I have a few questions

Question

How can you prevent users from editing the quick launch? Right now, any user can change the content of the quick launch.

Users need limited access to view the home page. Is there a fix for this? Right now users have limited access through everyone but external users group. If I revoke the permission they can request access, but approving it fails to add them, even if they are already part of a different site permission group.

How can I prevent users from accessing the site contents page? I managed to block users from the site contents page on subsites, but not the root site.

I am using custom permissions, and I understand these issues may or may not be linked, but I am having trouble finding information on how to troubleshoot and fix these problems. Thank you for any assistance.

Answer 1

I don't know if you are using modern group connected team sites or not. As it might make a difference on what and how you can change permissions.

By default users will be added to a members group on SharePoint and the default permissions of the members group is edit. That permissions will give them the ability to change the structure of the site (e.g. add metadata columns, change navigation etc.) Best is to change this to contribute. However changing this permissions is disable in the ui on modern group connected team sites.

See this blog post for more detail: https://www.oak3.org/sharepoint/permissions-on-a-group-connected-team-site/

And a discussion on the Tech community: https://techcommunity.microsoft.com/t5/SharePoint/Change-group-permission-on-connected-group-site/m-p/183633