Team Site Permissions using Email Groups

From: Sara Windsor (SaraWindsor_at_discussions.microsoft.com)
Date: 09/01/04


Date: Tue, 31 Aug 2004 23:41:02 -0700

We've been actively using Exchange 2003 email groups (mail-enabled Universal
Security Groups) to assign permissions to SPS2003 Team Sites.
Sometimes when a client adds an email group to a Team Site via MANAGE USERS
- ADD USERS, the group is "broken out" into individual users when proceeding
through the process; sometimes the group is NOT broken out, but is left as a
group - even if the user has their Outlook client open.

In many cases - we WANT the group to remain "as a group" when assigning
permissions (i.e. as a single entity that is NOT broken out into individual
users) - then when the group membership changes the site owner doesn't have
to go back & modify individual permissions since they're assigned to the
GROUP, not to individual users.

If the group is "broken out" into individual members when the permissions
are initially being added, the permissions become static (the permissions are
assigned to the specific list of users in the group at the time, not to the
group itself); thus if group membership changes the site owner must go back
and manually add/remove users for appropriate access.

I haven't been able to figure out the rules that define WHEN a group is
broken out into individual users when adding the group to a Team Site, and
when a group is NOT broken out. (i.e. must you have a certain version of
Outlook? must you use a certain syntax such as the group address -
group@mydomain.com - instead of group name - domain\groupname? etc.)

Can anyone tell me under what circumstances groups are broken out into
individual users when assigning them to Team Sites?

TIA.



Relevant Pages

  • Re: Share calendars with group permissions help?...
    ... I have created security groups in Active Directory and put the members ... Yet adding the group to "Share My Calendar" ... with group permissions not individual permissions. ... NOT individual users. ...
    (microsoft.public.exchange.admin)
  • Re: A question from a newbie
    ... roles are fine if these meet your security requirements. ... permissions to individual users or user-defined roles is appropriate when ... you need more granular security and/or stored procedure execute permissions. ... Utility scripts can be faster than granting permissions via Enterprise ...
    (microsoft.public.sqlserver.security)
  • Cant get groups to work
    ... I have an Access ADP on SQL2000, uaing Windows users and groups.. ... Individual users with granted permissions work OK. ... if I drop the individual users and try to uses the Windows ...
    (microsoft.public.sqlserver.security)
  • Re: password
    ... the cumbersome method of password protection for individual ... of explicitly assigning file/folder permissions to individual users ... HOW TO Set, View, Change, or Remove File and Folder Permissions ...
    (microsoft.public.windowsxp.basics)
  • User Profiles
    ... I've been adding users to my team sites by groups (e.g., ... AA/sharepointgroup). ... Permissions and everything seems to work fine for ... the different users that belong to the group. ...
    (microsoft.public.sharepoint.portalserver)