Implications of groups for SharePoint permissions
When a restricted (Members Only, Private, or Private Unlisted) group is created, users have rights to the content on the SharePoint side according to their Jive-side group membership.
By default, only people who are members of (or are following) an Open group have access to content on the SharePoint side. Until users join or are added to the group, Open group content is not visible on the SharePoint side. If this does not reflect your security model, you have the option to configure the SharePoint add-on to identify the Everyone principal, as described in Installing SharePoint integration add-on. Specifying the Everyone principal defines the list of users who have read-write access to Open group content.
Members of the SharePoint Online Full Control Users group have full rights to all SharePoint-connected places in the Jive community and can also delete content on either side of the integration. Jive group membership does not affect their permissions to content on the SharePoint side.
| Jive group type | SharePoint Full Control users | SharePoint Contributor users | SharePoint Read users |
|---|---|---|---|
| Open | Group creator | Everyone* | |
| Members Only | Jive admins**, Group creator | All group members | Everyone* |
| Private | Jive admins, Group creator | All group members | |
| Private Unlisted | Jive admins, Group creator | All group members |
* Requires an Everyone principal in SharePoint to be mapped in the add-on settings during Jive-side setup. For more information, see Installing SharePoint integration add-on.
** Requires the Full Control principal in SharePoint to be mapped in the add-on settings during Jive-side setup. For more information, see Installing SharePoint integration add-on.
Jive group permissions
Jive social groups do not exist in a hierarchy or inherit permissions from anywhere else in the community. Instead, access is controlled by the type of group and by group membership. The following table shows who can access the four group types.
| Private Unlisted | Private | Public Restricted | Public | |
|---|---|---|---|---|
| What is visible to non-members? | None | Group name only | All | All (no membership) |
| Who can see content? | Member | Member | Anyone | Anyone |
| Who can participate? | Member | Member | Anyone can interact with content and create discussions and questions. Only members can create other content types | Anyone |
| Who can invite new members? | Member or administrator | Member or administrator | Member or administrator | Anyone |
| Who can approve new members? | Administrator | Administrator | No membership | No membership |
Other than Open groups, which always grant full access to all members of the community, the other group types have varying membership. The group of people who have permissions changes as people are invited to or leave the group (or are banned from it). SharePoint-side access is synchronized from the group membership. This means that other than SharePoint users with Full Control access, users with group membership on the Jive side have the same rights to the content in the linked site/document library on the SharePoint side.
An exception is that when the Everyone principal is not mapped in the SharePoint add-on settings, as described in Installing SharePoint integration add-on. Users who are not members of or following an Open group will not be able to access content on the SharePoint side.