Permission Level
Permission Levels allow grouping of Permission Right items.
Custom Permission Level
A Custom Permission Level might be required for specific scenarios like:
- Need a site with no delete permission for contributors.
- Need a site with read permission allowing Browse Directories permission.
Create Custom Permission Level
Please use the following procedure to create a custom permission level.
Open Site Gear then select Site Settings > Site Permissions > Permission Levels page.
Click on the Add a Permission Level item. You will get the page shown below. Enter a name for the permission level and customize the permission items.
Please note that I have unchecked the Delete Items and Delete Versions permission items for our custom permission level.
Click the Submit button to create the permission level. You will see the new permission level in the returning page.
Note
You can also use the Copy Permission Level option for creating a new permission level from an existing one. Click on the existing permission level and go to the page end to get the buttons shown below.
Testing the Permission Level
Now we can test our newly created permission level. For this please use the following procedure:
- Create a new sub site.
- Stop Inheriting permission from the parent site.
- Remove all users, permissions.
- Add a new user and select custom permission level.
Once you click the Share button the new permission level is associated with the selected user. Now try logging in as the preceding user, upload a document and try deleting it.
You should get a dialog saying Delete is prevented.
Note
To make this work the user you added should not even be in the Site Collection Administrators too.
References: Understanding permission levels.
Summary
In this article we have explored how to create a custom permission level.