iamuser
asked on
Sharepoint permissions and data flow question
For all those sharepoint experts, I have a a couple of questions regarding best practices. We need to have a site up that will hold meeting/brainstorming discussion data from 10 departments. To complicate matters, management has not been able to tell me know if this is something long term. .
they want the site in 3 days, not enough time to do metadata will go with folders for now
Management wants access to be locked down. Only people who belong in a department can access that departments files.
So the question is,
do i create 10 document libraries (require me to break inheritance) in one site or 10 sites?
do i create 12 sharepoint groups in sharpeoint and add individual sharepoint users to it or should I make AD groups for each department, give permission to the AD group in sharepoint and add staff to the respective AD group ?
I'm not sure which is the best method.
they want the site in 3 days, not enough time to do metadata will go with folders for now
Management wants access to be locked down. Only people who belong in a department can access that departments files.
So the question is,
do i create 10 document libraries (require me to break inheritance) in one site or 10 sites?
do i create 12 sharepoint groups in sharpeoint and add individual sharepoint users to it or should I make AD groups for each department, give permission to the AD group in sharepoint and add staff to the respective AD group ?
I'm not sure which is the best method.
ASKER
The default sharepoint groups have default permissions applied. I was thinking of using AD groups and then adding the default sharepoint permissions to it. I figure it would be easier to manage staff access than to go into the sharepoint group and manually add each user that needs access. Or am I missing something
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
yeah, I am manager of both ad and sharepoint. The fine tuning of permissions will be in sharepoint but the group membership will be handled in ad.
Fine.
Make 10 subsites.
The reason is, when one department want someting special you can react without discussion with nine other departments.
I would also use the SharePoint permission groups because even in every department you need more then one group to have separation betwaen management, content provider, approver, contributor, read only and so on.