SharePoint Permissions

A permission level (permission level: A set of permissions that can be recognized to users or SharePoint groups on an entity such as a site, library, list, folder, item, or document.) enables you to assign a particular set of permissions to users and SharePoint groups so that they can execute special actions on your site. By creating new permission levels (or editing existing permission levels) with the permissions required to perform common tasks, you can associate an appropriate permission level with the users or SharePoint groups for the securable object on which you want to allow them to perform those actions.

The following permission levels are provided by default: Full Control, Design, Contribute, Read, Limited Access. Anyone assigned to a permission level that includes the Manage Permissions permission can fully customize permission levels (except for the Full Control and Limited Access permission levels) or create new ones. Members of the Site Owners SharePoint group are assigned the Manage Permissions permission, by default.

Permission levels are managed at site level. Because of this, can perform the following tasks at the top level site of a collection of sites or any subsite that uses unique permissions. You can not manage permissions permissions on a subsite that is inheriting from his father. Instead, you must manage the permissions of the parent, or if you must first stop inheriting permissions from the parent site and then create unique permissions on the subside.

Managing permissions for a primary site involves not only the main site, but all subsites of that site genetic parents. Before you manage permissions on a parent site, think carefully how changes affect other sites.

Web Application User Permissions

The Web application is the source of all licenses. On the Application Management of Central Administration, click permissions "User for Web Applications" link. There, you can specify granular permissions to be available within the Web application. By default, all SharePoint permissions are available for a new SharePoint Web application, including the Add Items permission.