Permission Inheritance

“Inherit / disinherit permission from parent site”

For easier administration, it is recommend that you avoid breaking inheritance too frequently, that is, you should keep the permissions inheritance intact for all sites, lists, libraries, and items. To avoid breaking inheritance at the list / library / list item or file level, you should organize sites so that you can assign permissions to the site that contains the protected content. For example, you might create a sub site for documents that contain sensitive data, or a sub site that contains lists with restricted access. In this way, you can manage permissions for all content in a site with one action, instead of tracking many individual documents or list items. See the white paper, Best practices for using fine-grained permissions.

If you believe permission inheritance has been broken at the list, library, list item or file levels, then you can use the Unique Lists and Unique Items DeliverPoint commands to find where permission inheritance was stopped and different permissions assigned. You can also add a column a list / library, based on the DeliverPoint inheritance field to display folder, list item, file permission inheritance in views.

*Note: A site collection is a security boundary, that is, the top-level site of the site collection, does not inherit its permission settings from any other site. The site collection administrator configures the initial permissions settings for a site collection, which are then inherited by the content in the site collection (sites, lists, libraries, list items and files).

You can use DeliverPoint to manage site and list permission inheritance. To use the Permission Inheritance DeliverPoint action, complete the following steps:

1. Navigate to the DeliverPoint dashboard and using the View Ribbon tab, click either the Farm Centric or Account Centric.
   
   
2. In the tree view, select those sites to be included in the scope. This command can not be completed on an accounts. The properties of the node selected are displayed in the dashboard’s Properties pane.
   
   On the Commands Ribbon tab, click Permission Inheritance and then click either Inherit From Parent or Break Inheritance.
   
   
   Note: When you select Inherit From Parent, you will lose any unique permission settings that you have configured on that site.
   

You can use DeliverPoint to manage site, list, folder or item-level permission inheritance. You can use the Permission Inheritance DeliverPoint commands, from the DeliverPoint dashboard or by navigating to the list / library where you want to manage permission inheritance.

To use the DeliverPoint dashboard, complete the following steps:

1. Navigate to the DeliverPoint dashboard and using the View Ribbon tab, click either the Farm Centric or Account Centric.
   
   
2. In the tree view, select those sites to be included in the scope. If lists and libraries are displayed in the tree view, you can also select a list or library. The Permission Inheritance commands can not be used on an accounts. The properties of the node selected are displayed in the dashboard’s Properties pane.
   
   On the Commands Ribbon tab, click Permission Inheritance and then click either Inherit Permissions or Break Permissions.
   
   
   
   

Note: When you select Inherit Permissions, you will lose any unique permission settings that you have configured on that site.

To use the Permissions Inheritance commands on a list, library, folder, list item or file, complete the following steps:

1. Navigate to the list where you want to use the DeliverPoint Permission Inheritance commands.
2. When you wish to use the Permission Inheritance commands on a list, then on the DeliverPoint Ribbon tab, click the Permission Inheritance split button in the List Permissions group.
   
3. When you wish to use the Permission Inheritance commands on a folder, item or file:
   

• Click to the left of the folder, list item or file.
• On the DeliverPoint Ribbon tab, click Permission Inheritance split button in the Item Permissions group.

The Break Permissions Inheritance or Inherit Permissions page is displayed. The scope of the operation is display.
When you select to Break Permission command you can choose to clear the Keep Role Assignments check box if required. By default, this check box is selected and therefore the permission configuration is the same as it was before. When the check box is cleared, then the previously inherited permission configuration is not copied.

Click Break or Inherit.
The Operation completed successfully page is displayed.

*To avoid confusion or future inaccuracies, LightingTools recommend that before completing any other permission-related tasks to the sites you targeted with the DeliverPoint Permission Inheritance action, you wait for the next time the DeliverPoint SharePoint Interrogation timer job timer job is scheduled to run or you ask your SharePoint server administrator to run the timer job.

References

Best practices for using fine-grained permissions

← Auditing
Properties →

Copyright © 2024 Lightning Tools — Powered by