SharePoint Permissions

Permissions are one of the important elements of any organization and should be managed with care. SharePoint permissions allow you to manage your business websites by assigning the permissions that who can access your website and who cannot.

Default Permission

Default permission allows you to quickly and easily provide a common level of permission for one user or group of users.

The following table shows the list of permissions in SharePoint -

PermissionDescription
Full ControlBy default, it contains all available SharePoint Permissions. These permissions are assigned to the group owner. It can't be deleted and customized.
DesignIt allows users to view, update, delete, add, and customize items or pages on the website.
EditIt enables users to manage lists.
ContributeIt enables users to manage personal views, edit items, and user information.It enables users to manage personal views, edit items, and user information.
ReadIt enables users to view pages and list items.
Limited AccessIt enables users to access shared resources, specific list, document library, folder, list item, or document. It cannot be edited or deleted.
ApproveIt is used to edit and approve pages, list items, and documents.
Manage HierarchyIt creates sites, edit pages, list items, documents, and change site permissions for publishing sites only.
Restricted ReadIt enables users to view pages and documents for publishing sites only.
View OnlyIt enables users to view application pages. It is mainly used for the Excel Services Viewers group.

Note: Full Control and Limited Access cannot change.

Default Permission level

Default Permission level is associated with the following three standard groups -

GroupPermission Level
VisitorRead-This level includes the following permissions:
  • Open
  • View items, pages, versions, and application pages.
  • Create Alerts
  • Use Remote Interface
  • Use Client Integration Features
  • Browse User information.
MembersEdit - This level includes some additional permission that are:
  • View, add, update, and delete items
  • Add, update, and delete lists
  • Browse Directories
  • Manage Personal Views
  • Edit Personal User Information
  • Delete Versions
OwnersFull Control - It includes all available SharePoint permissions.

User Permissions

There are the following User Permissions in SharePoint -

1) List Permission

Below table shows the Permissions that are applied on the lists and libraries -

Manage ListsIt allows users to create and delete lists, add or delete columns in a list, and add or delete views of a list.
Add ItemsIt helps users to add items to lists, and add files to the document library.
Edit ItemsIt is used to edit items in lists, edit files in a document library, and edit web part pages in document libraries.
Delete ItemsUsing delete items users delete items from a list, and files from a document library.
View ItemsIt is used to view items in lists, and files in a document library
Approve itemsApprove version of list items or documents.
Open ItemsView the source of files with server-side file handlers.
View VersionsIt views past versions of list items or files.
Delete VersionsDelete the past versions of list items or files.
Create AlertsCreate alerts to notify users, when any changes perform on a site
View application pageView forms, views, and application pages.

2) Site Permission

The following table shows the permissions that are applied on the sites -

PermissionDescription
Manage PermissionCreate and change permission on the website and assign permissions to users.
View Web Analytics DataIt allows users to view reports on the web site.
Create SubsitesIt allows users to easily create subsites such as team sites and communication sites.
Manage Web sitesIt provides an ability to perform all administration tasks for the web site and also manage content on the web site.
Add and customize pagesAdd, edit, or delete HTML pages or webpages, and also edit the websites.
Apply Themes and bordersApply themes and borders on the websites.
Create GroupsGroups can be accessed anywhere within the site collection.
Apply Style SheetApply style sheet such as .css file to the website.
View PagesUsers can view pages on the website.
Enumerated PermissionsEnumerated permissions on the websites.
Browse User informationView information about users on the website.
Manage AlertsManage alerts for all users on the website.
Use Remote InterfaceUse SOAP (Simple Object Access Protocol1), Client Object Model, or SharePoint 2013 interface to access the website.
OpenEnables users to open a website, list, or folder to access items.
Use client integration FeaturesIt allows users to work on documents locally and then upload their changes.
Edit Personal User InformationIt enables users to change their own user information, such as adding alerts, deleting pictures, edit text, etc.

3) Personal Permissions

The below table shows the list of permissions that are applied to views and web parts.

PermissionDescription
Manage Personal ViewsCreate, update, and delete personal views of lists.
Add/Delete Personal Web partsAdd or delete personal web parts on a web part page.
Update personal web partsUpdate web parts to display personalized information.