navigate Up menu
    2. Click the Accounting link in the Top Link Bar of the root team site.Top Link Bar menu
    3. Click the Settings menu link and then select the Site settings link from the available options. Site Actions menu
    4. Click the Site permissions link on the Site Settings page. Site Settings.
    5. Note that the permissions of the Accounting site are inheriting the permissions of its parent site.Permission Tools toolbar
    6. Click the Stop Inheriting Permissions button on the PERMISSIONS tab toolbar. Permission Tools toolbar
    7. Click the OK button on the Message from webpage dialog window to accept the unique permissions setting. Message from webpage
    8. When the inheritance is broken you are given the option of Use an exiting group or Create a new group. Leave it set to the default and click the OK button. Permission inheritence.
    9. Repeat the earlier steps to navigate back to the Site permissions page for the Accounting site.
    10. Note that the PERMISSIONS toolbar has changed now that the site has unique permissions. Click the Grant Permissions button. Permission Tools toolbar
    11. In the Share dialog form, type "Homer Simpson", or any account name of the account that does not currently have permissions to the site in the Invite people field. The name should resolve as you type and allow you to pick it from a drop-down list. Grant Permissions dialog

      You can also click the SHARE link in the upper-right corner of the page to open the same dialog but it doesn't have the same choices in the SHOW OPTIONS list.

    12. Click the SHOW OPTIONS link to see the permission options. Permissions dialog.
    13. Uncheck the Send an email invitation checkbox and select Full Control from the Select a group or permission level list-box options. Permission options
    14. Click the Share button at the bottom of the Share 'Accounting' dialog form to save your changes.
  6. Test the new permissions given to account in the Favorite Cars list and the Accounting child site.
    1. Switch back to the browser window logged in as 'Homer Simpson' or whatever account your are testing. Homer Simpson
    2. Click the Settings drop-down button and note that the options are still limited to the user in the root team site.Site Actions menu trimmed for Homer
    3. Click the Favorite Cars list in the Quick Launch menu and verify the user account can see the items in the list.Quick Launch menu
    4. Click the Bugatti link within the Favorite Cars list to view its properties.
    5. Note that the Edit Item button and Delete Item button on the View toolbar in the Favorite Cars - Bugatti form are available to the user to use.Bugatti dialog formFeel free to test the user's editing abilities by changing any of the values you like.
    6. Click the Close button on the Favorite Cars - Bugatti form.
    7. Click the Accounting link in the Top Link Bar of the root site.Top Link Bar menu
    8. Click the Settings menu in the Accounting site and note that the user account has full access to all the items in the menu due to the Full Control permissions at this child site.Site Actions menu
    9. Optional: Take a few moments and test any action in the Accounting site logged in with the new account to verify their permissions.
Next