Solved

Odd permission level for a user.

Posted on 2013-01-08
2
289 Views
Last Modified: 2013-01-11
A site owner has contacted me with an odd permissions issue.

1. He is a member of a group called "XYZ Site Owners" which has Full control.
2. He has ability to add users to "XYZ Vistiors" and "XYZ Owners" but cannot add anone to "XYZ members".
3. When he clicks into the group it says he does not have permission to add users to this group.

Any ideas ?
0
Comment
Question by:paologiorgio
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 13

Expert Comment

by:Ugo Mena
ID: 38755590
You can right click the OU and select delegate control and then set the permissions.

Make sure that user has the following permissions to the top level XYZ OU:

Create Child - User Objects
Create Child - Group Objects
Create-Child Organizational Unit permissions.
0
 
LVL 14

Accepted Solution

by:
KoenVosters earned 500 total points
ID: 38755669
By default, when you create a site the following groups are created:
site owners
site contributors
site visitors

when they are created, the group owner is set to "site owners"

if that is changed, for instance for the visitors, then the site owners cannot add users to that group.

The way to fix that is to have a site collection admin look at the permission and put it back to your XYZ owner group.
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you create your solutions on SharePoint sooner or later you will come upon a request to set  permissions of the item depending on some of the item's meta-data - the author, people assigned as approvers, divisions, categories etc. The most natu…
Pimping Sharepoint 2007 without Server-Side Code Part 1 One of my biggest frustrations with Sharepoint 2007 in the corporate world is that while good-intentioned managers lock down the more interesting capabilities of Sharepoint programming in…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question