r/sharepoint • u/gab1606 • 23h ago
SharePoint Online Feeling overwhelmed/lost in regards to permissions management in SPO
This might be a long post, sorry in advance.
I'm a SharePoint Online admin for a company of about 300 employees. We have 1 site available to us and this is non negotiable, we cannot create more sites.
My company is comprised of about 20-30 teams (as in employee teams, not M365 Teams) and they each usually want 3 different types of spaces in SharePoint:
1- folders only restricted to them, they want the folders and their contents to be hidden to all other users.
2- folders that are available in view-only mode for all other users. Only the team members can edit.
3- Folders to collaborate with other teams or specific employees in the company. Sometimes need to be seperate from eachother entirely. Ex. sometimes the CEO will have meetings with each chief of department (there are 7). So each chief of department should have a folder shared with the CEO to store documents related to those meetings. But each chief should not be able to see the other chiefs' folders, as the meetings sometimes discuss sensible info regarding specific employees.
We also sometimes have folders that should be restricted to one individual only. Like for example we have an OSHA guy whose job is to manage workplace accident reports and internal investigation. That is sensitive information that should be accessible to him only. But yet again he sometimes needs to collaborate with other employees (ex. someone who witnessed the accident and has to write down a testimony). So he needs somewhat of a collaborative space also. But this space should not be available to EVERYONE, only him and the witness in question.
I've done a fair share of reading on sharepoint permissions best practices and everybody seems to agree to NEVER manage permissions at folder level, but rather do it at the library level. In theory that makes a lot of sense to me. But I am really struggling to see how I can avoid folder-level permissions in my situation.
If anyone has any advice to give me I would appreciate it :) Thank you !
