Better Team Permission Control
The current team settings are very bare-bones.
For instance, there's a single permission that allows for adding/modifying/removing tabs. These should all be separate permissions.
For the sake of usability, there could be a "master" permission for each piece of functionality (tabs, channels, connectors, etc...) and an expandable list of the sub-options where, if you didn't want to give a certain role all of the permissions for a certain functionality, you could give a role a subset of the create/modify/remove permissions.
We have added a lot of new settings changes since the last update. You can see the updated list here https://support.microsoft.com/office/team-owner-member-and-guest-capabilities-in-teams-d03fdf5b-1a6e-48e4-8e07-b13e1350ec7b.
We would like your feedback on any gaps or additional settings that you feel are missing. Please let us know, the team would love to hear from you!
It would be helpful to be able to create a channel guest for users inside the organization giving them only right to the contents of the channel. And then combine that with the ability to create a channel and grant users (team members or non-members) R/O rights to that channel (files and chats).
Permissions in the software are absolutely terrible. There are set of permissions for this, for that for the other. I join by phone as an external user I can't use chat, I join with the same account on a browser on a PC I can use chat, I join by a mac and then I get another set of things I can do or see. It's ridiculous...can you please produce clear documentation about the distinguishing levels of permissions and what each user should expect or just make it consistent across the whole board. I can't explain to my users because I don't have a clue.
Thomas V. commented
It would be great to have permission levels for students to be able upload their materials or not. I can already see students uploading their assignments in the wrong place for every other classmember to see...
Jim Scott commented
Agreed, need more flexibility in assigning permissions other than just roles.
Team Owners have too much power for governance comfort. There is a reason why Microsoft broke out permissions into different levels and Teams is no different.
The ability to control the user permission level would be very helpful, especially with regards to Guest users. Right now they are given member access to the Team. this means they can delete files! Yikes! You can change user permissions to folders in SharePoint, but those permissions do not flow through to Teams. They are only effective in SharePoint.
One context i came across : in a team, there are tabs that are linked to sharepoint lists. everyone can see the tabs, and the only way to prevent a user to see the content is to go to the SharePoint site of this team and to restrict the access manually. there should be the same behaviour in Teams that there is in SharePoint (if you don't have at least Display-Only permission, the tab is not showing up for you). The same should be applied for Planner.
I also think we need the option of who is allowed to view which Channels / Tabs also with the option of adding your own ranks.
There isn't everyone in our Business or External suppliers I want them to view all my channels or tabs, and currenty it means that I either don't add other members to keep all content secure, or I have to create separate teams or keep the files on one-drive and share that way instead, which defeats the objective of teams.
I want to be able to add members of 1 Supplier to Rank X, Internal Stakeholders to Rank Y, and allow them to only view a specific channel or tab, so all my Teams files can stay under 1 team and they cannot view them.
Sylvia Altmann commented
Comment of Donnerstag, 22. März 2018, 15:34 Uhr applies not only to files but also to tabs. When designing can you please include feedback which was given as well in the following thread?
Please, let us DISABLE EDITING! at least for guests.... We have to have a VIEW ONLY option
john tullo commented
I was on vacation when the invitation to complete a survey for this idea as well as several others arrived and the survey period apparently was only two days so I missed them. Please allow more time in the future for surveys.
The permission control in the app is very poor or you have access or you haven't.
Jason W commented
O365 Global Admins should be able to approve potential apps & connectors. Right now the permission setting is either all open or everything closed, with no ability for admins to have a pre-approved list of apps & connectors that Team owners/members can use while restricting access to apps & connectors that the business doesn't want used.
kaustubh bhalerao commented
Hello Team, We need to add permission ability to the files uploaded too,
Ex: I am the owner of one of the team having 3 members including me,
1. I have uploaded a excel file but only me and 1st member should have full control and I need to provide only read only rights to 3rd.
If possible please try to add this option.
[Deleted User] commented
I would really like the "teams" team to have a look at permission handling in discord, because they have very in-depth permission controls (what roles can mention all, who can write in the channel, who can upload attachments etc.).
Agree with this. Would like the ability to grant permission on team and channel creation.
Lars Fosdal commented
IMO, Both Teams and Channels could use more permissions.
If you want to use a Team or channel for info purposes only - you would want to be able to limit who can post, and who can comment.
Jake Moore commented
100% agree. I have far too many top-level teams here. My main requirement is to keep 'channel' permissions separate to 'team' permissions but currently the only way to do this is to create a new top-level team which becomes overwhelmingly large when a new channel is created for each incident. If I could somehow either assign separate permissions (user access control lists?) to each channel then this would solve my problem.