Sharepoint Forum

Ask Question   UnAnswered
Home » Forum » Sharepoint       RSS Feeds

Custom site Group

  Asked By: Tanya    Date: Apr 21    Category: Sharepoint    Views: 800

We want to create a new site group with only ‘Add users’ rights, we don’t want this group to modify existing rights and deleting existing users.

When I create a new site group with ‘Manage web site’ permission, the users in the group are able to add, delete, and modify rights.


‘User a’ was the administrator and created a new site group (with ‘manage web site’) Moderator.

Users in the moderator are able to change the ‘User a’ rights.

In this case ‘Moderator” Group able to change his own rights to ‘Administrator’ and can delete ‘User a’ or change the rights.

Can anyone suggest me the way of creating a new site group with elimentary permissions (only ADD, or only Delete, or only Modify?)



4 Answers Found

Answer #1    Answered By: Sharonda Mcfarland     Answered On: Apr 21

We faced this issue and solved it by creating  a custom  web part that allowed users  to add  other users, but not access or change  user rights. We found no way out of the box to do that.

Answer #2    Answered By: Kalyan Pujari     Answered On: Apr 21

I would have to agree that there is no othe way to do this. You could
do this with a custom  webpart that uses impersonation to an account
that has the rights  perform an add. Should only take a day or two to

Answer #3    Answered By: Christop Mcfadden     Answered On: Apr 21

I have also not found a way to accomplish this. Another point is that
it's very risky to allow users  to manage security on their own sites,
especially if those sites contain sensitive data. Most users have no
clue what site  groups are and what they mean. If a site is uniquely
permissioned (a library or list with different rights  than the site
itself) what usually happens is the site administrator  forgets how
security was set up and invariably increases a user's rights to give
them access. Eventually, you have nothing but administrators on the

We use Active Directory groups, which have their own disadvantages, but
it allows specific roles to be assigned through those AD groups and
gives the site owner the authority to have users added but not the
ability. The site owner contacts the help desk, a ticket is created  to
add the user, and the help desk does the security administration via
AD. This gives us an audit trail as well as insolates the site from
users who like to tinker with FrontPage or Dreamweaver.

Answer #4    Answered By: Gopal Jamakhandi     Answered On: Apr 21

In v2 (I assume because you are talking about Custom Site Groups rather
than Permission Levels), you cannot choose part of the Manage Web Site

In v3, I don't think that you can do it either but there are potentially
events that you could tap into. However, user management doesn't have
events. But there is a User Info Gallery which is, of course, a list.
So, it is theoretically possible to write events for that. I say
theoretically because in B2TR you couldn't but perhaps RTW fixed that.

Didn't find what you were looking for? Find more on Custom site Group Or get search suggestion and latest updates.